AGENT MANAGEMENT SYSTEM

• US 20080155086A1
• Filed: 12/20/2007
• Published: 06/26/2008
• Est. Priority Date: 12/22/2006
• Status: Abandoned Application

• Current Assignee: Clear Blue Security LLC
• Original Assignee: Autiq A/S
• Inventors: JENSEN, Robert
• Application Number:
  US11/961,021
• Publication Number:
  US 20080155086A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 9/5083 Techniques for rebalancing the load in a distributed system
• CPC Class Codes: H04L 41/5012 determining service availability, e.g. which services are available at a certain point in time
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1012 based on compliance of requirements or conditions with available server resources
• CPC Class Codes: H04L 67/1029 using data related to the state of servers by a load balancer
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

The present application relates to a system for enhancing management of a network, including discovery of resources and management of agents.

Claims

1. A method for automatically assigning active data reporting agents to network resources in a network, each active data reporting agent comprising executable code configured to cause transmission of data relating to an associated network resource to a data monitor, the network comprising the network resources, and the data monitor being configured to monitor the status of the network resources by (a) receiving the data transmitted from the active data reporting agents, (b) remotely scanning the network resources without the active data reporting agents to receive data from the scanned network resources, the method being computer-implemented and comprising:

determining for a plurality of the scanned network resources a frequency of changes in the received data; and

for a scanned network resource determined to have a data change frequency above a first predetermined threshold;

(a) assigning an active data reporting agent to the network resource and (b) configuring the data monitor to not scan the network resource.

2. A method according to claim 1, wherein for a scanned network resource determined to have a data change frequency below a second predetermined threshold, the first threshold being greater than the second threshold:

(a) assigning an active data reporting agent to the network resource and (b) configuring the data monitor to not scan the network resource.

3. A method according to claim 1, wherein a prioritization level for each scanned network resource is detected, and for a network resource having a predetermined prioritization level:

(a) assigning an active data reporting agent to the network resource and (b) configuring the data monitor to not scan the network resource.

4. A method according to claim 1, further comprising for each active agent assigned to each network resource, generating a profile for the agent and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

5. A method according to claim 2, further comprising for each active agent assigned to each network resource, generating a profile for the agent and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

6. A method according to claim 3, further comprising for each active agent assigned to each network resource, generating a profile for the agent and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

7. A method according to claim 1, further comprising determining for a plurality of network resources monitored by active data reporting agents a frequency of changes in the received data;

and

for an agent-monitored network resource determined to have a data change frequency below an undeployment threshold;

(a) de-activating or removing the active data reporting agent from the network resource and (b) configuring the data monitor to scan the network resource.

8. A method according to claim 7, further comprising for each agent removed or deactivated either (a) deleting the profile for the agent from profile database, if the agent has been removed, or (b) updating the profile for the agent to denote that it has been de-activated, if the agent has been de-activated.

9. A method according to claim 2, further comprising determining for a plurality of network resources monitored by active data reporting agents a frequency of changes in the received data;

and

for an agent-monitored network resource determined to have a data change frequency below the first predetermined threshold and above the second predetermined threshold;

(a) de-activating or removing the active data reporting agent from the network resource and (b) configuring the data monitor to scan the network resource.

10. A method according to claim 9, further comprising for each agent removed or deactivated either (a) deleting the profile for the agent from profile database, if the agent has been removed, or (b) updating the profile for the agent to denote that it has been de-activated, if the agent has been de-activated.

11. A method according to claim 1, wherein the method is performed by an agent manager.

12. A method according to claim 11, wherein the agent manager is separate from the data monitor.

13. A method according to claim 1, wherein the data monitor is coupled to a profile database with profiles for the network resources, and wherein the data monitor stores or updates the data received from the scanning or the active agents to profiles.

14. A method according to claim 13, wherein the method is performed by an agent manager, the agent manager being coupled to the database and analyzing the profiles of the network resources to determine the data change frequency.

15. A method according to claim 14, wherein each profile comprises an event specification including a record of data changes for the associated network resource, and wherein the agent manager analyzes the event specifications of the profiles to determine the data change frequency.

16. A method according to claim 2, wherein the data monitor is coupled to a profile database with profiles for the network resources, and wherein the data monitor stores or updates the data received from the scanning or the active agents to profiles.

17. A method according to claim 16, wherein the method is performed by an agent manager, the agent manager being coupled to the database and analyzing the profiles of the network resources to determine the data change frequency.

18. A method according to claim 17, wherein each profile comprises an event specification including a record of data changes for the associated network resource, and wherein the agent manager analyzes the event specifications of the profiles to determine the data change frequency.

19. A method according to claim 7, wherein the data monitor is coupled to a profile database with profiles for the network resources, and wherein the data monitor stores or updates the data received from the scanning or the active agents to profiles.

20. A method according to claim 19, wherein the method is performed by an agent manager, the agent manager being coupled to the database and analyzing the profiles of the network resources to determine the data change frequency.

