Using and Updating Topological Relationships Amongst a Set of Nodes in Event Clustering

A method, comprising:

• identifying a plurality of events that occur on a set of nodes in a computing environment;
• determining a first cluster of related events, from the plurality of events, based on an existing set of topological relationships associated with the set of nodes;
• determining that there is event co-occurrence between (a) one or more events of the first cluster of related events and (b) a first event that is not within the first cluster of related events;
• based at least on the event co-occurrence between (a) the one or more events of the first cluster of related events and (b) the first event:
• determining an event-based topological relationship between (a) a first node, of the set of nodes, that is associated with at least one event of the first cluster of related events and (b) a second node, of the set of nodes, that is associated with the first event but not associated with any event of the first cluster of related events;
• identifying a second event that is associated with the first node;
• identifying a third event, not already within the plurality of events, that is associated with the second node;
• and
• based at least on the event-based topological relationship:
• clustering the second event and the third event into a second cluster of related events;
• wherein the method is performed by at least one device including a hardware processor.

A system, comprising:

• at least one device including a hardware processor;
• and
• the system being configured to perform operations comprising:
• identifying a plurality of events that occur on a set of nodes in a computing environment;
• determining a first cluster of related events, from the plurality of events, based on an existing set of topological relationships associated with the set of nodes;
• determining that there is event co-occurrence between (a) one or more events of the first cluster of related events and (b) a first event that is not within the first cluster of related events;
• based at least on the event co-occurrence between (a) the one or more events of the first cluster of related events and (b) the first event:
• determining an event-based topological relationship between (a) a first node, of the set of nodes, that is associated with at least one event of the first cluster of related events and (b) a second node, of the set of nodes, that is associated with the first event but not associated with any event of the first cluster of related events;
• identifying a second event that is associated with the first node;
• identifying a third event, not already within the plurality of events, that is associated with the second node;
• and
• based at least on the event-based topological relationship:
• clustering the second event and the third event into a second cluster of related events.