Proactive problem detection using alert data and incident data
AssigneeServiceNow, Inc.
InventorEugene Shtilkind
Life of this patent
Estimating the term…
Abstract
In various embodiments, a process for proactive problem detection using alert data and incident data includes receiving machine-generated alerts of an information technology environment and receiving user-specified incidents of the information technology environment. The process includes combining the machine-generated alerts and the user-specified incidents into a combined group, clustering elements of the combined group into one or more component clusters, and determining a relative priority between the one or more component clusters based on one or more properties of corresponding elements belonging to the one or more component clusters.
Claims20
A method, comprising:
- receiving machine-generated alerts of an information technology environment;
- receiving user-specified incidents of the information technology environment;
- combining the machine-generated alerts and the user-specified incidents into a combined group;
- clustering elements of the combined group into one or more component clusters;
- and
- determining a relative priority between the one or more component clusters based on one or more properties of corresponding elements belonging to the one or more component clusters.
A system, comprising:
- a processor configured to:
- receive machine-generated alerts of an information technology environment;
- receive user-specified incidents of the information technology environment;
- combine the machine-generated alerts and the user-specified incidents into a combined group;
- cluster elements of the combined group into one or more component clusters;
- and
- determine a relative priority between the one or more component clusters based on one or more properties of corresponding elements belonging to the one or more component clusters;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- receiving machine-generated alerts of an information technology environment;
- receiving user-specified incidents of the information technology environment;
- combining the machine-generated alerts and the user-specified incidents into a combined group;
- clustering elements of the combined group into one or more component clusters;
- and
- determining a relative priority between the one or more component clusters based on one or more properties of corresponding elements belonging to the one or more component clusters.
Dependencies are inferred from the claim text.