Dynamic incident tracking and investigation in service monitors
First Claim
1. A method for server-side monitoring of a computing environment, the method comprising:
- monitoring application network transactions and behaviors for the computing environment, the computing environment including one or more client subnets accessing one or more servers, the monitoring capable of being independent of client site monitors;
decomposing the monitored transactions and behaviors into at least network, server and application quality components where a quality component may be based on performance or availability;
using the decomposed quality components to identify one or more of the services, servers and client subnets as being associated with a quality issue; and
implementing an active investigation on the one or more services, servers and client subnets, the active investigation including gathering statistical data to assist root cause analysis independent of a network monitoring interruption.
4 Assignments
0 Petitions
Accused Products
Abstract
A method for a service monitor of a computing environment includes monitoring application network transactions and behaviors for the computing environment, the computing environment including client subnets accessing servers, the monitoring independent of client site monitors; decomposing the monitored transactions and behaviors into network, server and application quality components; using the components to identify services, servers and client subnets as associated with a quality issue; and implementing an active investigation on the services, servers and client subnets to gather statistical data to assist root cause analysis independent of a network monitoring interruption; The quality issue might be a performance issue, such as excessive response times, excessive loss rates, or small transfer rates. The quality issue might be an availability issue, such as an unreachable network node or a missing web page. The service monitor includes an event detection module configured to decompose the monitored transactions and behaviors into network, server and application quality components and to use the components to identify services, servers and client subnets as being associated with a quality issue. The monitor also includes active investigation modules networked to gather statistical data according to criteria to assist root cause analysis without monitoring interruption.
-
Citations
77 Claims
-
1. A method for server-side monitoring of a computing environment, the method comprising:
-
monitoring application network transactions and behaviors for the computing environment, the computing environment including one or more client subnets accessing one or more servers, the monitoring capable of being independent of client site monitors;
decomposing the monitored transactions and behaviors into at least network, server and application quality components where a quality component may be based on performance or availability;
using the decomposed quality components to identify one or more of the services, servers and client subnets as being associated with a quality issue; and
implementing an active investigation on the one or more services, servers and client subnets, the active investigation including gathering statistical data to assist root cause analysis independent of a network monitoring interruption. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. (canceled)
-
15. (canceled)
-
16. (canceled)
-
17. (canceled)
-
18. (canceled)
-
19. (canceled)
-
20-60. -60. (canceled)
-
61. A method of collecting data processing system status information, comprising:
- monitoring network communications with the data processing system to observe at least one transaction associated with the data processing system;
analyzing the at least one transaction to determine if the at least one transaction complies with a quality standard;
generating a trigger based on the analysis of the at least one transaction; and
collecting system status information responsive to the generation of the trigger. - View Dependent Claims (62, 63, 64, 65, 68)
- monitoring network communications with the data processing system to observe at least one transaction associated with the data processing system;
-
66. (canceled)
-
67. (canceled)
-
69. (canceled)
-
70. (canceled)
-
71. (canceled)
-
72. A method of collecting data processing system status information, comprising:
- generating a trigger based on a measure of quality of content of transactions associated with the data processing system; and
collecting system status information responsive to generation of the trigger so that collection of the system status information automatically time correlates the collected system status information with the trigger.
- generating a trigger based on a measure of quality of content of transactions associated with the data processing system; and
-
73. (canceled)
-
74. (canceled)
-
75. (canceled)
-
76. (canceled)
-
77. (canceled)
Specification