APPARATUS AND METHOD FOR ANALYSING A COMPUTER INFRASTRUCTURE

• US 20110145400A1
• Filed: 12/10/2010
• Published: 06/16/2011
• Est. Priority Date: 12/10/2009
• Status: Active Grant

• Current Assignee: Elasticsearch Global B.V. (Elastic N.V.)
• Original Assignee: Prelert Incorporated (Elastic N.V.)
• Inventors: Dodson, Stephen
• Granted Patent: US 8,543,689 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/142 using statistical or mathematical methods
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network

Abstract

A system and method for analysing a computer infrastructure. The system and method analyses messages sent and received within the computer infrastructure to determine a system model and exception data.

Claims

1. An apparatus for analysing a computer infrastructure (10) comprising:

a plurality of first devices (20, 23, 22, 30) connected to the computer infrastructure (10) and generating a first plurality of messages (15-1);

a plurality of second devices (20, 23, 22, 30) connected to the computer infrastructure (10) and generating a second plurality of messages (15-2),

a data store (40) for storing the first plurality of messages (15-1) and the second plurality of messages (15-2); and

an analytics engine (50) for correlating the first plurality of messages (15) and the second plurality of messages (15) and producing a system model of at least part of the computer infrastructure (10).

2. The apparatus of claim 1, wherein the plurality of first devices is at least one of a server (20), a router (23), a peripheral device (22) and a user terminal (30).

3. The apparatus of claim 1, wherein the plurality of first devices (20, 23, 22, 30) is at least one of a server (20), a router (23), a peripheral device (22) and a user terminal (30).

4. The apparatus of claim 1, further comprising a plurality of third devices connected to the computer infrastructure (10) and generating a third plurality of messages (15), wherein the plurality of third devices comprises at least one of a server (20), a router (23), a peripheral device (22) and a user terminal (30) and wherein the analytics engine (50) is further adapted to analyse the messages from the plurality of third devices and correlating the messages from the plurality of third devices with the messages from at least one of the plurality of second devices and the plurality of first devices, thereby complementing the system model.

5. The apparatus of claim 1, further comprising an external data feed (25) connected to the computer infrastructure (10).

6. The apparatus of claim 1, further comprising a diagnostics device for generating at an exception indication (350).

7. A method for producing a system model (340) relating to a operation of a computer infrastructure (10) comprising:

collecting (210) a plurality of messages (15) relating to the operation of the computer infrastructure (10);

generating (220) a data stream (320) from the plurality of messages (15);

analysing (240) the data stream (320) to produce the system model (340)

8. The method of claim 7, wherein the analysis (240) of the data stream (320) comprises analysing a temporal relationship between the two or more of the plurality of messages (15).

9. The method of claim 7, further comprising

generating (260) an exception data (360) on detection of exceptions in the system model (340).

10. A computer storage medium storing non-transitory computer-executable instructions for performing method for producing a system model (340) relating to a operation of a computer infrastructure (10) comprising:

collecting (210) a plurality of messages (15) relating to the operation of the computer infrastructure (10);

generating (220) a data stream (320) from the plurality of messages (15);

analysing (240) the data stream (320) to produce the system model (340)

11. An apparatus for producing a system model (340) relating to a operation of a computer infrastructure (10) comprising:

first logic for collecting (210) a plurality of messages (15) relating to the operation of the computer infrastructure (10);

second logic generating (220) a data stream (320) from the plurality of messages (15);

third logic for analysing (240) the data stream (320) to produce the system model (340).