# US 8,751,623 B2 · Reduction of alerts in information technology systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,751,623 B2 - Document ID: US8751623B2 - Status: Granted - Kind: B2 - Application number: 13/739,123 - Filed: 2013-01-11 - Published: 2013-05-23 - Granted: 2014-06-10 - Earliest claimed: 2011-04-08 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Abhijit Bose; Winnie W. Cheng; Shang Q. Guo; Sang K. Kim; Laura Z. Luan; Dennis A. Perpetua; Daniela Rosu; Mithkal M. Smadi - Web page: https://patentgrep.com/patent/US8751623B2 ## CPC - H04L 41/50: Network service management, e.g. ensuring proper service fulfilment according to agreements - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/076: {by exceeding a count or rate limit, e.g. word- or bit count limit} - G06F 11/3006: {where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)} - G06F 11/3072: {where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting} - G06F 11/3476: {Data logging (G06F11/14, G06F11/2205 take precedence)} - G06F 11/3495: {for systems} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Aspects of the present invention dynamically reduce a frequency at which IT infrastructure automatically generates alerts. Historical data across a plurality of data sources in the IT infrastructure is analyzed. An opportunity to reduce the frequency at which the IT infrastructure automatically generates the alerts is identified. A new alert policy addressing the opportunity to reduce alert frequency is generated. An impact of the new alert policy on a set of predefined service level objectives (SLOs) and service level agreements (SLAs) is evaluated. The new alert policy is deployed in the IT infrastructure. ## Claims ### Claim 1 A method for dynamically reducing a frequency at which an information technology (IT) infrastructure automatically generates alerts, the method comprising the steps of: at least one processor identifying an opportunity to reduce a frequency at which the IT infrastructure automatically generates the alerts, the identifying comprising detecting, using historical data from a plurality of data sources in the IT infrastructure, false alerts generated in the IT infrastructure; generating a new alert policy that addresses the opportunity to reduce the frequency; and performing a simulation of applying the new alert policy in the IT infrastructure using historical data from a plurality of data sources in the IT infrastructure. ### Claim 2 (depends on 1) The method of claim 1, further comprising the step of deploying the new alert policy in the IT infrastructure. ### Claim 3 (depends on 1) The method of claim 1, further comprising calculating, based on the simulation, a projected reduction in false alerts that, by applying the new alert policy in the IT infrastructure, would occur in the IT infrastructure while ensuring that service level agreements and service level objectives are satisfied. ### Claim 4 (depends on 1) The method of claim 1, wherein the step of identifying the opportunity to reduce the frequency at which the IT infrastructure automatically generates the alerts comprises the computer classifying a plurality of incident tickets based on a solution field. ### Claim 5 (depends on 1) The method of claim 1, wherein the step of generating the new alert policy addressing the opportunity to reduce the frequency comprises the computer adjusting a threshold associated with a current alert policy of the IT infrastructure. ### Claim 6 (depends on 1) The method of claim 1, further comprising the at least one processor assessing the risk of applying the new alert policy in the IT infrastructure. ### Claim 7 (depends on 6) The method of claim 6, wherein the assessing step comprises the determining the impact of the new alert policy on a plurality of Key Performance Indicators (KPIs). ### Claim 8 (depends on 1) The method of claim 1, further comprising generating a benefit model representing an expected alert reduction rate across the IT infrastructure. ### Claim 9 A computer program product for dynamically reducing the frequency at which an information technology (IT) infrastructure automatically generates alerts, the computer program product comprising one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more computer-readable tangible storage devices, the program instructions comprising: program instructions to identify an opportunity to reduce a frequency at which the IT infrastructure automatically generates the alerts, the program instructions to identify the opportunity to reduce the frequency comprising program instructions to detect, using historical data from a plurality of data sources in the IT infrastructure, false alerts generated in the IT infrastructure; program instructions to generate a new alert policy that addresses the opportunity to reduce the frequency; and program instructions to perform a simulation of applying the new alert policy in the IT infrastructure using historical data from a plurality of data sources in the IT infrastructure. ### Claim 10 (depends on 9) The computer program product of claim 9, further comprising program instructions to deploy the new alert policy in the IT infrastructure. ### Claim 11 (depends on 9) The computer program product of claim 9, further comprising program instructions to calculate, based on the simulation, a projected reduction in false alerts that, by applying the new alert policy in the IT infrastructure, would occur in the IT infrastructure while the program instructions to calculate the projected reduction ensure that service level agreements and service level objectives are satisfied. ### Claim 12 (depends on 9) The computer program product of claim 9, wherein the program instructions to identify the opportunity to reduce the frequency comprise program instructions to classify a plurality of incident tickets based on a solution field. ### Claim 13 (depends on 9) The computer program product of claim 9, wherein the program instructions to generate a new alert policy addressing the opportunity to reduce the frequency comprise program instructions to adjust a threshold associated with a current alert policy of the IT infrastructure. ### Claim 14 (depends on 9) The computer program product of claim 9, further comprising program instructions to assess the risk of applying the new alert policy in the IT infrastructure. ### Claim 15 (depends on 14) The computer program product of claim 14, wherein the program instructions to assess the risk of applying the new alert policy comprise program instructions to determine the impact of the new alert policy on a plurality of Key Performance Indicators (KPIs). ### Claim 16 (depends on 9) The computer program product of claim 9, further comprising program instructions to generate a benefit model representing an expected alert reduction rate across the IT infrastructure. ### Claim 17 A computer system for dynamically reducing the frequency at which an information technology (IT) infrastructure automatically generates alerts, the computer system comprising one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising: program instructions to identify an opportunity to reduce a frequency at which the IT infrastructure automatically generates the alerts, the program instructions to identify the opportunity to reduce the frequency comprising program instructions to detect, using historical data from a plurality of data sources in the IT infrastructure, false alerts generated in the IT infrastructure; program instructions to generate a new alert policy that addresses the opportunity to reduce the frequency; and program instructions to perform a simulation of applying the new alert policy in the IT infrastructure using historical data from a plurality of data sources in the IT infrastructure. ### Claim 18 (depends on 17) The computer system of claim 17, further comprising program instructions to deploy the new alert policy in the IT infrastructure. ### Claim 19 (depends on 17) The computer system of claim 17, further comprising program instructions to calculate, based on the simulation, a projected reduction in false alerts that, by applying the new alert policy in the IT infrastructure, would occur in the IT infrastructure while the program instructions to calculate the projected reduction ensure that service level agreements and service level objectives are satisfied. ### Claim 20 (depends on 17) The computer system of claim 17, wherein the program instructions to identify the opportunity to reduce the frequency comprise program instructions to classify a plurality of incident tickets based on a solution field. ### Claim 21 (depends on 17) The computer system of claim 17, wherein the program instructions to generate a new alert policy addressing the opportunity to reduce the frequency comprise program instructions to adjust a threshold associated with a current alert policy of the IT infrastructure. ### Claim 22 (depends on 17) The computer system of claim 17, further comprising program instructions to assess the risk of applying the new alert policy in the IT infrastructure. ### Claim 23 (depends on 22) The computer system of claim 22, wherein the program instructions to assess the risk of applying the new alert policy comprise program instructions to determine the impact of the new alert policy on a plurality of Key Performance Indicators (KPIs). ### Claim 24 (depends on 17) The computer system of claim 17, further comprising program instructions to generate a benefit model representing an expected alert reduction rate across the IT infrastructure.