Assessment of operational states of a computing environment

• US 10,291,472 B2
• Filed: 07/29/2015
• Issued: 05/14/2019
• Est. Priority Date: 07/29/2015
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: AppFormix Inc. (Juniper Networks Incorporated)
• Inventors: Banka, Tarun, Chitalia, Harshit, Newhouse, Travis, Pemmaraju, Chaitanya, Prakash, Pawan, Roy, Parantap, Singh, Sumeet
• Primary Examiner(s): Biagini, Christopher
• Application Number:
  US14/811,957
• Publication Number:
  US 20170033995A1
• Time in Patent Office: 1,385 Days
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 43/14 using software, i.e. software packages network security related monitoring H04L63/1408
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV

Abstract

An assessment environment is provided to generate real-time or nearly real-time events and/or alarms based at least on operational state of a host device. An agent module executing in the host device can monitor some or all of the performance metrics that are available in the host device and can analyze the monitored information in order to generate operational information and/or intelligence associated with an operational state of the host device and/or a computing component (e.g., an application, a virtual machine, or a container) associated therewith. The monitoring and analysis can be performed locally at the host device in real-time or nearly real-time. Analysis of the monitored information can be utilized to update first control information indicative of occurrence of an event and/or second control information indicative of presence or absence of an alarm condition. The control information can be sent to a remote device.

Claims

1. A system, comprising:

host devices; and

a management device operationally coupled to the host devices via one or more networks and one or more communication links,

wherein the management device is configured to select a group of virtual computing instances executing on at least one host device of the host devices, wherein each of the virtual computing instances within the group of virtual computing instances comprises at least one of a virtual machine or a container,

to select a group of operational metrics associated with computing performance;

to configure a compound rule based on at least one of the group of operational metrics; and

to send first information indicative of the group of operational metrics and second information indicative of the compound rule to the at least one host device, wherein the group of virtual computing instances comprises a first virtual computing instance and a second virtual computing instance, and wherein the compound rule comprises a first test condition associated with the first virtual computing instance and a second test condition associated with the second virtual computing instance; and

wherein a host device of the at least one host device is configured to monitor, for the first virtual computing instance and the second virtual computing instance executing on the host device, at least one operational metric of the group of operational metrics,

to determine whether the at least one operational metric satisfies a matching criterion of the compound rule, and

to update control information characterizing an operational state of the first virtual computing instance and the second virtual computing instance in response to a determination that the at least one operational metric satisfies the matching criterion.

2. The system of claim 1, wherein the management device is further configured to select an alarm mode of assessment of the group of virtual computing instances, and wherein the host device is further configured to update alarm information indicative of an alarm being active in response to the determination that the at least one operational metric satisfies the matching criterion.

3. The system of claim 1, wherein the management device is further configured to select an event mode of assessment of the group of virtual computing instances, and wherein the host device is further configured to updated event information indicative of an occurrence of a defined event in response to the determination that the at least one operational metric satisfies the matching criterion.

4. The system of claim 1, wherein the first test condition and the second test condition are probed in a defined order.

5. A method, comprising:

monitoring operational metrics by a module executing in a computing device comprising a processor functionally coupled to a memory device, wherein at least one of the operational metrics is indicative of an operational state of the computing device, and wherein the module monitors the at least one of the operational metrics for a plurality of virtual computing instances executing on the computing device, including a first virtual computing instance and a second virtual computing instance, and wherein each of the virtual computing instances within the plurality of virtual computing instances comprises at least one of a virtual machine or a container;

determining, by the module executing in the computing device, if an operational metric of the operational metrics satisfies a matching criterion of a compound rule, wherein the compound rule comprises a first test condition associated with the first virtual computing instance and a second test condition associated with the second virtual computing instance; and

updating, by the module executing in the computing device, control information characterizing the operational state of the computing device in response to a determination that the operational metric satisfies the matching criterion of the compound rule.

6. The method of claim 5, further comprising, in further response to the determination that the operational metric satisfies the matching criterion of the compound rule:

sending, by the module executing in the computing device, at least a portion of the control information to a remote computing device.

7. The method of claim 5, wherein the monitoring the operational metrics comprises determining at least one of first data indicative of central processing unit (CPU) usage time, second data indicative of CPU time, third data indicative of memory usage, fourth data indicative of hard drive disk usage, fifth data indicative of available inbound network bandwidth, sixth data indicative of available outbound network bandwidth, seventh data indicative of time to first byte associated with a request for service, or eighth data indicative of a number of requests for service.

8. The method of claim 5, further comprising receiving, by the module executing in the computing device, from a remote computing device, configuration information indicative of at least a second one of the operational metrics prior to the monitoring the operational metrics.

9. The method of claim 5, wherein the determining comprises applying the compound rule associated with the matching criterion, and wherein the compound rule comprises at least one of a monitoring interval, an exception counter, an aggregation function, a comparison function, or a threshold.

10. The method of claim 9, further comprising receiving, by the module executing in the computing device, from a remote computing device, configuration information defining the compound rule associated with the matching criterion of the compound rule prior to the implementing the compound rule.

11. The method of claim 5, wherein the updating the control information characterizing the operational state comprises generating event information indicative of occurrence of the matching criterion.

