Alerts provided based on responder profile

• US 10,325,455 B2
• Filed: 11/21/2016
• Issued: 06/18/2019
• Est. Priority Date: 11/21/2016
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Movsisyan, Vardan
• Primary Examiner(s): Wang, Quan-Zhen
• Assistant Examiner(s): Burgdorf, Stephen R
• Application Number:
  US15/357,321
• Publication Number:
  US 20180144588A1
• Time in Patent Office: 939 Days
• Field of Search: 34053911, 3405731
• CPC Class Codes: G08B 5/22 using electric transmission; using electromagnetic transmission
• CPC Class Codes: G08B 5/223 using wireless transmission

Abstract

The present disclosure is related to devices, systems, and methods for alerts provided based on responder profile. An example device can include instructions to receive an alert message via an operations management server, access a plurality of alert responder profiles in storage, each associated with a respective alert responder and determined based on historical actions of the respective alert responder, and communicate the alert message to an alert responder having an alert responder profile that exceeds a threshold correlation with the alert message.

Claims

1. A non-transitory machine-readable medium having instructions stored thereon executable by a processor to:

receive an alert message via an operations management server, the alert message associated with a monitoring data source configured by the operations management server;

access a plurality of alert responder profiles in storage, each associated with a respective alert responder and determined based on historical actions of the respective alert responder, wherein each of the plurality of alert responder profiles includes;

a first communication channel historically used by the respective alert responder to respond to past alerts received by the respective alert responder; and

a second communication channel historically not used by the respective alert responder to respond to past alerts received by the respective alert responder; and

alert information for each of a plurality of alert messages received by the respective alert responder and not resolved by the respective alert responder; and

communicate the alert message to an alert responder having an alert responder profile that exceeds a threshold correlation with the alert message via the first communication channel historically used by the alert responder to respond to past alerts received by the alert responder

if a determination that a comparison of the alert message and the alert information for the plurality of alert messages received by the alert responder and not resolved by the alert responder does not exceed a threshold.

2. The medium of claim 1, including instructions to create each alert responder profile based on historical alert responder actions with respect to historical alert messages received via the operations management server.

3. The medium of claim 2, including instructions to determine the historical alert responder actions based on a log associated with the operations management server.

4. The medium of claim 1, including instructions to include in each alert responder profile:

types of alert messages responded to by the respective alert responder;

groups of alert messages responded to by the respective alert responder;

escalation levels of alert messages responded to by the respective alert responder; and

priority levels of alert messages responded to by the respective alert responder.

5. The medium of claim 4, including instructions defining the threshold correlation with the alert message as being exceeded when any of:

a type of the alert message and the types of alert messages responded to by the respective alert responder exceeds a type correlation threshold;

a group of the alert message and the groups of alert messages responded to by the respective alert responder exceeds a group correlation threshold;

an escalation level of the alert message and the escalation levels of alert messages responded to by the respective alert responder exceeds an escalation correlation threshold;

or

a priority level of the alert message and the priority levels of alert messages responded to by the respective alert responder exceeds a priority correlation threshold.

6. A system, comprising:

a processing resource; and

a memory resource configured to store instructions which, when executed by the processing resource, cause the processing resource to;

receive a plurality of alert messages via an operations management server, the alert messages associated with a monitoring data source configured by the operations management server;

access a first alert responder profile associated with a first alert responder and a second alert responder profile associated with a second alert responder, wherein the first and second alert responder profiles are created based on historical alert messages responded to by the first alert responder and the second alert responder, respectively, and wherein each of the first and second alert responder profiles includes;

a communication channel historically used by the respective alert responder to respond to received alerts; and

a communication channel historically not used by the respective alert responder to respond to received alerts;

cause the plurality of alert messages to be displayed to the first alert responder in a first order via the communication channel historically used by the first alert responder to respond to alerts based on the first alert responder profile;

cause the plurality of alert messages be displayed to the second alert responder via the communication channel historically used by the second alert responder to respond to alerts in a second order based on the second alert responder profile; and

hide a subset of the plurality of alert messages from one of the first alert responder and the second alert responder responsive to a determination that the one of the first alert responder and the second alert responder has a likelihood of responding to the subset of the plurality of alert messages that does not exceed a threshold.

7. The system of claim 6, wherein the first order includes a first subset of the plurality of alert messages displayed in a first size and a second subset of the plurality of alert messages displayed in a second size, and wherein the second order includes the first subset of the plurality of alert messages displayed in the second size and the second subset of the plurality of alert messages displayed in the first size.

8. The system of claim 6, wherein the first order and the second order include different ones of the plurality of alert messages displayed in different colors.

9. The system of claim 6, including instructions to:

cause the plurality of alert messages to be displayed to the first alert responder in the first order using a first mobile device; and

cause the plurality of alert messages to be displayed to the second alert responder in the second order using a second mobile device.

10. The system of claim 6, including instructions to determine respective tendencies associated with the first alert responder and the second alert responder, wherein the tendencies include tendencies to respond to:

a particular type of alert message; and

an alert message received in a particular portion of a day.

11. The system of claim 6, including instructions to determine the first order and the second order based, at least in part, on a job description of the first alert responder and the second alert responder, respectively.

12. The system of claim 11, wherein the respective job descriptions of the first alert responder and the second alert responder correspond to alert message types.

13. A method for providing alert messages, comprising:

receiving resolutions to a plurality of alert messages over a period of time, the resolutions provided by an alert responder, wherein each of the plurality of alert messages is associated with a monitoring data source configured by the operations management server;

determining alert information for each resolved alert message, including;

a type of the resolved alert message;

an escalation level of the resolved alert message;

a priority level of the resolved alert message;

a communication channel determined to have been used by the alert responder to resolve the resolved alert message; and

a communication channel determined not to have been used by the alert responder to resolve the resolved alert message;

determining alert information for each of a plurality of alert messages not resolved by the alert responder, including;

a type of the alert message not resolved by the alert responder;

an escalation level of the alert message not resolved by the alert responder;

a priority level of the alert message not resolved by the alert responder; and

a communication channel used to communicate the alert message not resolved by the alert responder to the alert responder;

creating an alert responder profile for the alert responder including the alert information for each resolved alert message and the alert information for each of the plurality of alert messages not resolved by the alert responder;

receiving a new alert message;

comparing a content of the new alert message with the alert responder profile; and

providing the new alert message to the alert responder via the communication channel used by the alert responder to resolve at least one of the plurality of the resolved alert messages responsive to a determination that the comparison of the content of the new alert message with the alert responder profile exceeds a threshold if a determination that a comparison of the content of the new alert message with the alert information for the plurality of alert messages not resolved by the alert responder does not exceed a threshold.

14. The method of claim 13, wherein the method includes communicating the new alert message to an archive location if an escalation level of the new alert message is below a threshold.

15. The method of claim 13, wherein comparing the content of the new alert message with the alert responder profile includes performing a key word search of a title of the new alert message.

16. The method of claim 13, wherein comparing the content of the new alert message with the alert responder profile includes performing a key word search of a body of text of the new alert message.