# US 7,613,714 B2 · Systems and methods for analyzing a stream of data records relating to electronic data processing performance > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,613,714 B2 - Document ID: US7613714B2 - Status: Granted - Kind: B2 - Application number: 11/743,025 - Filed: 2007-05-01 - Published: 2007-11-08 - Granted: 2009-11-03 - Earliest claimed: 2006-05-02 - Assignees: NetScout Systems, Inc. - Inventors: Ronald G. Hiller; Armin Arshad Abdulghani; Vitaliy Fuks; Shreekala Kekuda - Web page: https://patentgrep.com/patent/US7613714B2 ## CPC - H04L 12/1868: {Measures taken after transmission, e.g. acknowledgments} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Disclosed methods and systems create channels from a stream of data records relating to electronic data processing system performance. Each data record includes the attribute value for each of a plurality of attributes related to the electronic data processing system. A channel is created for each unique value of a selected attribute or each unique combination of values for a plurality of selected values. Each channel is analyzed to determine if it meets at least one criterion. The unique value or combination of values of a channel meeting the at least one criterion is reported. The foregoing steps may be repeated using the results of previous steps. At least once, a channel is created for each unique combination of attribute values for a plurality of selected attributes. ## Claims ### Claim 1 A method for analyzing a stream of data records relating to electronic data processing system performance, wherein each data record includes an attribute value for each of a plurality of attributes of an electronic data processing system, the method comprising: creating, from the stream, a channel of data records for each attribute value of a set of attributes having as a member at least one attribute, thereby creating a first set of channels; analyzing each channel in the first set of channels to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the attribute value of each member of the set of attributes associated with each channel in the set of first criterion meeting channels; creating a set of first criterion meeting attribute value combination channels by using the set of first criterion meeting channels to identify each channel of data records therein having a unique combination of attribute values of a first attribute and a second attribute and meeting the first criterion; and reporting the unique combination of attribute values of the first attribute and the second attribute associated with each channel in the set of first criterion meeting attribute value combination channels. ### Claim 2 (depends on 1) The method of claim 1, wherein analyzing a first channel in the first set of channels and analyzing a second channel in the first set of channels occur simultaneously. ### Claim 3 (depends on 1) The method of claim 1, wherein the at least one attribute comprises the first attribute. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one attribute comprises the first attribute and the second attribute such that a channel in the first set includes data records having a unique combination of attribute values of the first attribute and the second attribute. ### Claim 5 (depends on 1) The method of claim 1, wherein analyzing each channel in the first set to identify each channel meeting a first criterion further comprises: analyzing a first measured value in the data records in a first channel in the first set to determine if the first channel meets the first criterion; and analyzing a second measured value in the data records in the first channel in the first set to determine if the first channel meets a third criterion. ### Claim 6 (depends on 1) The method of claim 1, further comprising, prior to creating the set of first criterion meeting attribute value combination channels, creating, from the stream, a channel of data records for each attribute value of a third attribute thereby creating a third set of channels; analyzing each channel in the third set to identify each channel meeting a third criterion, thereby creating a set of third criterion meeting channels; and reporting the attribute value of the third attribute for each channel in the set of third criterion meeting channels. ### Claim 7 (depends on 1) The method of claim 1, wherein a number of attribute values of a selected attribute in the stream varies over time. ### Claim 8 (depends on 1) The method of claim 1, wherein each data record includes an attribute value for each of a plurality of attributes of a network and at least one measured value related to network performance. ### Claim 9 (depends on 8) The method of claim 8, wherein the plurality of attributes includes a link identifier and an application identifier. ### Claim 10 (depends on 1) The method of claim 1, wherein each data record includes an attribute value for each of a plurality of attributes of a computer and at least one measured value related to computer performance. ### Claim 11 (depends on 1) The method of claim 1, wherein creating the set of first criterion meeting attribute value combination channels further comprises: creating a second set of channels for data records for each attribute value of the second attribute; and using the second set of channels to identify each channel, in the set of first criterion meeting channels, having the unique combination of attribute values and meeting the first criterion. ### Claim 12 (depends on 11) The method of claim 11, wherein creating the first set of channels and creating the second set of channels occur simultaneously, and wherein creating the set of first criterion meeting attribute value combination channels further comprises comparing the set of first criterion meeting channels and the second set of channels to identify channels that are common to both sets, and developing the set of first criterion meeting attribute value combination channels therefrom. ### Claim 13 (depends on 1) The method of claim 1, wherein creating the set of first criterion meeting attribute value combination channels further comprises: creating a second set of channels for data records for each attribute value of the second attribute; and analyzing each channel in the second set of channels to identify each channel meeting a second criterion, to create a set of second criterion meeting channels, and analyzing the set of second criterion meeting channels and the set of first criterion meeting channels to identify each channel having the unique combination of attribute values and meeting the first criterion and the second criterion, thereby creating a set of first and second criteria meeting attribute value combination channels; and wherein reporting the unique combination of attribute values further comprises reporting the unique combination of attribute values of the first attribute and the second attribute associated with each channel in the set of first and second criteria meeting attribute value combination channels. ### Claim 14 (depends on 1) The method of claim 1, wherein creating the first set of channels further comprises creating the channels from the stream of data records. ### Claim 15 (depends on 1) The method of claim 1, wherein the stream of data records comprises a stream of measurement records relating to electronic data processing, wherein each measurement record includes an attribute value for each of a plurality of attributes of the electronic data processing system. ### Claim 16 A