Methods, apparatus and articles of manufacture to perform root cause analysis for network events
AssigneeAT&T Intellectual Property I, L.P.
InventorsZihui Ge, Dan Pei, Jennifer Yates, He Yan
Life of this patent
Estimating the term…
Abstract
Example methods, apparatus and articles of manufacture to perform root cause analysis for network events are disclosed. An example method includes retrieving a symptom event instance from a normalized set of data sources based on a symptom event definition; generating a set of diagnostic events from the normalized set of data sources which potentially cause the symptom event instance, the diagnostic events being determined based on dependency rules; and analyzing the set of diagnostic events to select a root cause event based on root cause rules.
Claims20
A method of determining a root cause of a network problem, comprising:
- normalizing a set of events from data sources to form a normalized set;
- retrieving a symptom event instance from the normalized set based on a symptom event definition;
- generating a set of diagnostic events from the normalized set which potentially cause the symptom event instance, the diagnostic events being identified based on dependency rules, the dependency rules including a spatial model to identify diagnostic events which have locations related to the symptom event instance;
- and
- analyzing the set of diagnostic events to select a root cause event based on root cause rules.
An apparatus to determine a root cause of a network problem, comprising:
- a data gatherer to gather data related to network events and to normalize the network events to form a normalized set;
- a join finder to identify a set of diagnostic events joined to a symptom network event within the normalized set, the join finder using a spatial model to identify diagnostic events which have a physical location related to the symptom network event;
- and
- a root cause identifier to identify a root cause event of the symptom network event based on the set of diagnostic events.
A tangible computer readable medium storing instructions which when executed cause a machine to at least:
- normalize a set of events from data sources to form a normalized set;
- retrieve a symptom event instance from the normalized set based on a symptom event definition;
- generate a set of diagnostic events from the normalized set which potentially cause the symptom event instance, the diagnostic events being identified based on a spatial model to identify diagnostic events which have locations related to the symptom event instance and timestamps for events of the normalized set;
- and
- analyze the set of diagnostic events to select a root cause event based on root cause rules.
Dependencies are inferred from the claim text.