Grouping alerts into bundles of alerts
AssigneeMicro Focus LLC
InventorsTomasz Jaroslaw Bania, William G. Horne, Renato Keshet, Pratyusa K. Manadhata, Manish Marwah, Brent James Miller, Barak Raz, Tomas Sander
Life of this patent
Estimating the term…
Abstract
In some examples, a plurality of alerts relating to issues in a computing arrangement are received, where the plurality of alerts generated based on events in the computing arrangement. A subset of the plurality of alerts is grouped into a bundle of alerts, the grouping being based on a criterion. The bundle of alerts is communicated to cause processing of the alerts in the bundle of alerts together.
Claims19
A non-transitory machine-readable storage medium storing instructions that upon execution cause a system to:
- receive a plurality of alerts relating to issues in a computing arrangement, the plurality of alerts generated based on events in the computing arrangement;
- group a subset of the plurality of alerts into a bundle of alerts, the grouping being based on a criterion, wherein grouping the subset of the plurality of alerts into the bundle of alerts based on the criterion comprises grouping the subset of the plurality of alerts according to a comparison of behavioral profiles of respective alerts of the plurality of alerts;
- and
- trigger processing of the alerts in the bundle of alerts together to address the issues.
A system comprising:
- a processor;
- and
- a non-transitory storage medium storing instructions executable on the processor to:
- receive event data relating to a plurality of events corresponding to operation of a computing arrangement;
- generate a plurality of alerts in response to respective events of the plurality of events;
- select, based on a similarity criterion, a subset of the plurality of alerts, and grouping the selected subset of the plurality of alerts into a bundle of alerts, wherein the selecting of the subset of the plurality of alerts that is included in the bundle of alerts is based on the similarity criterion comprising similarity of criticalities of assets impacted by the alerts of the plurality of alerts;
- and
- trigger processing of the bundle of alerts to address respective issues in the computing arrangement.
A method of a system comprising a computer processor, comprising:
- receiving a plurality of alerts relating to issues in a computing arrangement, the plurality of alerts generated based on events in the computing arrangement;
- grouping a subset of the plurality of alerts into a bundle of alerts, the grouping being based on a grouping criterion that specifies grouping of alerts according to a comparison of behavioral profiles of respective alerts of the plurality of alerts, each behavioral profile of the behavioral profiles comprising a variation of values of a measure as a function of a variable;
- identifying related information for the bundle of alerts based on a related information identification criterion;
- communicating the bundle of alerts and the identified related information for the bundle of alerts;
- and
- in response to the communicating of the bundle of alerts and the identified related information for the bundle of alerts, triggering processing of the alerts in the bundle of alerts together to address the issues.
Dependencies are inferred from the claim text.