METHOD, SYSTEM, AND COMPUTER PROGRAM PRODUCT, FOR CORRELATING SPECIAL SERVICE IMPACTING EVENTS

• US 20110122773A1
• Filed: 11/24/2009
• Published: 05/26/2011
• Est. Priority Date: 11/24/2009
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: KUNG, Yu-Lein, STEIN, Jeffrey
• Granted Patent: US 8,576,724 B2
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Abstract

Special service impacting events in an IP network are collected and correlated. Real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service is collected, along with call detail records recorded by network elements representing occurrence of call events impacting special services and performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services. The collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements are correlated, and alarms are generated based on the correlated data.

Claims

1. A computer-implemented method for correlating events occurring in an internet protocol (IP) network, comprising:

collecting real-time data representing occurrence of events impacting special services in trunk groups that are in service;

collecting call detail records recorded by network elements representing occurrence of call events impacting special services;

collecting performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services; and

correlating, by a computer, the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data

2. The method of claim 1, further comprising:

collecting data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups;

correlating the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, wherein the alarms are generated based on the correlated data.

3. The method of claim 2, further comprising:

collecting data representing network element server faults; and

correlating the collected data representing network element server faults with the generated alarms.

4. The method of claim 1, wherein the trunk group events include occurrences of simple network management protocol (SNMP) trap events, the call events include at least one of call set-up, call prorates, and call-tear down, and the performance measurements includes data from managing information bases (MIBs).

5. The method of claim 1, further comprising reducing the alarms generated by suppressing duplicate collected data, wherein the duplicate collected data includes data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

6. The method of claim 1, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

7. The method of claim 3, further comprising presenting the correlated data for display and for trouble ticket generation, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and network element server faults are reported in one display area and on one trouble ticket.

8. A system for correlating events occurring in an internet protocol (IP) network, comprising:

an input for receiving collected real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service, collected call detail records recorded by network elements representing occurrence of call events impacting special services, and collected performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services; and

a correlator for correlating the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data

9. The system of claim 8, wherein the input receives collected data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups, and the correlator correlates the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, and wherein alarms are generated based on the correlated data.

10. The system of claim 9, wherein the correlator outputs the alarms for correlation with collected data representing network element server faults.

11. The system of claim 8, wherein the trunk group events include occurrences of simple network management protocol (SNMP) trap events, the call events include at least one of call set-up, call prorates, and call-tear down, and the performance measurements include data from managing information bases (MIBs).

12. The system of claim 8, wherein the alarms generated by suppressing duplicate collected data are reduced by removing data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

13. The system of claim 8, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

14. The system of claim 9, further comprising an output for presenting the correlated data for display and trouble ticket generations, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups and network element server faults are reported in one display area and on one trouble ticket.

15. A computer program product comprising a readable medium having instructions encoded thereon for correlating events occurring in an internet protocol (IP) network, wherein the instructions, when executed by a computer, cause the computer to:

collect real-time data representing occurrence of trunk group events impacting special services in trunk groups that are in service;

collect call detail records recorded by network elements representing occurrence of call events impacting special services;

collect performance measurements of network elements representing occurrence of events affecting performance of the network elements impacting the special services; and

correlate the collected real-time data representing occurrence of trunk group events, collected call detail record and collected performance measurements, wherein alarms are generated based on the correlated data

16. The computer readable medium of claim 15, wherein the instructions, when executed by the computer, further cause the computer to:

collect data representing occurrence of trunk group out of service events impacting special services in out-of service trunk groups; and

correlate the collected data representing occurrence of trunk group out of service events with the collected real-time data representing occurrence of trunk group events, the collected call detail records and the collected performance measurements, wherein alarms are generated based on the correlated data.

17. The computer-readable medium of claim 16, wherein the instructions, when executed by the computer, further cause the computer to:

collect data representing network element server faults; and

correlate the collected data representing network element server faults with the generated alarms.

18. The computer-readable medium of claim 15, further comprising reducing the alarms generated by suppressing duplicate collected data, wherein the duplicate collected data includes data collected from multiple sources for the same event that is redundant in determining a root cause of an event.

19. The computer-readable medium of claim 15, wherein the network supports at least one of video teleconferencing services, voice communication, and data communication.

20. The computer-readable medium of claim 15, wherein the instructions, when executed by the computer, further cause the computer to:

present the correlated data for display, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and network element server faults are reported in one display area; and

present data for a trouble ticket. based on the correlated data, such that special service impacting events for trunk groups, call detail records, performance measurements, out of service trunk groups, and network element server faults are reported in one trouble ticket.