Back to results
US 12,748,651 B1Granted
Identifying and responding to incidents within a system using an impacted services dependency graph
AssigneeCisco Technology, Inc.
InventorsAmol Manohar Chaudhari, Giovanni Mola, Utpal Thakrar
Life of this patent
Estimating the term…
Abstract
An incident arising within a user system is analyzed to determine services directly or indirectly impacted by the incident. One or more responders are also determined for the incident based on user skill sets and details of the incident. The impacted services and the determined responders are then used to determine an impact of the incident within the user system, and a response to the incident may be prepared based on the impact. Response scheduling data may also be automatically prepared for the determined responders to minimize a mean time to resolution (MTTR) for the incident.
Claims20
A computer-implemented method, comprising:
- receiving and processing, at one or more computing systems, data from monitored components that include hardware components and software components that execute on different computing resources that perform different services deployed within a distributed computing environment;
- programmatically generating alert data and a plurality of ingested spans and a plurality of traces from the data, wherein each of the plurality of traces is a collection of actions, or spans, that occur to complete a transaction;
- constructing an impacted services dependency graph by identifying interrelationships and dependencies between services extracted from the plurality of traces to provide full-fidelity access to the spans and traces;
- detecting, by a computer system, an occurrence of an incident within a client system based, at least in part, on a programmatic analysis of the impacted services dependency graph and the plurality of traces;
- calculating, by the computer system, a response to the incident and one or more responders included within the response to the incident, based on metadata associated with the incident;
- determining, by the computer system, a schedule for the response to the incident, based on the response to the incident, the one or more responders included within the response, and calendar data for the client system and the one or more responders;
- and
- implementing, by the computer system, the schedule.
5 more elements
A system comprising:
- one or more processors configured to:
- receive and process data from monitored components that include hardware components and software components that execute on different computing resources that perform different services deployed within a distributed computing environment;
- programmatically generate alert data and a plurality of ingested spans and a plurality of traces, wherein each of the plurality of traces is a collection of actions, or spans, that occur to complete a transaction;
- construct an impacted services dependency graph by identifying interrelationships and dependencies between services extracted from the plurality of traces to provide full-fidelity access to the spans and traces;
- detect an occurrence of an incident within a client system based, at least in part, on a programmatic analysis of the impacted services dependency graph and the plurality of traces;
- calculate a response to the incident and one or more responders included within the response to the incident, based on metadata associated with the incident;
- determine a schedule for the response to the incident, based on the response to the incident, the one or more responders included within the response, and calendar data for the client system and the one or more responders;
- and
- implement the schedule.
6 more elements
A non-transitory computer-readable medium storing a set of instructions, the set of instructions when executed by one or more processors cause processing to be performed comprising:
- receiving and processing, at one or more computing systems, data from monitored components that include hardware components and software components that execute on different computing resources that perform different services deployed within a distributed computing environment;
- programmatically generating alert data and a plurality of ingested spans and a plurality of traces, wherein each of the plurality of traces is a collection of actions, or spans, that occur to complete a transaction;
- constructing an impacted services dependency graph by identifying interrelationships and dependencies between services extracted from the plurality of traces to provide full-fidelity access to the spans and traces;
- detecting an occurrence of an incident within a client system based, at least in part, on a programmatic analysis of the impacted services dependency graph and the plurality of traces;
- calculating a response to the incident and one or more responders included within the response to the incident, based on metadata associated with the incident;
- determining a schedule for the response to the incident, based on the response to the incident, the one or more responders included within the response, and calendar data for the client system and the one or more responders;
- and
- implementing the schedule.
5 more elements
Dependencies are inferred from the claim text.