SYSTEMS AND METHODS FOR MONITORING AND ALERTING EVENTS THAT VIRTUAL MACHINE SOFTWARE PRODUCES IN A VIRTUAL INFRASTRUCTURE

• US 20110197205A1
• Filed: 02/05/2010
• Published: 08/11/2011
• Est. Priority Date: 02/05/2010
• Status: Active Grant

• Current Assignee: Tripwire Incorporated (Belden Inc.)
• Original Assignee: Tripwire Incorporated (Belden Inc.)
• Inventors: Wagner, Andrew, DiFalco, Robert, Trople, Chyna
• Granted Patent: US 8,875,129 B2
• Time in Patent Office: Days
• US Class Current: 719/316
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications

Abstract

Embodiments of the present disclosure provide methods and systems for generating an alert based upon detection of a pattern of events within a virtual infrastructure. Other embodiments may be described and claimed.

Claims

1. A method of managing a virtual infrastructure comprising a plurality of virtual machines and virtual objects, the method comprising:

defining at least one pattern of events relating to at least one virtual machine and/or at least one virtual object;

monitoring the virtual infrastructure; and

if the at least one pattern is detected, generating an alert in response to detection of the pattern.

2. The method of claim 1, wherein multiple patterns of events are defined relating to multiple virtual machines and multiple virtual objects.

3. The method of claim 1, further comprising generating a flag for at least one virtual machine and/or at least one virtual object that is affected by occurrence of the at least one pattern of events.

4. The method of claim 1, further comprising remediating one or more events with respect to the affected at least one virtual machine and/or virtual object.

5. The method of claim 4, wherein the remediating is performed manually.

6. The method of claim 4, wherein the remediating is performed automatically.

7. The method of claim 1, wherein multiple virtual machines and/or virtual objects are affected by occurrence of the pattern of events and the method further comprises correlating the affected virtual machines and/or the virtual objects.

8. The method of claim 7, further comprising generating a flag for each affected virtual machine and/or virtual object.

9. The method of claim 7, further comprising remediating one or more events with respect to the affected virtual machines and/or virtual objects.

10. The method of claim 9, wherein the remediating is performed manually.

11. The method of claim 9, wherein the remediating is performed automatically.

12. A system comprising:

a virtual infrastructure implemented on one or more physical hosts, the virtual infrastructure comprising;

a virtual control center;

at least one virtual machine; and

at least one virtual object;

a component configured to;

define at least one pattern of events relating to at least one virtual machine and/or at least one virtual object;

monitor the virtual infrastructure; and

if the at least one pattern is detected, generate an alert in response to detection of the pattern.

13. The system of claim 12, wherein multiple patterns of events are defined relating to multiple virtual machines and multiple virtual objects.

14. The system of claim 12, wherein the component is further configured to generate a flag for at least one virtual machine and/or at least one virtual object that is affected by occurrence of the at least one pattern of events.

15. The system of claim 12, wherein the component is further configured to remediate one or more events with respect to the affected at least one virtual machine and/or virtual object.

16. The system of claim 15, wherein the remediating is performed manually.

17. The system of claim 15, wherein the remediating is performed automatically.

18. The system of claim 12, wherein multiple virtual machines and/or virtual objects are affected by occurrence of the pattern of events and the component is further configured to correlate the affected virtual machines and/or the virtual objects.

19. The system of claim 18, wherein the component is further configured to generate a flag for each affected virtual machine and/or virtual object.

20. The system of claim 18, wherein the component is further configured to remediate one or more events with respect to the affected virtual machines and/or virtual objects.

21. The system of claim 20, wherein the remediating is performed manually.

22. The system of claim 20, wherein the remediating is performed automatically.

23. An article of manufacture comprising:

a storage medium; and

a plurality of instructions therein;

wherein the plurality of instructions are adapted to cause one or more processors within a computing environment to perform a plurality of operations comprising;

defining at least one pattern of events relating to at least one virtual machine and/or at least one virtual object;

monitoring the virtual infrastructure; and

if the at least one pattern is detected, generating an alert in response to detection of the pattern.

24. The article of manufacture of claim 23, wherein multiple patterns of events are defined relating to multiple virtual machines and multiple virtual objects.

25. The article of manufacture of claim 23, wherein the plurality of operations further comprise generating a flag for at least one virtual machine and/or at least one virtual object that is affected by occurrence of the at least one pattern of events.

26. The article of manufacture of claim 23, wherein the plurality of operations further comprise remediating one or more events with respect to the affected at least one virtual machine and/or virtual object.

27. The article of manufacture of claim 26, wherein the remediating is performed manually.

28. The article of manufacture of claim 26, wherein the remediating is performed automatically.

29. The article of manufacture of claim 23, wherein multiple virtual machines and/or virtual objects are affected by occurrence of the pattern of events and the plurality of operations further comprise correlating the affected virtual machines and/or the virtual objects.

30. The article of manufacture of claim 29, wherein the plurality of operations further comprise generating a flag for each affected virtual machine and/or virtual object.

31. The article of manufacture of claim 29, wherein the plurality of operations further comprise remediating one or more events with respect to the affected virtual machines and/or virtual objects.

32. The article of manufacture of claim 31, wherein the remediating is performed manually.

33. The article of manufacture of claim 31, wherein the remediating is performed automatically.