Method and system to correlate a specific alarm to one or more events to identify a possible cause of the alarm
AssigneeProactiveNet, Inc.
InventorsRonald Alexander LeFaive, Sridhar Sodem, Joe Scarpelli, Daniel Ketcham, Atul Garg
Life of this patent
Estimating the term…
Abstract
A system is provided to monitor network performances. The system maintains a database of performance abnormalities, alarms and events from a system of monitored elements. The system automatically identifies a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database. The system displays the cause of the specific alarm. The database includes alarms and events of network devices, network systems, and network applications. The specific alarm consists of a notification of an occurrence of the plurality of events.
Claims57
A method of monitoring network performance comprising:
- maintaining a database of alarms and events from a system of monitored elements;
- and
- automatically identifying a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein automatically identifying the possible cause comprises:
- (1) analysis of performance abnormalities and at least one of an event or alert;
- (2) statistical correlation;
- (3) elimination of unrelated causes;
- (4) user defined groupings;
- and,
- (5) relative weightings of monitored elements.
A network performance monitor comprising:
- a database maintenance module to maintain a database of alarms and events from a system of monitored elements;
- an alarm cause identification module coupled to the database maintenance module, wherein the alarm cause identification module is configured to automatically identify a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein the alarm cause identification module automatically identifies a possible cause based on (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements.
A network performance monitor comprising:
- means for maintaining a database of alarms and events from a system of monitored elements;
- and
- means for automatically identifying a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein the means for automatically identifying a possible cause comprises means for (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements.
A computer readable medium, the medium having stored thereon a sequence of instructions which, when executed by a processor, cause the processor to:
- collect a database of alarms and events from a system of monitored elements;
- and
- automatically identify a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein automatically identifying a possible cause comprises (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements.
Dependencies are inferred from the claim text.