Framework for managing data that provides correlation information in a distributed computing system

• US 20030195959A1
• Filed: 10/31/2002
• Published: 10/16/2003
• Est. Priority Date: 04/15/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Taylor, David J., Sluiman, Harm, Labadie, Eric
• Application Number:
  US10/285,995
• Publication Number:
  US 20030195959A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A framework for managing data that provides correlation information in a distributed computing system is provided. The framework includes a generic correlator data structure and service for generating and managing correlators. The generic correlator data structure defines a generic correlator to uniquely identify a specific event occurring at a specific time on a specific thread of a specific process of a specific application executing on a specific machine in the distributed computing system. The correlator may be used to correlate the specific event with another event, even one occurring on a different machine. The generic correlator data structure may be extended, optionally, to include additional context data, for example, specific information selected by a service, tool or other application requiring the correlators. Preferably, the generic correlator data structure is configured to include an association to a partner correlator for a correlated event. The service generates a correlator for an event of a series of events on a computer within the distributed system with a temporal identifier representative of the unique temporal order of the event in the series of events. The temporal identifier may be defined by one or more sequential counters each responsive a characteristic of the event. The service may provide the correlator for transporting to another computer in the distributed system for associating with a related event correlator. Accordingly, the service may receive a correlator and associate it with the related correlator.

Claims

1. A method for providing a correlator for an event of a series of events, said method comprising:

generating a correlator comprising an event identifier and a temporal identifier, said event identifier comprising one or more identifiers selected from the group comprising;

a geographical identifier of said event; and

a logical identifier of said event;

wherein said temporal identifier representative of the order of said event in said series of events.

2. The method as claimed in claim 1 wherein the step of generating comprises counting each event using one or more sequential counters each responsive to a characteristic of the event and wherein the temporal identifier comprises a count from one or more of the one or more sequential counters.

3. The method as claimed in claim 2 wherein a first characteristic of the event is defined by a process generating the event and wherein one of the sequential counters defines a process sequential counter responsive to the first characteristic to count all of the events of the said process and wherein the temporal identifier comprises a count of the process sequential counter.

4. The method as claimed in claim 3 wherein a second characteristic of the event is defined by a thread of the process generating the event and wherein one of the sequential counters defines a thread sequential counter responsive to the second characteristic to count all of the events of the said thread of the process and wherein the temporal identifier comprises a count of the thread sequential counter.

5. A method for providing a correlator for an event of a series of events occurring on a computer and for which correlators are desired, the method comprising steps of:

determining an event identifier comprising data representative of one or more identifiers selected from the group consisting of geographical identifiers and logical identifiers for the event;

assigning a temporal identifier comprising data representative of the unique temporal order of the event in the series of events;

generating the correlator comprising the event identifier and the temporal identifier for the event.

6. The method as claimed in claim 5 wherein the step of assigning comprises counting each event using one or more sequential counters each responsive to a characteristic of the event and wherein the temporal identifier comprises a count from one or more of the one or more sequential counters.

7. The method as claimed in claim 6 wherein a first characteristic of the event is defined by a process generating the event and wherein one of the sequential counters defines a process sequential counter responsive to the first characteristic to count all of the events of the said process and wherein the temporal identifier comprises a count of the process sequential counter.

8. The method as claimed in claim 7 wherein a second characteristic of the event is defined by a thread of the process generating the event and wherein one of the sequential counters defines a thread sequential counter responsive to the second characteristic to count all of the events of the said thread of the process and wherein the temporal identifier comprises a count of the thread sequential counter.

9. The method as claimed in claim 8 wherein a third characteristic of the event is defined by a provider requiring the correlator and wherein the thread sequential counter is further responsive to the third characteristic to count all of the events of the said thread for the said provider.

10. The method as claimed in claim 5 including the step of providing a generic correlator data structure for defining the correlator, the data structure comprising means for defining the event identifier and the temporal identifier;

and wherein the step of generating comprises configuring an instance of the data structure.

11. The method as claimed in claim 10 wherein the generic correlator data structure further comprises means for defining optional context information and wherein the method further comprises the steps of:

determining data representative of an instance of the optional context information; and

configuring the instance of the data structure with the data representative of the instance of the optional context information.

