AUTOMATIC EVENT GROUP ACTION INTERFACE
First Claim
Patent Images
1. A method comprising:
- causing display of an interface enabling a user to indicate information to control the operation of a service monitoring system to automatically identify and update a group of events from among a plurality of events in an event datastore;
receiving user input via the interface including;
an indication of group membership criteria;
an indication of a causable group action;
an indication of a precondition related to the causable group action;
creating an event group policy definition in computer storage based at least in part on the group membership criteria, the causable group action, and the precondition;
wherein one or more events of the plurality of events in the event datastore is each a notable event produced by a correlation search against stored KPI values, each KPI value produced by a search query that defines the KPI and that derives the KPI value from machine data associated with one or more entities that perform a service, each entity having an entity definition that identifies machine data associated with the respective entity, and each said entity definition associated with a service definition representing the service;
wherein the machine data is produced by one or more components within an information technology environment and reflects activity within the information technology environment; and
wherein the method is performed by one or more processing devices.
1 Assignment
0 Petitions
Accused Products
Abstract
An automatic service monitor in an information technology environment is equipped to automatically identify and group recognized events based on user-defined criteria, and to automatically perform user-defined operations against the group and its members at the detection of user-specified conditions. A related user interface is taught.
-
Citations
30 Claims
-
1. A method comprising:
-
causing display of an interface enabling a user to indicate information to control the operation of a service monitoring system to automatically identify and update a group of events from among a plurality of events in an event datastore; receiving user input via the interface including; an indication of group membership criteria; an indication of a causable group action; an indication of a precondition related to the causable group action; creating an event group policy definition in computer storage based at least in part on the group membership criteria, the causable group action, and the precondition; wherein one or more events of the plurality of events in the event datastore is each a notable event produced by a correlation search against stored KPI values, each KPI value produced by a search query that defines the KPI and that derives the KPI value from machine data associated with one or more entities that perform a service, each entity having an entity definition that identifies machine data associated with the respective entity, and each said entity definition associated with a service definition representing the service; wherein the machine data is produced by one or more components within an information technology environment and reflects activity within the information technology environment; and wherein the method is performed by one or more processing devices. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. A system comprising:
-
a memory; and a processing device coupled with the memory to; cause display of an interface enabling a user to indicate information to control the operation of a service monitoring system to automatically identify and update a group of events from among a plurality of events in an event datastore; receive user input via the interface including; an indication of group membership criteria; an indication of a causable group action; an indication of a precondition related to the causable group action; create an event group policy definition in computer storage based at least in part on the group membership criteria, the causable group action, and the precondition; wherein one or more events of the plurality of events in the event datastore is each a notable event produced by a correlation search against stored KPI values, each KPI value produced by a search query that defines the KPI and that derives the KPI value from machine data associated with one or more entities that perform a service, each entity having an entity definition that identifies machine data associated with the respective entity, and each said entity definition associated with a service definition representing the service; and wherein the machine data is produced by one or more components within an information technology environment and reflects activity within the information technology environment. - View Dependent Claims (22, 23, 24, 25, 26, 27, 28, 29)
-
-
30. A non-transitory computer readable storage medium encoding instructions thereon that, in response to execution by one or more processing devices, cause the one or more processing devices to perform operations comprising:
-
causing display of an interface enabling a user to indicate information to control the operation of a service monitoring system to automatically identify and update a group of events from among a plurality of events in an event datastore; receiving user input via the interface including; an indication of group membership criteria; an indication of a causable group action; an indication of a precondition related to the causable group action; creating an event group policy definition in computer storage based at least in part on the group membership criteria, the causable group action, and the precondition; wherein one or more events of the plurality of events in the event datastore is each a notable event produced by a correlation search against stored KPI values, each KPI value produced by a search query that defines the KPI and that derives the KPI value from machine data associated with one or more entities that perform a service, each entity having an entity definition that identifies machine data associated with the respective entity, and each said entity definition associated with a service definition representing the service; and wherein the machine data is produced by one or more components within an information technology environment and reflects activity within the information technology environment.
-
Specification