System and method for managing alerts using a state machine
AssigneeNetScout Systems, Inc.
InventorsAmin Arshad Abdulghani, Chris Yongxing Liu, Sushma Sharma
Life of this patent
Estimating the term…
Abstract
A system and computer-implemented method to manage alerts, wherein the method includes receiving anomaly triggers associated with detected anomalies, associating an anomaly trigger of the received anomaly triggers with an alert, tracking the alert using a state machine, determining whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information, and generating an alarm based on the state of the state machine.
Claims20
A computer-implemented method for managing alerts comprising:
- receiving anomaly triggers associated with detected anomalies;
- associating an anomaly trigger of the received anomaly triggers with an alert;
- tracking the alert using a state machine;
- determining whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information;
- and
- generating an alarm based on the state of the state machine.
An analysis system for managing alerts comprising:
- a memory configured to store instructions;
- a processor disposed in communication with the memory, wherein the processor upon execution of the instructions is configured to:
- receive anomaly triggers associated with detected anomalies;
- associate an anomaly trigger of the received anomaly triggers with an alert;
- track the alert using a state machine;
- determine whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information;
- and
- generate an alarm based on the state of the state machine.
A non-transitory computer readable storage medium and one or more computer programs stored therein, the computer programs comprising instructions, which when executed by a computer system, cause the computer system to:
- receive anomaly triggers associated with detected anomalies;
- associate an anomaly trigger of the received anomaly triggers with an alert;
- track the alert using a state machine;
- determine whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information;
- and
- generate an alarm based on the state of the state machine.
Dependencies are inferred from the claim text.