Programmable diagnosis model for correlation of network events

A controller system for managing a device group of a network, the controller system comprising:

• a network interface;
• a memory;
• and
• processing circuitry in communication with the memory, the processing circuitry being configured to:
• form, using a programmable diagnosis service executed by the processing circuitry, a resource definition graph that models interdependencies between a plurality of resources supported by the device group, wherein to form the resource definition graph, the processing circuitry is configured to:
• form, using the programmable diagnosis service, a set of vertices corresponding to resource models for the plurality of resources, the resource models including service resource models and device resource models, each of the resource models specifying a state representing an operational state of one of the plurality of resources corresponding to the resource model;
• configure, using the programmable diagnosis service, edges between the vertices in the set of vertices according to cause-and-effect relationships between the resource models, the edges representing the interdependencies between the plurality of resources;
• and
• form, using the programmable diagnosis service, telemetry rules associated with the resource models, wherein the telemetry rules cause the programmable diagnosis service to collect state information representing the operational state of the plurality of resources, and to instigate one or more alarms in response to detecting threshold events occurring within the plurality of resources;
• instigate, using the programmable diagnosis service, an alarm associated with a first resource of the plurality of resources in response to detecting an event affecting the first resource;
• and
• identify, using the programmable diagnosis service, based on one or more of the edges connecting the resource model corresponding to the first resource to one or more other of the resource models, a root cause event that caused the event affecting the first resource, the root cause event occurring at a second resource of the plurality of resources.

A non-transitory computer-readable medium encoded with instructions that, when executed, cause processing circuitry of a controller device for managing a device group of a network to:

• form, using a programmable diagnosis service executed by the processing circuitry, a resource definition graph that models interdependencies between a plurality of resources supported by the device group, wherein the instructions that cause the processing circuitry to form the resource definition graph include instructions that cause the processing circuitry to:
• form, using the programmable diagnosis service, a set of vertices corresponding to resource models for the plurality of resources, the resource models including service resource models and device resource models, each of the resource models specifying a state representing an operational state of one of the plurality of resources corresponding to the resource model;
• configure, using the programmable diagnosis service, edges between the vertices in the set of vertices according to cause-and-effect relationships between the resource models, the edges representing the interdependencies between the plurality of resources;
• and
• form, using the programmable diagnosis service, telemetry rules associated with the resource models, wherein the telemetry rules cause the programmable diagnosis service to collect state information representing the operational state of the plurality of resources, and to instigate one or more alarms in response to detecting threshold events occurring within the plurality of resources;
• instigate, using the programmable diagnosis service, an alarm associated with a first resource of the plurality of resources in response to detecting an event affecting the first resource;
• and
• identify, using the programmable diagnosis service, based on one or more of the edges connecting the resource model corresponding to the first resource to one or more other of the resource models, a root cause event that caused the event affecting the first resource, the root cause event occurring at a second resource of the plurality of resources.