Network monitoring apparatus, method, and program

A network monitoring method executed by an information processing apparatus including a processor and a storage medium, the network monitoring method comprising:

• collecting, from network apparatuses of a network, a plurality of event information of events occurring in one or more of the network apparatuses;
• processing an input comprising the collected event information using a machine-learning model to determine a set of combination rules, wherein each combination rule specifies a respective occurrence sequence of events to be monitored, and the machine-learning model has been trained using training examples of past network events and causes or resolutions of the past network events;
• extracting a combination of event information of a set of events occurring within a predetermined unit time from the collected event information;
• determining, by collating the extracted combination of event information with each of the combination rules, whether or not the extracted combination of event information and an occurrence sequence of the set of events match the occurrence sequence of the events specified to be monitored in the combination rule;
• and
• changing, in accordance with a determination in the determining that the extracted combination of event information and the occurrence sequence of the set of events match the occurrence sequence of the events specified to be monitored in the combination rule, the extracted combination of event information to new event information;
• wherein the set of combination rules comprise a first combination rule that specifies an occurrence sequence of repetitions of link down followed by link up events to be monitored, and the network monitoring method comprises changing, in accordance with a determination that the extracted combination of event information and the occurrence sequence of the set of events match the occurrence sequence of the repetitions of link down followed by link up events to be monitored in the first combination rule, the extracted combination of event information to new event information of natural restoration.

A non-transitory computer readable medium storing a program to cause a processor of a network monitoring apparatus to perform:

• collecting, from network apparatuses of a network, a plurality of event information of events occurring in one or more of the network apparatuses;
• processing an input comprising the collected event information using a machine-learning model to determine a set of combination rules, wherein each combination rule specifies a respective occurrence sequence of events to be monitored, and the machine-learning model has been trained using training examples of past network events and causes or resolutions of the past network events;
• extracting a combination of event information of a set of events occurring within a predetermined unit time from the collected event information;
• determining, by collating the extracted combination of event information with each of the combination rules, whether or not the extracted combination of event information and an occurrence sequence of the set of events match the occurrence sequence of the events specified to be monitored in the combination rule;
• and
• changing, in accordance with a determination in the determining that the extracted combination of event information and the occurrence sequence of the set of events the occurrence sequence of the events specified to be monitored in the combination rule, the extracted combination of event information to new event information;
• wherein the set of combination rules comprise a first combination rule that specifies an occurrence sequence of repetitions of link down followed by link up events to be monitored, and the network monitoring method comprises changing, in accordance with a determination that the extracted combination of event information and the occurrence sequence of the set of events match the occurrence sequence of the repetitions of link down followed by link up events to be monitored in the first combination rule, the extracted combination of event information to new event information of natural restoration.