12. The method of claim 5, wherein the updating the control information characterizing the operational state comprises generating alarm information indicative of an active alarm condition.

13. A system, comprising:

a memory device comprising executable instructions; and

a processor functionally coupled to the memory device and configured, by the executable instructions,

to analyze metric information indicative of a metric indicative of an operational state of a plurality of virtual computing instances executing on a server device in a server device cluster, including a first virtual computing instance and a second virtual computing instance, and wherein each of the virtual computing instances within the plurality of virtual computing instances comprises at least one of a virtual machine or a container;

to determine whether the metric satisfies a specific condition based on an outcome of the analyzed metric information, wherein the specific test condition comprises a first test condition associated with the first virtual computing instance and a second test condition associated with the second virtual computing instance;

to update control information characterizing the operational state of the virtual computing instance executing on the server device; and

to send the control information to a remote computing device in response to a determination that the specific condition is satisfied.

14. The system of claim 13, wherein the control information comprises event information indicative of occurrence of the specific condition, and wherein the processor is further configured, by the executable instructions, to generate the event information.

15. The system of claim 14, wherein the control information comprises alarm information indicative of an active alarm condition, and wherein the processor is further configured, by the executable instructions, to generate the alarm information.

16. The system of claim 13, wherein the processor is further configured, by the executable instructions, to implement a test associated with the specific condition, and wherein the test determines the outcome of the analyzed metric information.

17. The system of claim 16, wherein the remote computing device is a first remote computing device, and wherein the processor is further configured, by the executable instructions, to receive configuration information defining the test associated with the specific condition from a second remote computing device.

18. A computer-readable storage device comprising executable instructions that, in response to execution, cause a server device to perform operations comprising:

monitoring operational metrics, wherein a first group of the operational metrics is associated with an operational state of a first virtual computing instance executing on the server device and a second group of the operational metrics is associated with an operational state of a second virtual computing instance executing on the server device, and wherein each of the first virtual computing instance and the second virtual computing instance comprises at least one of a virtual machine or a container;

determining that an operational metric of the operational metrics satisfies a specific condition, wherein the specific test condition comprises a first test condition associated with the first virtual computing instance and a second test condition associated with the second virtual computing instance; and

in response to the determining, generating control information characterizing the operational state of the first virtual computing instance executing on the server device or the second virtual computing instance executing on the server device.

19. The computer-readable storage device of claim 18, wherein the operations further comprise, in further response to the determining:

sending at least a portion of the control information to a remote computing device.

20. The computer-readable storage device of claim 18, wherein the monitoring the operational metrics comprises monitoring in substantially real-time at least one of central processing unit (CPU) usage, CPU time, memory usage, hard drive disk usage, available inbound network bandwidth, available outbound network bandwidth, time to first byte associated with a request for service, or a number of requests for service.

21. The computer-readable storage device of claim 18, wherein the determining comprises applying a compound rule associated with the specific condition, and wherein applying the compound rule comprises:

computing an aggregation function using metric information indicative of the operational metrics monitored during a monitoring interval;

comparing a result of the computing to a threshold; and

determining a number of exceptions based on the result of the comparing.

22. The computer-readable storage device of claim 21, wherein the operations further comprise receiving, from a remote computing device, configuration information defining the compound rule associated with the specific condition.

23. The computer-readable storage device of claim 18, wherein the generating comprises:

determining whether an event mode is configured at the first virtual computing instance executing on the server device and the second virtual computing instance executing on the server device; and

in response to ascertaining that the event mode is configured, generating event information indicative of occurrence of the specific condition.

24. The computer-readable storage device of claim 18, wherein the generating comprises:

determining that an alert mode is configured at the first virtual computing instance executing on the server device and the second virtual computing instance executing on the server device; and

and in response to the determining,

determining whether an alert associated with the specific condition is active; and

generating alarm information indicative of an active alarm condition in response to ascertaining that the alert associated with the specific condition is not active.

25. A device, comprising:

a memory device comprising computer-executable instructions; and

a processor functionally coupled to the memory device and configured, by the computer-executable instructions,

to select a group of virtual computing instances to be monitored, each virtual computing instance of the group of virtual computing instances being remotely located from the device and executing on a server device in a server device cluster, and wherein each of the virtual computing instances within the group of virtual computing instances comprises at least one of a virtual machine or a container;

to select a group of operational metrics associated with computing performance;

to configure a compound rule based on at least one of the group of operational metrics; and

to send first information indicative of the group of operational metrics and second information indicative of the compound rule to each of the server devices within the server device cluster;

wherein the group of virtual computing instances comprises a first virtual computing instance and a second virtual computing instance, and wherein the compound rule comprises a first test condition associated with the first virtual computing instance and a second test condition associated with the second virtual computing instance.

26. The device of claim 25, wherein the processor is further configured, by the computer-executable instructions, to receive input information indicative of a selection of the group of virtual computing instances to be monitored.

27. The device of claim 25, wherein the processor is further configured, by the computer-executable instructions, to receive input information indicative of the compound rule, the input information comprises operator information indicative of an operator to be applied to an operational metric of the group of operational metrics and threshold information indicative of a defined threshold associated with operational metric.

28. The device of claim 25, wherein the first test condition and the second test condition are probed in a defined order.