APPLICATION OF NEURAL NETS TO DETERMINETHE PROBABILITY OF AN EVENT BEING CAUSAL

• US 20170250932A1
• Filed: 12/12/2016
• Published: 08/31/2017
• Est. Priority Date: 04/25/2014
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Moogsoft Inc. (Dell Technologies Inc.)
• Inventors: Tee, Philip, Spreenberg, Peter
• Granted Patent: US 10,050,910 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

An event clustering system has an extraction engine in communication with a managed infrastructure. A signalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The signalizer engine determines one or more common characteristics or features from events, the signalizer engine using the common features of events to produce clusters of events relating to the failure or errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information. The system is configured to group two or more situations, where a situation is a collection of one or more events or alerts representative of a problem in the managed infrastructure.

Claims

1. An event clustering system, comprising:

an extraction engine in communication with a managed infrastructure;

a signalizer engine that includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine, the signalizer engine determining one or more common characteristics or features from events, the signalizer engine using the common features of events to produce clusters of events relating to the failure or errors in the managed infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information;

wherein the system is configured to group two or more situations, where a situation is a collection of one or more events or alerts representative of a problem in the managed infrastructure.

2. The system of claim 1, wherein a situation represents a point in time when one or more managed infrastructure related events occurred.

3. The system of claim 1, wherein machine learning is utilized to educate the system.

4. The system of claim 1, wherein the system learns from prior situations.

5. The system of claim 4, wherein the prior situations are used to discard things that are not relevant to a situation.

6. The system of claim 4, wherein the system focuses on one or more elements of a situation.

7. The system of claim 1, further comprising:

a user interface.

8. The system of claim 7, wherein the user interface is configured to provide a summary view of a situation.

9. The system of claim 7, wherein the interface is configured to provide a summary view of the plurality of situations.

10. The system of claim 1, further comprising:

filtering to reduce a number of situations displayed based on attributes.

11. The system of claim 1, further comprising:

a situation room.

12. The system of claim 11, wherein the situation room includes a guide for a user.

13. The system of claim 12, wherein the guide includes a start page.

14. The system of claim 12, wherein the situation room contains a feed view that displays one or more activities in a situation'"'"'s life cycle.

15. The system of claim 11, wherein the system is configured to allow users to create a user post.

16. The system of claim 11, wherein the system is configured to provide chat conversations relative to a situation.

17. The system of claim 11, further comprising:

a team room that includes members.

18. The system of claim 17, wherein a situation is linked to the team room.

19. The system of claim 17, wherein a situation is linked to a plurality of team rooms at the same time.

20. The system of claim 17, wherein a team room has a longer duration than a situation room.

21. The system of claim 17, wherein the team room includes a view of the system and user activity.

22. The system of claim 17, wherein members of the team room create posts available to other members of the team room.

23. The system of claim 17, wherein members of the team room can create posts.

24. The system of claim 23 wherein each of a post can be at least one of:

a question;

a tip to solve a problem and a text statement.

25. The system of claim 23, wherein the posts provide a method for classifying one or more posts and enable at least one of:

organization;

search; and

filtering for the one or more posts.