Event monitoring, detection and notification system having security functions

• US 20020157017A1
• Filed: 06/20/2001
• Published: 10/24/2002
• Est. Priority Date: 04/19/2001
• Status: Abandoned Application

• Current Assignee: Infor Global Solutions Michigan Incorporated (Infor Incorporated)
• Original Assignee: Vigilance, Inc. (Netflix, Inc.)
• Inventors: Chen, Bing-Shing, Kumar, Nithin, Tantry, Subhash B., Mi, Peiwei, Tu, Kevin Hsiaohsu
• Application Number:
  US09/886,403
• Publication Number:
  US 20020157017A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]

Abstract

Methods and apparatus for implementing a system for monitoring data for detection of events and tracking data associated with detected events are disclosed. A system for monitoring data for detection of events may include a data modification module and an event monitoring module. In one embodiment, the data modification module is adapted for obtaining data including one or more values and flagging at least a portion of the data to identify one or more attributes that together define an event. The event monitoring module is coupled to the data modification module and adapted for monitoring at least a portion of the flagged data produced by the data modification module for detection of one or more events. The system may further include a notification module adapted for sending a notification of a detected event in accordance with a set of notification preferences. Moreover, a collaboration module may be adapted for providing a graphical user interface including data associated with one or more detected events. A security module may be adapted for determining whether to provide access to a system resource identified in an access request. For example, the system resource may be data used for configuration of the event monitoring module or data output by the event monitoring module. As another example, the system resource may be at least a portion of the data associated with one or more of the detected events (e.g., data accessible via the collaboration module).

Claims

1. A system for monitoring data for detection of events, comprising:

a data modification module, the data modification module being adapted for obtaining data including one or more values and flagging at least a portion of the data to identify one or more attributes that together define an event; and

an event monitoring module coupled to the data modification module, the event monitoring module being adapted for monitoring at least a portion of the flagged data produced by the data modification module for detection of one or more events.

2. The system as recited in claim 1, wherein the data modification module is further adapted for providing the flagged data for the event when it is determined that one or more values associated with the flagged data for the event have changed.

3. The system as recited in claim 1, wherein the data modification module is further adapted for receiving a set of retrieval preferences indicating the data to be obtained from one or more sources.

4. The system as recited in claim 3, wherein the set of retrieval preferences further indicates at least one of scheduling frequency for data retrieval and the one or more sources for data retrieval.

5. The system as recited in claim 1, wherein the data modification module is further adapted for receiving a set of sending preferences indicating one or more attributes to be flagged for the event, the one or more attributes together defining the event.

6. The system as recited in claim 1, wherein the data modification module is further adapted for receiving a set of sending preferences indicating one or more metrics to be flagged for the event, the one or more metrics indicating one or more numerical values to be monitored by the event monitoring module.

7. The system as recited in claim 1, wherein the event monitoring module is adapted for determining whether a condition has been satisfied with respect to one or more of the detected events.

8. The system as recited in claim 7, wherein the condition has an associated condition type.

9. The system as recited in claim 7, wherein the condition has been satisfied with respect to one or more event attributes associated with one or more of the detected events.

10. The system as recited in claim 1, further comprising;

a notification module adapted for sending a notification of a detected event in accordance with a set of notification preferences.

11. The system as recited in claim 10, wherein the set of notification preferences indicates at least one of a notification medium via which the notification is to be transmitted, a notification timing preference for transmission of the notification, and one or more notification addressees to whom the notification is to be transmitted.

12. The system as recited in claim 10, wherein each of the events is defined by one or more event attributes and wherein the notification module is further adapted for identifying one or more recipients to receive the notification based upon a field based indicator identifying one or more of the event attributes.

13. The system as recited in claim 1, further comprising:

a security module adapted for determining whether to provide access to a system resource identified in an access request.

14. The system as recited in claim 13, wherein the system resource identified in the access request is at least a portion of data associated with one or more of the detected events.

15. The system as recited in claim 14, wherein the security module is adapted for determining from a content of a portion of the data whether to provide access to the system resource identified in the access request.

16. The system as recited in claim 14, wherein the security module is adapted for determining from a source of a portion of the data whether to provide access to the system resource identified in the access request.

17. The system as recited in claim 13, wherein the access is at least one of read access and write access.

18. The system as recited in claim 13, wherein the system resource identified in the access request is a set of monitoring information indicating information to be used by the event monitoring module, and wherein the security module is further adapted for determining whether to provide access to the system resource.

19. The system as recited in claim 1, further comprising:

a collaboration module adapted for enabling one or more individuals to access data associated with the detected events.

20. The system as recited in claim 19, wherein the access is at least one of read access and write access.

21. The system as recited in claim 19, wherein the collaboration module is adapted for providing a user interface for presenting at least a portion of data associated with one or more of the detected events.

22. The system as recited in claim 21, wherein the data comprises an indicator of at least one of a condition that has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

23. The system as recited in claim 1, further comprising:

a collaboration module adapted for enabling one or more individuals to communicate with one another to resolve a selected one of the detected events.

