Method, system and program product for optimizing event monitoring filter settings and metric threshold
First Claim
1. A method for optimizing event monitoring filter settings, comprising:
- monitoring indications of an event over time;
obtaining a minimum detection and repair time for the event; and
determining an optimal filter setting for registering the event based on the minimum detection and repair time.
1 Assignment
0 Petitions
Accused Products
Abstract
Under the present invention indications of an event are monitored based upon a comparison of a computer system metric to a corresponding metric threshold over time. It is then determined whether a predetermined probability is reached that the indications will persist at least as long as a minimum detection and repair time for the event. Determining whether the predetermined probability is reached is typically accomplished based upon the monitoring of the indications over time and historical data for past instances of the event. The present invention will then optimize the filter setting for the event to minimize false positives and optimize the metric threshold so that indications are more accurately monitored.
-
Citations
27 Claims
-
1. A method for optimizing event monitoring filter settings, comprising:
-
monitoring indications of an event over time;
obtaining a minimum detection and repair time for the event; and
determining an optimal filter setting for registering the event based on the minimum detection and repair time. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method for optimizing event monitoring filter settings, comprising:
-
monitoring indications of an event based upon a comparison of a computer system metric to a corresponding metric threshold over time;
determining whether a predetermined probability is reached that the indications will persist at least as long as a minimum detection and repair time for the event, wherein step of determining whether the predetermined probability is reached is based upon the monitoring of the indications over time and historical data for past instances of the event; and
determining an optimal filter setting for the event so that the event will be registered only if the predetermined probability is reached.
-
-
10. A system for optimizing event monitoring filter settings, comprising:
-
an event monitoring system for monitoring indications of an event;
an event persistence system for determining whether a predetermined probability is reached that the indications will persist at least as long as a minimum detection and repair time for the event; and
a filter optimization system for determining an optimal filter setting for the event so that the event will be registered only if the predetermined probability is reached. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 21)
-
-
18. A program product stored on a computer readable medium for optimizing event monitoring filter settings, the program product comprising program code for performing the following steps:
-
monitoring indications of an event;
determining whether a predetermined probability is reached that the indications will persist at least as long as a minimum detection and repair time for the event; and
determining an optimal filter setting for the event so that the event will be registered only if the predetermined probability is reached. - View Dependent Claims (19, 20, 22, 23, 24, 25)
-
-
26. A method for deploying an application for optimizing event monitoring filter settings, comprising:
providing a computer infrastructure being operable to;
monitor indications of an event;
determine whether a predetermined probability is reached that the indications will persist at least as long as a minimum detection and repair time for the event; and
determine an optimal filter setting for the event so that the event will be registered only if the predetermined probability is reached. - View Dependent Claims (27)
Specification