21. A method according to claim 20, wherein each profile comprises an event specification including a record of data changes for the associated network resource, and wherein the agent manager analyzes the event specifications of the profiles to determine the data change frequency.

22. A method for managing message traffic from data reporting agents in a network comprising network resources, each data reporting agent comprising executable code configured to cause transmission of data relating to an associated network resource to a data monitor, the data monitor being configured to monitor the status of the network resources by receiving the data transmitted from the data reporting agents, the data monitor being associated with a profile database comprising profiles for the network resources, the method being computer-implemented and comprising:

receiving agent messages in an agent message queue from agents associated with network resources;

creating event specifications based on the agent messages;

determining a priority of each event specification based on an event specification routing strategy;

based on the determined priority;

(a) transmitting each event specification below a predetermined priority level to an event specification queue;

or

(b) transmitting each event specification at or above the predetermined priority level to the database for updating to the profiles for the associated network resources;

and for the event specifications transmitted to the event specification queue, transmitting the event specifications from the event specification queue to the database for updating to the profiles for the associated network resources in accordance with an event specification queue management strategy.

23. A method according to claim 22, wherein the event specification routing strategy used to determine the priority of each event specification is governed by at least one parameter selected from the group consisting of (a) a priority of the resource associated with the event specification and (b) a type of data change represented by the agent message.

24. A method according to claim 22, wherein the event specification queue management strategy used for transmitting the event specifications from the event specification queue to the database includes an exchange strategy governed by at least one parameter selected from the group consisting of (a) a predetermined schedule, (b) a number of the event specifications in the event specification queue, and (c) a bit size of the event specifications in the event specification queue.

25. A method according to claim 22, wherein the event specification queue management strategy used for transmitting the event specifications from the event specification queue to the database includes checking a load on the profile database, and allowing the transmission of the event specifications to the database if the load is below a predetermined level.

26. A method according to claim 22, wherein the event specification queue management strategy used for transmitting the event specifications from the event specification queue to the database includes a force event strategy that determines a priority of the event specifications in the event specification queue and transmits the event specifications at or above a predetermined event specification queue priority level to the database.

27. A method according to claim 25, wherein the event specification queue management strategy used for transmitting the event specifications from the event specification queue to the database includes a force event strategy that determines a priority of the event specifications in the event specification queue and transmits the event specifications at or above a predetermined event queue priority level to the database.

28. A method according to claim 27, wherein the force event strategy causes transmission of the event specification from the event specification queue to the database even if the load of the profile database is at or above the predetermined level.

29. An agent manager for automatically assigning active data reporting agents to network resources in a network, each active data reporting agent comprising executable code configured to cause transmission of data relating to an associated network resource to a data monitor, the network comprising the network resources, and the data monitor being configured to monitor the status of the network resources by (a) receiving the data transmitted from the active data reporting agents, (b) remotely scanning the network resources without the active data reporting agents to receive data from the scanned network resources, the agent manager comprising:

a frequency change detection component for determining for a plurality of the scanned network resources a frequency of changes in the received data; and

an agent assignment component for (a) assigning an active data reporting agent to a scanned network resource determined by the frequency change detection component to have a data change frequency above a first predetermined threshold and (b) configuring the data monitor to not scan the network resource.

30. An agent manager according to claim 29, wherein the agent assignment component is also configured to (a) assign an active data reporting agent to a scanned network resource determined by the frequency change detection component to have a data change frequency below a second predetermined threshold, the first threshold being greater than the second threshold, and (b) configure the data monitor to not scan the network resource.

31. An agent manager according to claim 29, further comprising a prioritization level detection component for detecting a priority level of each scanned network resource, wherein the agent assignment component is also configured to (a) assign an active data reporting agent to a network resource determined by the prioritization detection level component to have a predetermined prioritization level, and (b) configure the data monitor to not scan the network resource.

32. An agent manager according to claim 29, further comprising a component for generating a profile for each active agent assigned to each network resource, and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

33. An agent manager according to claim 30, further comprising a component for generating a profile for each active agent assigned to each network resource, and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

34. An agent manager according to claim 31, further comprising a component for generating a profile for each active agent assigned to each network resource, and storing the profile to a profile database, the profile including data representing a relation between the agent and the network resource to which it is assigned.

35. An agent manager according to claim 29, wherein the frequency change detection component is configured to determine for a plurality of the network resources monitored by active data reporting agents a frequency of changes in the received data;

and wherein the agent manager further comprises;

an agent undeployment component for (a) deactivating or removing the active data reporting agent of a network resource determined by the change frequency detector to have a data change frequency below an undeployment threshold and (b) configuring the data monitor to scan the network resource.

36. An agent manager according to claim 35, further comprising a component for either:

(a) deleting the profile for the agent from profile database, if the agent has been removed, or (b) updating the profile for the agent to denote that it has been de-activated, if the agent has been de-activated.

