# US 11,907,087 B2 · Remote health monitoring in data replication environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,907,087 B2 - Document ID: US11907087B2 - Status: Granted - Kind: B2 - Application number: 16/507,809 - Filed: 2019-07-10 - Published: 2021-01-14 - Granted: 2024-02-20 - Earliest claimed: 2019-07-10 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: David C. Reed; Philip R. Chauvet; Esteban Rios; Thomas C. Reed - Web page: https://patentgrep.com/patent/US11907087B2 ## CPC - G06F 11/2069: {Management of state, configuration or failover} - G06F 11/3006: {where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)} - G06F 3/0614: {Improving the reliability of storage systems} - G06F 3/0619: {in relation to data integrity, e.g. data losses, bit errors} - G06F 3/065: {Replication mechanisms} - G06F 3/0653: {Monitoring storage devices or systems} - G06F 3/067: {Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]} - G06F 11/3055: {Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available (error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction of the data by redundancy in operations G06F11/14; error detection or correction by redundancy in hardware G06F11/16)} - G06F 11/3476: {Data logging (G06F11/14, G06F11/2205 take precedence)} - G06F 2201/86: Event-based monitoring - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method for more effectively utilizing computing resources in a data replication environment is disclosed. In one embodiment, such a method detects, at a primary system, activity occurring on the primary system. This activity is recorded in systems logs located at the primary system. The method automatically mirrors the system logs from the primary system to a secondary system that is in a mirroring relationship with the primary system. The system logs are analyzed at the secondary system. In the event abnormal activity is detected in the system logs at the secondary system, the method automatically sends, from the secondary system to the primary system, one or more commands that are designed to address the abnormal activity. A corresponding system and computer program product are also disclosed. ## Claims ### Claim 1 A method for more effectively utilizing computing resources in a data replication environment, the method comprising: detecting, at a primary system, activity occurring on the primary system; recording the activity in system logs located at the primary system; using a data replication system with failover capability, automatically mirroring the system logs from the primary system to a secondary system to maintain two consistent copies of the system logs across the primary system and the secondary system; analyzing the system logs at the secondary system; in response to detecting abnormal activity in the system logs at the secondary system, sending, from the secondary system to the primary system, at least one command that is designed to trigger collection of additional data on the primary system that is needed to determine a cause of the abnormal activity; and in response to collecting the additional data, using the data replication system to mirror the additional data from the primary system to the secondary system for analysis on the secondary system to determine the cause of the abnormal activity. ### Claim 2 (depends on 1) The method of claim 1, wherein the additional data comprises storage dumps. ### Claim 3 (depends on 1) The method of claim 1, wherein the additional data comprises state saves. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one command is also configured to tune the primary system. ### Claim 5 (depends on 1) The method of claim 1, wherein the at least one command is also configured to cancel a job on the primary system. ### Claim 6 (depends on 1) The method of claim 1, wherein analyzing the system logs comprises writing results of the analysis to a volume on the secondary system that is not a target of data mirroring. ### Claim 7 (depends on 1) The method of claim 1, further comprising observing the activity occurring on the primary system over a period of time to determine what is considered abnormal activity. ### Claim 8 A computer program product for more effectively utilizing computing resources in a data replication environment, the computer program product comprising a computer-readable storage medium having computer-usable program code embodied therein, the computer-usable program code configured to perform the following when executed by at least one processor: detect activity occurring on a primary system; record the activity in system logs located at the primary system; using a data replication system with failover capability, automatically mirror the system logs from the primary system to a secondary system to maintain two consistent copies of the system logs across the primary system and the secondary system; analyze the system logs at the secondary system; in response to detecting abnormal activity in the system logs at the secondary system, send, from the secondary system to the primary system, at least one command that is designed to trigger collection of additional data on the primary system that is needed to determine a cause of the abnormal activity; and in response to collecting the additional data, using the data replication system to mirror the additional data from the primary system to the secondary system for analysis on the secondary system to determine the cause of the abnormal activity. ### Claim 9 (depends on 8) The computer program product of claim 8, wherein the additional data comprises storage dumps. ### Claim 10 (depends on 8) The computer program product of claim 8, wherein the additional data comprises state saves. ### Claim 11 (depends on 8) The computer program product of claim 8, wherein the at least one command is also configured to tune the primary system. ### Claim 12 (depends on 8) The computer program product of claim 8, wherein the at least one command is also configured to cancel a job on the primary system. ### Claim 13 (depends on 8) The computer program product of claim 8, wherein analyzing the system logs comprises writing results of the analysis to a volume on the secondary system that is not a target of data mirroring. ### Claim 14 (depends on 8) The computer program product of claim 8, wherein the computer-usable program code is further configured to observe the activity occurring on the primary system over a period of time to determine what is considered abnormal activity. ### Claim 15 A system for more effectively utilizing computing resources in a data replication environment, the system comprising: at least one processor; at least one memory device coupled to the at least one processor and storing instructions for execution on the at least one processor, the instructions causing the at least one processor to: detect activity occurring on a primary system; record the activity in system logs located at the primary system; using a data replication system with failover capability, automatically mirror the system logs from the primary system to a secondary system to maintain two consistent copies of the system logs across the primary system and the secondary system; analyze the system logs at the secondary system; in response to detecting abnormal activity in the system logs at the secondary system, send, from the secondary system to the primary system, at least one command that is designed to trigger collection of additional data on the primary system that is needed to determine a cause of the abnormal activity; and in response to collecting the additional data, using the data replication system to mirror the additional data from the primary system to the secondary system for analysis on the secondary system to determine the cause of the abnormal activity. ### Claim 16 (depends on 15) The system of claim 15, wherein the additional data comprises storage dumps. ### Claim 17 (depends on 15) The system of claim 15, wherein the additional data comprises state saves. ### Claim 18 (depends on 15) The system of claim 15, wherein the at least one command is also configured to tune the primary system. ### Claim 19 (depends on 15) The system of claim 15, wherein the at least one command is also configured to cancel a job on the primary system. ### Claim 20 (depends on 15) The system of claim 15, wherein analyzing the system logs comprises writing results of the analysis to a volume on the secondary system that is not a target of data mirroring.