DYNAMIC CORRELATION OF SERVICE ORIENTED ARCHITECTURE RESOURCE RELATIONSHIP AND METRICS TO ISOLATE PROBLEM SOURCES

• US 20090177692A1
• Filed: 01/04/2008
• Published: 07/09/2009
• Est. Priority Date: 01/04/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chagoly, Byran Christopher, Gehman, Byron Christian, Lavery, Andrew Jason, Tipton, Sandra Lee
• Application Number:
  US11/969,365
• Publication Number:
  US 20090177692A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/3419 by assessing time
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/87 Monitoring of transactions
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

A potential multicomputer related problem is predicted and reported by determining a set of computer resources and relationships there between needed to complete a multicomputer business transaction, retrieving performance monitoring metrics for the computer resources during executions of the multicomputer transaction, dynamically deriving correlations between the resource relationships and the performance metrics, comparing a trend of the correlations to one or more service level requirements to predict one or more potential future violations of a business transaction requirement, including identification of one or more related resources likely to cause the violation, and reporting such prediction and likely case to an administrator.

Claims

1. An automated method for determining a potential multicomputer related problem comprising the steps of:

determining and storing in a configuration management database a set of relationships between a set of computer resources needed to complete a multicomputer business transaction;

retrieving said resource relationships;

retrieving a set of performance monitoring metrics for the set of computer resources during executions of the multicomputer business transaction;

dynamically deriving correlations between the sets of resource relationships and the performance metrics;

comparing a trend of one or more correlations to one or more service level requirements to predict one or more potential future violations of a business transaction requirement, including identification of one or more related resources likely to cause said violation; and

reporting to an administrator of said computer resources said violation prediction and said likely cause identification.

2. The method as set forth in claim 1 further comprising providing a plurality of personas which identify one or more monitored metrics as key metrics, and in which said step of reporting further comprises reporting related non-key metrics that impact each key metric.

3. The method as set forth in claim 2 in which said step of reporting impacts to key metrics comprises a separate alert containing only said key metric report.

4. The method as set forth in claim 1 further comprising employing discovery methods to detect a normal state of the performance metrics.

5. The method as set forth in claim 1 further comprising:

automatically generating correlation rules;

present said rules to an administrator;

receiving one or more indications from said administrator designating which rules are deemed important to one or more business entities; and

wherein said step of reporting further comprises providing an indication of business entity impact according to said rules and importance designations.

6. The method as set forth in claim 1 further comprising automatic identification of causal relationships of errors and metric insufficiencies over time.

7. The method as set forth in claim 6 where said identification of causal relationship identification comprises selecting a source for a metric which is predicted to be insufficient first as a probable cause.

8. The method as set forth in claim 1 further comprising providing and employing one or more templates for correlation patterns.

9. The method as set forth in claim 2 further comprising tracking one or more unmonitored metrics in order to detect missing or lacking of monitoring, and responsive to determination that a key metric has spiked or dipped abnormally when no other metrics have abnormally spiked or dipped in correlation, determining and reporting that said lack of monitoring of the spiked or dipped key metric is a likely cause of the spike or dip due to a lurking variable or confounding factor.

10. A computer-based system for determining a potential multicomputer related problem comprising the steps of:

a first data storage subsystem containing performance monitoring metrics collected from components of a multicomputer business transaction arrangement;

a second data storage subsystem containing a plurality of relationship definitions for said components for completing a business transaction; and

a correlation agent portion of a computer platform, having access to said first and second data storage subsystems, and being configured to;

(a) retrieve said resource relationships and a set of performance monitoring metrics for a set of components operated during executions of the multicomputer business transaction;

(b) dynamically derive correlations between the set of resource relationships and the performance metrics;

(c) compare a trend of one or more correlations to one or more service level requirements to predict one or more potential future violations of a business transaction requirement, including identification of one or more related components likely to cause said violation; and

(d) report to an administrator of said computer resources said violation prediction and said likely cause identification.

11. The system as set forth in claim 10 further comprising a plurality of personas which identify one or more monitored metrics as key metrics, and in which said correlation agent is further configured to report related non-key metrics that impact each key metric.

12. The system as set forth in claim 10 in which said correlation agent is further configured to automatically generate correlation rules, to present said rules to an administrator, to receive one or more indications from said administrator designating which rules are deemed important to one or more business entities, and to report including indications of business entity impact according to said rules and importance designations.

13. The system as set forth in claim 10 wherein said correlation agent is further configured to automatically identify causal relationships of errors and metric insufficiencies over time.

14. The system as set forth in claim 13 where said identification of causal relationship identification comprises selecting a source for a metric which is predicted to be insufficient first as a probable cause.

15. The system as set forth in claim 11 wherein said correlation agent is further configured to track one or more unmonitored metrics in order to detect missing or lacking of monitoring, and responsive to determination that a key metric has spiked or dipped abnormally when no other metrics have abnormally spiked or dipped in correlation, to determine and report that said lack of monitoring of the spiked or dipped key metric is a likely cause of the spike or dip due to a lurking variable or confounding factor.

16. An article of manufacture for determining a potential multicomputer related problem comprising:

a computer-readable medium suitable for encoding computer programs; and

one or more computer programs encoded by said medium and configured to cause a processor to perform the steps of;

(a) determining and storing in a configuration management database a set of relationships between a set of computer resources needed to complete a multicomputer business transaction;

(b) retrieving said resource relationships;

(c) retrieving a set of performance monitoring metrics for the set of computer resources during executions of the multicomputer business transaction;

(d) dynamically deriving correlations between the sets of resource relationships and the performance metrics;

(e) comparing a trend of one or more correlations to one or more service level requirements to predict one or more potential future violations of a business transaction requirement, including identification of one or more related resources likely to cause said violation; and

(f) reporting to an administrator of said computer resources said violation prediction and said likely cause identification.

17. The article as set forth in claim 16 further comprising a program configured to provide a plurality of personas which identify one or more monitored metrics as key metrics, and in which said program for reporting further comprises program for reporting related non-key metrics that impact each key metric.

18. The article as set forth in claim 16 further comprising program configured to:

automatically generate correlation rules;

present said rules to an administrator;

receive one or more indications from said administrator designating which rules are deemed important to one or more business entities; and

wherein said program for reporting further comprises program for providing an indication of business entity impact according to said rules and importance designations.

19. The article as set forth in claim 16 further comprising automatic identification of causal relationships of errors and metric insufficiencies over time.

20. The article as set forth in claim 17 further comprising program configured to track one or more unmonitored metrics in order to detect missing or lacking of monitoring, and responsive to determination that a key metric has spiked or dipped abnormally when no other metrics have abnormally spiked or dipped in correlation, to determine and report that said lack of monitoring of the spiked or dipped key metric is a likely cause of the spike or dip due to a lurking variable or confounding factor.