37. A data monitor and agent management system for use in a network comprising network resources, comprising:

a data monitor;

an agent manager for automatically assigning active data reporting agents to network resources in a network, each active data reporting agent comprising executable code configured to cause transmission of data relating to an associated network resource to the data monitor, and

the data monitor being configured to monitor the status of the network resources by;

(a) receiving the data transmitted from the active data reporting agents, (b) remotely scanning the network resources without the active data reporting agents to receive data from the scanned network resources;

the data monitor including a profile database with profiles for the network resources, wherein the data monitor is configured to store or update the data received from the scanning or the active agents to the profiles;

the agent manager comprising;

(i) a frequency change detection component for determining for a plurality of the scanned network resources a frequency of changes in the received data; and

(ii) an agent assignment component for (a) assigning an active data reporting agent to a scanned network resource determined by the frequency change detection component to have a data change frequency above a first predetermined threshold and (b) configuring the data monitor to not scan the network resource.

38. A system according claim 37, wherein the agent manager is coupled to the database and the frequency detection component thereof is configured to analyze the profiles of the network resources to determine the data change frequency.

39. A system according to claim 38, wherein each profile comprises an event specification including a record of data changes for the associated network resource, and wherein the frequency detection component of the agent manager is configured to analyze the event specifications of the profiles to determine the data change frequency.

40. A system according to claim 38, wherein the agent assignment component is also configured to (a) assign an active data reporting agent to a scanned network resource determined by the frequency change detection component to have a data change frequency below a second predetermined threshold, the first threshold being greater than the second threshold, and (b) configure the data monitor to not scan the network resource.

41. A system according to claim 39, wherein the agent assignment component is also configured to (a) assign an active data reporting agent to a scanned network resource determined by the frequency change detection component to have a data change frequency below a second predetermined threshold, the first threshold being greater than the second threshold, and (b) configure the data monitor to not scan the network resource.

42. A system according to claim 37, wherein the frequency change detection component is configured to determine for a plurality of the network resources monitored by active data reporting agents a frequency of changes in the received data;

and wherein the agent manager farther comprises;

an agent undeployment component for (a) deactivating or removing the active data reporting agent of a network resource determined by the frequency change detection component to have a data change frequency below an undeployment threshold and above the second predetermined threshold and (b) configuring the data monitor to scan the network resource.

43. An agent manager according to claim 42, further comprising a component for either:

(a) deleting the profile for the agent from profile database, if the agent has been removed, or (b) updating the profile for the agent to denote that it has been de-activated, if the agent has been de-activated.

44. An agent message traffic manager for managing message traffic from data reporting agents in a network comprising network resources, each data reporting agent comprising executable code configured to cause transmission of data relating to an associated network resource to a data monitor, the data monitor being configured to monitor the status of the network resources by receiving the data transmitted from the data reporting agents, the data monitor being associated with a database comprising profiles for the network resources, the manager comprising:

an agent message queue for receiving agent messages from agents associated with network resources;

an event specification creator coupled to the agent message queue for creating event specifications based on the agent messages;

an event specification queue coupled to the event specification queue for receiving event specifications from the event specification creator;

an event specification router coupled to the event specification queue for determining a priority of each event specification based on an event specification routing strategy, the event specification router being configured to, based on the determined priority;

(a) transmit each event specification below a predetermined priority level to an event specification queue;

or

(b) transmit each event specification at or above the predetermined priority level to the database for updating to the profiles for the associated network resources; and

an event specification queue manager for transmitting the event specifications from the event specification queue to the database for updating to the profiles for the associated network resources in accordance with an event specification queue management strategy.

45. An agent message traffic manager according to claim 44, wherein the event specification router is configured to determine the priority of each event specification by at least one parameter selected from the group consisting of (a) a priority of the resource associated with the event specification and (b) a type of data change represented by the agent message.

46. An agent message traffic manager according to claim 44, wherein the event specification queue manager is configured to transmit the event specifications from the event specification queue to the database using an exchange strategy governed by at least one parameter selected from the group consisting of (a) a predetermined schedule, (b) a number of the event specifications in the event specification queue, and (c) a bit size of the event specifications in the event specification queue.

47. An agent message traffic manager according to claim 44, wherein the event specification manager is also configured to check a load on the profile database, and allow the transmission of the event specifications to the database if the load is below a predetermined level.

48. An agent message traffic manager according to claim 44, wherein the event specification queue manager is also configured perform a force event strategy that determines a priority of the event specifications in the event specification queue and transmits the event specifications at or above a predetermined event specification queue priority level to the database.

49. An agent message traffic manager according to claim 47, wherein the event specification queue manager is also configured perform a force event component that determines a priority of the event specifications in the event specification queue and transmits the event specifications at or above a predetermined event specification queue priority level to the database.

50. An agent message traffic manager according to claim 49, wherein the force event component of the event specification queue manager is also configured to cause transmission of the event specification from the event specification queue to the database even if the load of the profile database is at or above the predetermined level.