Adjusting Sliding Window Parameters in Intelligent Event Archiving and Failure Analysis

A computer program product in a computer-readable medium comprising a computer usable medium having computer usable program code, wherein the computer usable program code, when loaded into the internal memory of a processing device, causes the processing device to:

• log an executing application in real time;
• retain real-time log data from logging the executing application in a temporary memory, the temporary memory capable of retaining an amount of real-time log data for a specified time window;
• notice the occurrence of a first event at a first time from the real-time log data;
• anticipate a future event in a future time;
• and
• extend the specified time window for the amount of real-time log data retained in the temporary window from before or at the first time to the future time.

An autonomic data processing system, comprising:

• a first data processing device executing an application;
• a second data processing device executing a logging application to obtain real-time log data of the executing application in the first data processing device;
• a temporary memory to receive the real-time log data of the executing application from the logging application;
• an event correlation engine connected to the logging application;
• a window resizing module connected to the logging application and to the event correlation engine and to the temporary memory wherein when the logging application records and communicates an event occurring in the real-time log data of the executing application to the event correlation engine, the event correlation engine recognizes the event as being part of a symptom having a time duration, the event correlation engine communicates to the window-resizing module to increase the amount of real-time log data retained in the temporary memory from the time of the event to include at least the time duration of the symptom.