Systems and methods for real-time monitoring of virtualized environments

A method comprising accessing computer-executable instructions from computer storage and executing the computer-executable instructions on at least one computer processor to cause computer hardware to perform operations comprising:

• monitoring capacity measurements of multiple hosts and multiple virtual machines on a computer network;
• receiving alerts that each indicate that an event has occurred in which at least one of the hosts or virtual machines has exceeded a set threshold for one of the capacity measurements for at least a set amount of time;
• correlating multiple events and performing a root cause analysis and a first impact analysis upon the correlated set of events, wherein the root cause analysis and first impact analysis include executing, for each of the alerts, a series of determinations in a decision tree that is defined for the specific type of alert that is being analyzed, so as to identify a root cause of the event associated with the alert and to identify other objects within the computer network that are impacted by the events;
• and
• generating a recommended response to mitigate a problem associated with the events, wherein generation of the recommended response includes performing a second impact analysis that determines what impact each of multiple potential responses would have upon the computer system.

A tangible computer-readable medium that stores thereon a plurality of computer-executable instructions configured, when executed by a computer processor, to cause computer hardware to perform operations comprising:

• monitoring capacity measurements of at least one host and at least one virtual machine on a computer network;
• receiving alerts that each indicate that an event has occurred in which at least one of the hosts or virtual machines has exceeded a set threshold for one of the capacity measurements for at least a set amount of time;
• correlating multiple events and performing a root cause analysis and a first impact analysis upon the correlated set of events, wherein the root cause analysis and first impact analysis include executing, for each of the alerts, a series of determinations in a decision tree that is defined for the specific type of alert that is being analyzed, so as to identify a root cause of the event associated with the alert and to identify other objects within the computer network that are impacted by the events;
• and
• generating a recommended response to mitigate a problem associated with the events, wherein generation of the recommended response includes performing a second impact analysis that determines what impact each of multiple potential responses would have upon the computer system and selecting as the recommended response a first potential response that would have a more positive impact than a second potential response.