24. The system as recited in claim 23, wherein the selected detected event is defined by one or more event attributes, wherein the event monitoring module is adapted for detecting satisfaction of a condition with respect to one or more of the event attributes, and wherein the collaboration module is adapted for enabling one or more individuals to track resolution of the condition.

26. The system as recited in claim 25, wherein the data is flagged to identify one or more events, each of the events being defined by one or more event attributes.

27. The system as recited in claim 25, wherein the data is flagged to identify one or more events to be monitored by the event monitoring module.

28. The system as recited in claim 25, wherein the data is flagged to identify one or more of the values to be monitored by the event monitoring module.

29. The system as recited in claim 25, wherein the set of notification preferences indicates at least one of a notification medium via which the notification is to be transmitted, a notification timing preference for transmission of the notification, and one or more notification addressees to whom the notification is to be transmitted.

30. The system as recited in claim 25, wherein each of the events is defined by one or more event attributes and wherein the notification module is further adapted for identifying one or more recipients to receive the notification based upon a field based indicator identifying one or more of the event attributes.

25. A system for monitoring data for detection of events, comprising:

an event monitoring module adapted for monitoring at least a portion of data including one or more values for detection of one or more events; and

a notification module adapted for sending a notification of one of the detected events in accordance with a set of notification preferences.

31. A system for monitoring data for detection of events, comprising:

an event monitoring module adapted for monitoring at least a portion of data including one or more values for detection of one or more events; and

a security module adapted for determining whether to provide access to a system resource identified in an access request, the system resource being at least one of data used for configuration of the event monitoring module and data output by the event monitoring module.

32. The system as recited in claim 31, wherein the data monitored by the event monitoring module is flagged to identify a plurality of events, each of the plurality of events being defined by one or more event attributes.

33. The system as recited in claim 31, wherein the data output by the event monitoring module comprises an indicator of at least one of a condition that has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

34. The system as recited in claim 31, wherein the security module is adapted for determining from a content of a portion of the data whether to provide access to the system resource identified in the access request.

35. The system as recited in claim 31, wherein the system resource identified in the access request is at least a portion of data associated with one or more of the detected events.

36. The system as recited in claim 35, wherein the security module is adapted for determining from a source of a portion of the data whether to provide access to the system resource identified in the access request.

37. The system as recited in claim 31, wherein the access is at least one of read access and write access.

38. The system as recited in claim 31, wherein the system resource identified in the access request is a set of monitoring information used for configuration of the event monitoring module, the set of monitoring information indicating information to be used by the event monitoring module, and wherein the security module is further adapted for determining whether to provide access to the system resource.

39. The system as recited in claim 38, wherein the set of monitoring information indicates at least one of one or more events to be monitored and one or more conditions for which satisfaction is to be detected with respect to the monitored events.

40. A system for monitoring data for detection of events, comprising:

an event monitoring module adapted for monitoring at least a portion of data including one or more values for detection of one or more events; and

a collaboration module adapted for enabling one or more individuals to access data associated with the detected events.

41. The system as recited in claim 40, wherein the access is at least one of read access and write access.

42. The system as recited in claim 40, wherein the collaboration module is adapted for providing a user interface for presenting at least a portion of data associated with one or more of the detected events.

43. The system as recited in claim 40, wherein the data comprises an indicator of at least one of a condition that has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

44. The system as recited in claim 40, wherein the collaboration module is further adapted for enabling one or more individuals to communicate with one another to resolve a selected one of the detected events.

45. The system as recited in claim 44, wherein the selected detected event is defined by one or more event attributes, wherein the event monitoring module is adapted for detecting satisfaction of a condition with respect to one or more of the event attributes, and wherein the collaboration module is adapted for enabling one or more individuals to track resolution of the condition.

47. The system as recited in claim 46, wherein the access is at least one of read access and write access.

48. The system as recited in claim 46, wherein the collaboration module is adapted for presenting at least a portion of the data associated with one or more of the detected events via the graphical user interface.

49. The system as recited in claim 46, wherein the data comprises an indicator of at least one of a condition that has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

50. The system as recited in claim 46, wherein the collaboration module is adapted for enabling one or more individuals to communicate with one another to resolve a selected one of the detected events.

51. The system as recited in claim 50, wherein the selected detected event is defined by one or more event attributes, wherein the selected detected event is associated with a condition that has been satisfied with respect to one or more of the event attributes, and wherein the collaboration module is adapted for enabling one or more individuals to track resolution of the condition.

52. The system as recited in claim 46, wherein the security module is adapted for determining from a content of a portion of the data whether to provide access to the system resource identified in the access request.

53. The system as recited in claim 46, wherein the security module is adapted for determining from a source of a portion of the data whether to provide access to the system resource identified in the access request.

54. The system as recited in claim 46, wherein the access is at least one of read access and write access.

46. A system for providing access to data associated with a plurality of detected events, comprising:

a collaboration module adapted for providing a graphical user interface including data associated with one or more detected events; and

a security module adapted for determining whether to provide access to a system resource via the collaboration module, the system resource being at least a portion of the data associated with one or more of the detected events and being identified in an access request.