Methods and systems for discovering incidents through clustering of alert occurring in a data center

A computer system for discovering incidents through clusters of alerts occurring with objects executing in a data center, the computer system comprising:

• one or more processors;
• one or more data-storage devices;
• and
• machine-readable instructions stored in the one or more data-storage devices that when executed using the one or more processors control the system to performance operations comprising:
• getting alerts with start times in a sliding run-time window from an alerts database, each alert corresponding to a run-time event occurring with an object executing in the data center;
• detecting clusters of alerts in the sliding run-time window based on start times of the alerts and topological proximity of objects, each cluster of alerts corresponding to an incident occurring with objects executing in the data center;
• determining high priority alerts in the clusters of alerts based on types of alerts;
• and
• displaying discovered incidents associated with the clusters of alerts, events associated with the clusters of alerts, and high priority events in a graphical user interface (“GUI”).

A non-transitory computer-readable medium having instructions encoded thereon for enabling one or more processors of a computer system to perform operations comprising:

• getting alerts with start times in a sliding run-time window from an alerts database, each alert corresponding to a run-time event occurring with an object executing in the data center;
• detecting clusters of alerts in the sliding run-time window based on start times of the alerts and topological proximity of objects, each cluster of alerts corresponding to an incident occurring with objects executing in the data center;
• determining high priority alerts in the clusters of alerts based on types of alerts;
• and
• displaying discovered incidents associated with the clusters of alerts, events associated with the clusters of alerts, and high priority events in a graphical user interface (“GUI”).