computer-readable medium comprising instructions to configure a computer to execute a method for analyzing a stream of data records relating to electronic data processing system performance, wherein each of the data records includes an attribute value for each of a plurality of attributes of the electronic data processing system, the method comprising: creating, from the stream, a channel of data records for each attribute value of at least one attribute, thereby creating a first set of channels; analyzing each channel in the first set to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the value of each at least one attribute for each channel in the set of first criterion meeting channels; creating a set of first criterion meeting attribute value combination channels by using the set of first criterion meeting channels to identify each channel of data records therein having a unique combination of attribute values of a first attribute and a second attribute and meeting the first criterion, and reporting the unique combination of attribute values of the first attribute and the second attribute for each channel in the set of first criterion meeting attribute value combination channels. ### Claim 17 (depends on 16) The computer-readable medium of claim 16, wherein the stream of data records comprises a stream of measurement records relating to electronic data processing, wherein each measurement record includes an attribute value for each of a plurality of attributes of the electronic data processing system. ### Claim 18 A system for analyzing a stream of data records relating to electronic data processing system performance, wherein each data record includes an attribute value for each of a plurality of attributes of the electronic data processing system, comprising: memory; and a processor, wherein the memory and processor are configured to perform a method comprising: creating, from the stream, a channel of data records for each attribute value of at least one attribute thereby creating a first set of channels; analyzing each channel in the first set to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the value of each at least one attribute for each channel in the set of first criterion meeting channels; creating a set of first criterion meeting attribute value combination channels by using the set of first criterion meeting channels to identify each channel of data records therein having a unique combination of attribute values of a first attribute and a second attribute and meeting the first criterion; and reporting the unique combination of attribute values of the first attribute and the second attribute for each channel in the set of first criterion meeting attribute value combination channels. ### Claim 19 (depends on 18) The system of claim 18, wherein the stream of data records comprises a stream of measurement records relating to electronic data processing, wherein each measurement record includes an attribute value for each of a plurality of attributes of the electronic data processing system. ### Claim 20 A method for analyzing a stream of data records relating to electronic data processing system performance, wherein each of the data records includes an attribute value for a plurality of attributes of the electronic data processing system, the method comprising: creating, from the stream, a channel of data records for each unique combination of attribute values of a first attribute and a second attribute, thereby creating a first set of channels such that a channel in the first set includes data records having a unique combination of attribute values of the first attribute and the second attribute; analyzing each channel in the first set to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the unique combination of attribute values of the first attribute and the second attribute for each channel in the set of first criterion meeting channels; creating, from the first set of first criterion meeting channels, a channel of data records for each attribute value of at least one attribute, thereby creating a second set of channels; analyzing each channel in the second set to identify each channel meeting a second criterion, thereby creating a set of first and second criteria meeting channels; and reporting the attribute value of each of the at least one attribute for each channel in the set of first and second criteria meeting channels. ### Claim 21 A computer-readable medium comprising instructions to configure a computer to execute a method for analyzing a stream of data records relating to electronic data processing system performance, wherein each of the data records includes an attribute value for a plurality of attributes of the electronic data processing system, the method comprising: creating, from the stream, a channel of data records for each unique combination of values of a first attribute and a second attribute, thereby creating a first set of channels such that a channel in the first set includes data records having a unique combination of attribute values of the first attribute and the second attribute; analyzing each channel in the first set to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the unique combination of values of the first attribute and the second attribute for each channel in the set of first criterion meeting channels; creating, from a channel in the set of first criterion meeting channels, a channel of data records for each attribute value of at least one attribute, thereby creating a second set of channels; analyzing each channel in the second set to identify each channel meeting a second criterion, thereby creating a set of first and second criteria meeting channels; and reporting the attribute value of each of the at least one attribute for each channel in the set of first and second criteria meeting channels. ### Claim 22 A system for analyzing a stream of data records relating to electronic data processing system performance, wherein each data record includes a value for a plurality of attributes of the electronic data processing system, comprising: memory; and a processor, wherein the memory and processor are configured to perform a method comprising: creating, from the stream, a channel of data records for each unique combination of values of a first attribute and a second attribute, thereby creating a first set of channels such that a channel in the first set includes data records having a unique combination of values of the first attribute and the second attribute; analyzing each channel in the first set to identify each channel meeting a first criterion, thereby creating a set of first criterion meeting channels; reporting the unique combination of values of the first attribute and the second attribute for each channel in the set of first criterion meeting channels; creating, from a channel in the set of first criterion meeting channels, a channel of data records for each value of at least a third attribute, thereby creating a second set of channels; analyzing each channel in the second set to identify each channel meeting a second criterion, thereby creating a set of first and second criteria meeting channels; and reporting the value of each of the at least third attribute for each channel in the set of first and second criteria meeting channels. ### Claim 23 (depends on 1) The method of claim 1, wherein analyzing each channel in the first set of channels further comprises identifying an outcome of the analyzing; and further comprising choosing the second attribute based on the outcome.