US 7,984,452 B2 · Event source management using a metadata-driven framework

Abstract

The system and method described herein relates to managing multiple network device connections, collecting event source data from one or more network devices with one or more collectors, filtering the event source data, continuously monitoring the network device connections, controlling raw data collection from the one or more network devices, parsing the event source data into normalized data structures, and managing configurations for the collectors, among other things. Event sources may be physical or logical network devices distributed across a network, including but not limited to, firewalls, routers, biometric devices, mainframes, databases, and applications. The network devices may be sources from which the collectors may receive or request the event source data.

Claims30

Dependent claims

A system for providing event source management using a metadata-driven framework, comprising:

one or more network devices;
a collector that includes a port configuration file and a collector script, wherein the collector is configured to:
open one or more communication ports to the one or more network devices with configuration information contained in the port configuration file;
collect event data from the one or more network devices via the one or more communication ports;
and
execute the collector script to parse the event data collected from the one or more network devices into a normalized data structure;
and
an agent engine that includes one or more processors configured to instantiate the collector, receive the parsed event data from the collector, and send the parsed event data to a collector manager.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

11/730,493Filed 2 Apr 2007 · us provisional application

Priority

10 Nov 2006

Published

US 2008/0114873 A115 May 2008

Granted

19 Jul 2011

Term ends

Not estimatedThe source records don’t support an estimate.

Classification17 codes

H04L 41/0613
Using filtering, e.g. reduction of information by using priority, element types, position or time: based on the type or category of the network…
G06F 9/542
Interprogram communication: event management; Broadcasting; Multicasting; Notifications
G06F 11/3065
Monitoring: monitoring arrangements determined by the means or processing involved in reporting the monitored data
G06F 11/3072
Monitoring arrangements determined by the means or processing involved in reporting the monitored data: where the reporting involves data…

Event source management using a metadata-driven framework

Life of this patent

Event source management using a metadata-driven framework

Life of this patent

Abstract

Claims30