System and Method for Visualisation of Behaviour within Computer Infrastructure

• US 20130262347A1
• Filed: 03/26/2013
• Published: 10/03/2013
• Est. Priority Date: 03/29/2012
• Status: Active Grant

• Current Assignee: Elasticsearch Global B.V. (Elastic N.V.)
• Original Assignee: Prelert Incorporated (Elastic N.V.)
• Inventors: Dodson, Stephen
• Granted Patent: US 10,346,744 B2
• Time in Patent Office: Days
• US Class Current: 706/11
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 11/328 Computer systems status display G06F11/327 takes precedence
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: G06N 5/02 Knowledge representation; Symbolic representation
• CPC Class Codes: G06N 7/00 Computing arrangements based on specific mathematical models

Abstract

The field of the disclosure relates generally to a method and system for analysing behaviour of a computer infrastructure and the displaying the behaviour of the computer infrastructure in a graphical manner. The system comprises an analytical engine connected to agents running on devices in the computer infrastructure and analysing continuous data and asynchronous data.

Claims

1. A system for analysing a behaviour of a computer infrastructure with at least one device connected to the computer infrastructure, the system comprising:

an analytics engine for analysing relationships between at least one of continuous data and asynchronous data, wherein the relationships are indicative of behaviour type of the at least one device of the computer infrastructure and

a display indicating at least one detection of the behaviour type.

2. The system of claim 1, wherein the display is adapted to indicate a degree of impact on the computer infrastructure of the behaviour type.

3. The system according to claim 1, wherein at least one of the continuous data and asynchronous data is related to a data operation in an application at the at least one device.

4. The system according to claim 1, at least one of the continuous data and asynchronous data is indicative of running processes on the at least one device.

5. The system according to claim 1, wherein the analytics engine is adapted to diagnose an abnormal one of the behaviour type by analysing at least one of the sequence of the log file entries, the temporal parameters of the log file entries, and the relationships between one or more of the asynchronous data and the continuous data.

6. The system according to claim 1, wherein different ones of graphic elements on the display are linked to different ones of the behaviour types.

7. The system according to claim 6, wherein the different ones of the graphic elements are selectable for opening information panels relating to the linked ones of the behaviour types.

8. The system according to claim 1, wherein the analytics engine is adapted to group the behaviour types and the grouping is represented by a grouping of graphic elements on the display.

9. The system according to claim 1, wherein the analytics engine is a self-learning system.

10. The system according to claim 1, wherein the computer infrastructure is adapted to connect with a data source transferring business and financial data to the computer infrastructure via an interface.

11. A method for analysing a behaviour of a computer infrastructure with at least one device connected to the computer infrastructure, the method comprising:

analysing relationships between at least one of continuous data and asynchronous data, wherein the relationships are indicative of behaviour types of at least one component of the computer infrastructure; and

displaying an indication indicative of the behaviour type.

12. The method according to claim 11, further comprising:

displaying an indication of a degree of impact on the computer infrastructure based on the detection of the at least one of the continuous data and the asynchronous data.

13. The method according to claim 11, further comprising:

comparing the analysis of at least one of the continuous data and the asynchronous data.

14. The method according to claim 11, further comprising:

determining relationships between the continuous data and the asynchronous data.

15. A system for the visualisation of behaviour within a computer infrastructure with at least one device connected to the computer infrastructure, the system comprising:

an analytics engine for analysing relationships between at least one of continuous data and the asynchronous data, wherein the relationships are indicative of the behaviour type of the at least one device of the computer infrastructure;

a display indicating at least one detection of the behaviour type as graphic elements.

16. The system according to claim 15, wherein the graphic element is indicative of an impact on the computer infrastructure and wherein the graphic element is variable.

17. The system according to claim 15, wherein the graphic elements are linked to different ones of the behaviour types of the computer infrastructure.

18. The system according to claim 17, wherein the graphic element is selectable for displaying information about related ones of the behaviour types represented by the graphic element.

19. The system according to claim 15, wherein the graphic elements have different colours or shapes in relation to the degree of impact of the behaviour on the computer infrastructure.

20. The system according to claim 15, wherein the analytics engine is adapted to group the behaviour types and the grouping is represented by a grouping of graphic elements on the display.

21. The system according to claim 15, wherein the analytics engine is a self-learning system.

22. The system according to claim 15, wherein the computer infrastructure is connectable with a data source for reception of data via a server and the server transfers data between the data source and the computer infrastructure.

23. A computer-readable program stored on a non-volatile medium which when run on a computer means causes the computer means to analyse at least one of continuous data and the asynchronous data, wherein the relationships are indicative of behaviour type of at least one component of the computer infrastructure and display an indication indicative of the behaviour type of at least one of the continuous data and the asynchronous data.