SYSTEMS AND METHODS FOR MONITORING AND ANALYZING COMPUTER AND NETWORK ACTIVITY

• US 20180115464A1
• Filed: 10/26/2016
• Published: 04/26/2018
• Est. Priority Date: 10/26/2016
• Status: Abandoned Application

• Current Assignee: New Relic
• Original Assignee: SignifAi, Inc. (New Relic)
• Inventors: FIGHEL, Guy
• Application Number:
  US15/334,928
• Publication Number:
  US 20180115464A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/142 using statistical or mathematical methods
• CPC Class Codes: H04L 41/20 Network management software packages
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A system for monitoring and reporting on a production environment obtains data from a production environment via one or more application programming interfaces (APIs) that are resident on one or more computing systems of the production environment. The system uses the obtained data to calculate metrics, and the system then uses the obtained data and the calculated metrics to determine whether a predetermined incident has occurred. If a predetermined incident has occurred, then it may be immediately reported, or a secondary analysis could first be performed to determine if the incident should be reported.

Claims

1. A method for monitoring and reporting on a production environment, comprising:

obtaining data relating to a production environment;

calculating at least one metric based on the obtained data;

analyzing at least one of the obtained data and the calculated at least one metric to determine if a predetermined incident has occurred; and

determining, if a predetermined incident has occurred, whether to report the predetermined incident based on whether a rule relevant to the predetermined incident exists.

2. The method of claim 1, wherein obtaining data comprises obtaining data from at least one application programming interface (API) that is installed on a computing system that is resident within the production environment.

3. The method of claim 1, wherein obtaining data comprises:

obtaining data from at least one application programming interface (API) that is installed on a computing system that is resident within the production environment; and

loading the obtained data into at least one queue.

4. The method of claim 1, wherein calculating at least one metric comprises:

determining whether the obtained data is valid data using at least one of an encryption code or key that has been assigned to the production environment; and

calculating at least one metric based on the obtained data only if the obtained data is determined to be valid.

5. The method of claim 1, wherein determining whether to report the event comprises:

determining whether a rule relevant to the predetermined incident exists;

reporting the predetermined incident when no rule relevant to the predetermined incident exists;

performing a secondary analysis if a rule relevant to the predetermined incident exists, the secondary analysis being in accordance with the rule; and

reporting the predetermined incident only if the rule and the result of the secondary analysis indicates that the predetermined incident should be reported.

6. The method of claim 1, wherein obtaining data relating to a production environment comprises actively obtaining data by actively interrogating one or more computing systems resident at the production environment via one or more application programming interfaces that are installed on the one or more computing systems.

7. The method of claim 1, wherein the analyzing step comprises comparing the at least one of the obtained data and the calculated at least one metric to data and/or calculated metrics from other similar production environments to determine if a predetermined incident has occurred.

8. The method of claim 1, wherein the analysis step utilizes artificial intelligence techniques and data and calculated metrics from other similar production environments to determine if a predetermined incident has occurred.

9. The method of claim 1, further comprising identifying, if a predetermined incident is determined to have occurred, a remedial action that could potentially mitigate a problem or performance issue within the production environment that gave rise to the predetermined incident.

10. A system for monitoring and reporting on a production environment, comprising:

means for obtaining data relating to a production environment;

means for calculating at least one metric based on the obtained data;

means for analyzing at least one of the obtained data and the calculated at least one metric to determine if a predetermined incident has occurred; and

means for determining, if a predetermined incident has occurred, whether to report the predetermined incident based on whether a rule relevant to the predetermined incident exists.

11. A system for monitoring and reporting on a production environment, comprising:

a data collection unit comprising at least one processor that obtains data relating to a production environment;

a metrics unit comprising at least one processor that calculates at least one metric based on the obtained data;

an incident unit comprising at least one processor that uses at least one of the obtained data and/or the calculated at least one metric to determine if a predetermined incident has occurred; and

an evaluation unit comprising at least one processor that determines, if a predetermined incident has occurred, whether to report the predetermined incident based on whether a rule relevant to the predetermined incident exists.

12. The system of claim 11, wherein the metrics unit obtains data from at least one application programming interface (API) that is installed on a computing system that is resident within the production environment.

13. The system of claim 11, wherein the metrics unit obtains data from at least one application programming interface (API) that is installed on a computing system that is resident within the production environment, and loads the obtained data into at least one queue.

14. The system of claim 11, wherein the metrics unit determines whether the obtained data is valid data using at least one of an encryption code or key that has been assigned to the production environment, and calculates at least one metric based on the obtained data only if the obtained data is determined to be valid.

15. The system of claim 11, wherein the evaluation unit:

determines whether a rule relevant to the predetermined incident exists;

reports the predetermined incident when no rule relevant to the predetermined incident exists;

performs a secondary analysis if a rule relevant to the predetermined incident exists, the secondary analysis being in accordance with the rule; and

reports the predetermined incident only if the rule and the result of the secondary analysis indicates that the predetermined incident should be reported.

16. The system of claim 11, further comprising an active inspector unit that actively obtains data by actively interrogating one or more computing systems resident at the production environment via one or more application programming interfaces that are installed on the one or more computing systems.

17. The system of claim 11, wherein the incident unit compares the at least one of the obtained data and/or the calculated at least one metric to data and/or calculated metrics from other similar production environments to determine if a predetermined incident has occurred.

18. The system of claim 11, wherein the incident unit utilizes artificial intelligence techniques and data and/or calculated metrics from other similar production environments to determine if a predetermined incident has occurred.

19. The system of claim 11, further comprising a remediation unit that identifies, if a predetermined incident is determined to have occurred, a remedial action that could potentially mitigate a problem or performance issue within the production environment that gave rise to the predetermined incident.

20. A non-transitory computer readable medium that contains instructions which, when performed by one or more processors of a system for monitoring and reporting on a production environment, causes a method to be performed, the method comprising:

obtaining data relating to a production environment;

calculating at least one metric based on the obtained data;

analyzing at least one of the obtained data and the calculated at least one metric to determine if a predetermined incident has occurred; and

determining, if a predetermined incident has occurred, whether to report the predetermined incident based on whether a rule relevant to the predetermined incident exists.