12. The method as claimed in claim 11 wherein the means for defining the optional context data is configured in accordance with a protocol for the exchange of information.

13. The method as claimed in claim 10 wherein the generic correlator data structure further comprises means for defining an association between the correlator for the event and a partner correlator comprising a correlator for a second event and wherein the method further comprises the steps of:

determining data representative of the association with the partner correlator; and

configuring the instance of the data structure for the event with the association.

14. The method as claimed in claim 13 including the steps of:

receiving data for defining a partner correlator for the event; and

generating an instance of the generic data structure for the partner correlator in accordance with the data received.

15. The method as claimed in claim 5 wherein the computer is coupled to one or more other computers in a distributed computer system and wherein the method further includes the step of providing the correlator for transporting to a first one of the other computers for association with a correlator of a second one of the other computers.

16. The method as claimed in claim 5 including the step of providing the correlator for use to identify the event.

17. The method as claimed in claim 5 wherein the event identifier is selected in accordance with a hierarchical convention for identifying events.

18. A computer readable medium containing executable program instructions for providing a correlator for an event of a series of events occurring on a computer and for which correlators are desired, the computer program medium comprising programming instructions for:

determining an event identifier comprising data representative of one or more identifiers selected from the group consisting of geographical identifiers and logical identifiers for the event;

assigning a temporal identifier comprising data representative of the unique temporal order of the event in the series of events from one or more sequential counters each responsive to a characteristic of the event;

generating the correlator comprising the event identifier and the temporal identifier for the event.

19. The computer program product as claimed in claim 18 wherein a first characteristic of the event is defined by a process generating the event and wherein one of the sequential counters defines a process sequential counter responsive to the first characteristic to count all of the events of the said process and wherein the temporal identifier comprises a count of the process sequential counter.

20. The computer program product as claimed in claim 19 wherein a second characteristic of the event is defined by a thread of the process generating the event and wherein one of the sequential counters defines a thread sequential counter responsive to the second characteristic to count all of the events of the said thread of the process and wherein the temporal identifier comprises a count of the thread sequential counter.

21. The computer program product as claimed in claim 20 wherein a third characteristic of the event is defined by a provider requiring the correlator and wherein the thread sequential counter is further responsive to the third characteristic to count all of the events of the said thread for the said provider.

22. The computer program product as claimed in claim 18 further comprising program instructions for:

determining data representative of optional context information for the event; and

generating the correlator with the data representative of the optional context information.

23. The computer program product as claimed in claim 22 including program instructions for configuring the data representative of optional context information for the event in accordance with a protocol for the exchange of information.

24. The computer program product as claimed in claim 18 further comprising program instructions for:

defining data representative of an association between the correlator for the event and a partner correlator comprising a correlator for a second event; and

generating the correlator with the data representative of the association.

25. The computer program product as claimed in claim 24 including programming instructions for:

receiving data for defining a partner correlator for the event; and

generating the partner correlator in accordance with the data received.

26. The computer program product as claimed in claim 18 wherein said computer is coupled to one or more other computers in a distributed computer system and wherein the computer program product further comprises programming instructions for transporting the correlator to a first one of the other computers for association with a correlator of a second one of the other computers.

27. The computer program product as claimed in claim 18 including the step of providing the correlator for use to identify the event.

28. A correlator for an event in a series of events, said correlator comprising:

an event identifier comprising one or more identifiers selected from the group comprising;

a geographical identifier of said event; and

a logical identifier of said event; and

a temporal identifier representative of the order of said event in said series of events.

29. The correlator as claimed in claim 28 further comprising an association to a second correlator defining a partner correlator.

30. A data structure stored on a computer readable medium representing a correlator, said data structure comprising:

a field for an event identifier comprising data representative of one or more identifiers selected from the group consisting of geographical identifiers and logical identifiers for the event; and

a field for a temporal identifier comprising data representative of the unique temporal order of the event in the series of events from one or more sequential counters each responsive a characteristic of the event.

31. The data structure as claimed in claim 30 further comprising a field for optional context information configured in accordance with a protocol for the exchange of information.

32. The data structure as claimed in claim 31 further comprising a field for providing an association to a partner correlator.