Administering Event Pools For Relevant Event Analysis In A Distributed Processing System

• US 20120304013A1
• Filed: 05/27/2011
• Published: 11/29/2012
• Est. Priority Date: 05/27/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Atkins, Mark G., Carey, James E., Sanders, Philip J.
• Granted Patent: US 9,213,621 B2
• Time in Patent Office: Days
• US Class Current: 714/37
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0763 by bit configuration check, e.g. of formats or tags
• CPC Class Codes: G06F 11/0784 Routing of error reports, e.g. with a specific transmission path or data flow
• CPC Class Codes: G06F 11/3495 for systems

Abstract

Methods, systems, and computer program products for administering event pools for relevant event analysis are provided. Embodiments include assigning, by an incident analyzer, a plurality of events to an events pool; determining, by the incident analyzer, an event suppression duration; determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

Claims

1. A method of administering event pools for relevant event analysis in a distributed processing system, the method comprising:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining, by the incident analyzer, an event suppression duration;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

2. The method of claim 1 further comprising suppressing any events having the particular attributes that were assigned to the events pool prior to the beginning of the event suppression duration.

3. The method of claim 1 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

4. The method of claim 1 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.

5. The method of claim 1 wherein determining an event suppression duration includes determining, by the incident analyzer, for a particular event a particular event suppression duration based on the particular attributes for the particular event.

6. The method of claim 1 further comprising continuing, by the incident analyzer, event processing for events having particular attributes indicating the events occurred after the event suppression duration expired.

7. A system for administering event pools for relevant event analysis in a distributed processing system, the system comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions capable, when executed by the computer processor, of causing the system to carry out the steps of:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining, by the incident analyzer, an event suppression duration;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

8. The system of claim 7 further comprising suppressing any events having the particular attributes that were assigned to the events pool prior to the beginning of the event suppression duration.

9. The system of claim 7 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

10. The system of claim 7 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.

11. The system of claim 7 wherein determining an event suppression duration includes determining, by the incident analyzer, for a particular event a particular event suppression duration based on the particular attributes for the particular event.

12. The system of claim 7 further comprising continuing, by the incident analyzer, event processing for events having particular attributes indicating the events occurred after the event suppression duration expired.

13. A computer program product for administering event pools for relevant event analysis in a distributed processing system, the computer program product disposed upon a computer readable storage medium, the computer program product comprising computer program instructions for:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining, by the incident analyzer, an event suppression duration;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

14. The computer program product of claim 13 further comprising suppressing any events having the particular attributes that were assigned to the events pool prior to the beginning of the event suppression duration.

15. The computer program product of claim 13 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

16. The computer program product of claim 13 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.

17. The computer program product of claim 13 wherein determining an event suppression duration includes determining, by the incident analyzer, for a particular event a particular event suppression duration based on the particular attributes for the particular event.

18. The computer program product of claim 13 further comprising continuing, by the incident analyzer, event processing for events having particular attributes indicating the events occurred after the event suppression duration expired.