Hierarchical connected graph model for implementation of event management design
First Claim
1. A method for the automated implementation of a hierarchical event relationship network for correlation analysis in a distributed computing environment, comprising the acts of:
- inputting event handling information for each event type to be monitored;
customizing a plurality of rule templates for each event type within an event source;
verifying that the plurality of event relationship network rules do not violate an event protocol;
generating a hierarchical class definition structure and naming structure from the plurality of event relationship network rules for each event source; and
generating a plurality of event management rules for each event type automatically from the event relationship network rules and the rule templates.
1 Assignment
0 Petitions
Accused Products
Abstract
An automated method and system for the implementation of a hierarchical event relationship network for correlation analysis in a distributed computing environment in which events are defined based on a connected graph model. Event handling information for each event type to be monitored is used to customize a plurality of rule templates for each type within an event source, where the event source is a hardware component, an application software component or an operating system platform. A plurality of event relationship network rules are verified to ensure they do not violate an event protocol. A hierarchical class definition and naming structure is generated from the plurality of event relationship network rules for each event source. Event management rules are then generated automatically for each event type from the event relationship network rules and the rule templates. The event management rules are loaded into a rule-based event manager. The performance of the rule-based event manager is then monitored.
-
Citations
100 Claims
-
1. A method for the automated implementation of a hierarchical event relationship network for correlation analysis in a distributed computing environment, comprising the acts of:
-
inputting event handling information for each event type to be monitored;
customizing a plurality of rule templates for each event type within an event source;
verifying that the plurality of event relationship network rules do not violate an event protocol;
generating a hierarchical class definition structure and naming structure from the plurality of event relationship network rules for each event source; and
generating a plurality of event management rules for each event type automatically from the event relationship network rules and the rule templates. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25)
-
-
26. A method for the automated generation of a class definition and naming structure from an event relationship network represented by a hierarchical connected graph to perform correlation analysis in a distributed computing environment, comprising the acts of:
-
assigning events in a subnet to a superclass defined with the same name as the subnet;
assigning a path number to connected events in the same subnet;
determining if a branch point has been reached in the connected graph;
if a branch point has been reached, assigning a new path number to the branch, adding the assigned path number to events that are earlier in the sequence than the branch point, and appending a list of events and assigned path numbers to a path identification slot for each event; and
if a branch point has not been reached, incrementing a sequence number that is assigned to each event and adding the event sequence numbers to a sequence identification list. - View Dependent Claims (27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 73)
-
-
47. A computer readable medium containing a computer program product for the automated implementation of a hierarchical event relationship network for correlation analysis in a distributed computing environment, the computer program product comprising:
-
program instructions that enable inputting event handling information for each event type to be monitored;
program instructions that customize a plurality of rule templates for each event type within an event source;
program instructions that verify that the plurality of event relationship network rules do not violate an event protocol;
program instructions that generate a hierarchical class definition structure and naming structure from the plurality of event relationship network rules for each event source; and
program instructions that generate a plurality of event management rules for each event type automatically from the event relationship network rules and the rule templates. - View Dependent Claims (48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58)
-
-
59. A computer readable medium containing a computer program product for the automated generation of a class definition and naming structure from an event relationship network represented by a hierarchical connected graph to perform correlation analysis in a distributed computing environment, the computer program product comprising:
-
program instructions that assign events in a subnet to a superclass defined with the same name as the subnet;
program instructions that assign a path number to connected events in the same subnet;
program instructions that determine if a branch point has been reached in the connected graph;
program instructions that assign a new path number to the branch, add the assigned path number to events that are earlier in the sequence than the branch point, and append a list of events and assigned path numbers to a path identification slot for each event, if a branch point has been reached; and
program instructions that increment a sequence number that is assigned to each event and add the event sequence numbers to a sequence identification list, if a branch point has not been reached. - View Dependent Claims (60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72)
-
-
74. A system for the automated implementation of a hierarchical event relationship network for correlation analysis in a distributed computing environment, comprising:
-
an input component that receives event handling information for each event type to be monitored;
a customization component that customizes a plurality of rule templates for each event type within an event source;
a verification component that verifies the plurality of event relationship network rules do not violate an event protocol;
a class generation component that generates a hierarchical class definition structure and naming structure from the plurality of event relationship network rules for each event source; and
a rule generation component that generates a plurality of event management rules for each event type automatically from the event relationship network rules and the rule templates. - View Dependent Claims (75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85)
-
-
86. A system for the automated generation of a class definition and naming structure from an event relationship network represented by a hierarchical connected graph to perform correlation analysis in a distributed computing environment, comprising:
-
a component that assigns events in a subnet to a superclass defined with the same name as the subnet;
a component that assigns a path number to connected events in the same subnet;
a component that determines if a branch point has been reached in the connected graph;
a component that assigns a new path number to the branch, adds the assigned path number to events that are earlier in the sequence than the branch point, and appends a list of events and assigned path numbers to a path identification slot for each event, if a branch point has been reached; and
a component that increments a sequence number that is assigned to each event and adds the event sequence numbers to a sequence identification list, if a branch point has not been reached. - View Dependent Claims (87, 88, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99, 100)
-
Specification