Apparatus and method for analyzing and correlating events in a system using a causality matrix
AssigneeSystem Management Arts, Inc.
InventorsYechiam Yemini, Shaula Yemini, Shmuel Kliger
Life of this patent
Estimating the term…
Loading patent…
AssigneeSystem Management Arts, Inc.
InventorsYechiam Yemini, Shaula Yemini, Shmuel Kliger
Estimating the term…
An apparatus and method is provided for efficiently determining the source of problems in a complex system based on observable events. The problem identification process is split into two separate activities of (1) generating efficient codes for problem identification and (2) decoding the problems at runtime. Various embodiments of the invention contemplate creating a causality matrix which relates observable symptoms to likely problems in the system, reducing the causality matrix into a minimal codebook by eliminating redundant or unnecessary information, monitoring the observable symptoms, and decoding problems by comparing the observable symptoms against the minimal codebook using various best-fit approaches. The minimal codebook also identifies those observable symptoms for which the greatest benefit will be gained if they were monitored as compared to others. By defining a distance measure between symptoms and codes in the codebook, the invention can tolerate a loss of symptoms or spurious symptoms without failure. Changing the radius of the codebook allows the ambiguity of problem identification to be adjusted easily. The invention also allows probabilistic and temporal correlations to be monitored.
A computer-implemented method for use in analyzing events in a system having a plurality of components arranged in a particular configuration, each component belonging to one of a plurality of component classes, the method comprising the steps of:
Apparatus for use in analyzing events in a system having a plurality of components arranged in a particular configuration, each component belonging to one of a plurality of component classes, the apparatus comprising:
A computer-implemented method for use in analyzing events in a system having a plurality of components arranged in a particular configuration, each component belonging to one of a plurality of component classes, the method comprising the steps of:
A machine programmed with a computer program which receives (i) a set of events which can occur for each of a plurality of classes of components in a system independently of any particular configuration of the system, (ii) a set of propagations of events across one or more component classes in the system independent of any particular configuration of the system, and (iii) a configuration specification which defines a particular system configuration, wherein the computer program converts the set of events and the set of propagations of events into a causality mapping on the basis of the particular system configuration, wherein the causality mapping comprises a mapping between events in the system and likely causes thereof.
A computer-implemented method for use in analyzing events in a system having a plurality of components arranged in a particular configuration, each component belonging to one of a plurality of component classes, the method comprising the steps of:
Dependencies are inferred from the claim text.