SYSTEM FOR MONITORING COMPUTERIZED SERVICES

• US 20180309634A1
• Filed: 04/19/2017
• Published: 10/25/2018
• Est. Priority Date: 04/19/2017
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: ServiceNow Incorporated
• Inventors: Makovsky, Bnayahu
• Granted Patent: US 10,785,119 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 43/20 the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV
• CPC Class Codes: H04L 43/50 Testing arrangements

Abstract

A computerized service including interconnected components within a computer network is monitored using entry points of a service model corresponding to the computerized service. A discovery process is performed by a discovery mechanism based on an initial entry point of a computerized service. A service model is generated based on results of the discovery process. The service model includes indications of a plurality of components of the computerized service and indications of a plurality of entry points including the initial entry point and at least one additional entry point used for communication between ones of the plurality of components. Using a monitoring mechanism, at least one entry point of the plurality of entry points is tested using at least one protocol associated with the at least one entry point. An event generated based on the test is then processed, such as to identify alerts associated with the computerized service.

Claims

1. A system for monitoring computerized services including interconnected components within a computer network, the system comprising:

a memory; and

a processor,

wherein the memory includes instructions executable by the processor to;

using a discovery mechanism, perform a discovery process based on an initial entry point of a computerized service;

generate a service model based on results of the discovery process, the service model including indications of a plurality of components of the computerized service and indications of a plurality of entry points including the initial entry point and at least one additional entry point used for communication between ones of the plurality of components;

using a monitoring mechanism, test at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point; and

process an event generated based on the test.

2. The system of claim 1, wherein the instructions to perform a discovery process based on an initial entry point of a computerized service include instructions to:

transmit a discovery probe to a component of the computerized service to determine one or more entry points of the at least one entry point, wherein the component is referenced by the initial entry point.

3. The system of claim 1, wherein the instructions to generate a service model based on results of the discovery process include instructions to:

associate ones of the plurality of entry points with the ones of the plurality of components.

4. The system of claim 1, wherein the instructions to test at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point include instructions to:

transmit a test message to an entry point of the plurality of entry points using a protocol associated with the entry point; and

determine a metric based on a response to the test message.

5. The system of claim 4, wherein the event is generated based on the metric, wherein the event is processed responsive to a determination that the metric breaches a threshold associated with the metric.

6. The system of claim 4, wherein the metric indicates any of a disrupted connection to a first component of the service model, a slow response time for accessing the first component, and a content mismatch between the first component and a second component of the service model.

7. The system of claim 1, wherein the instructions to test at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point include instructions to:

select a subset of the plurality of entry points based on an entry point type or a configuration item type.

8. The system of claim 1, wherein the instructions include instructions to:

determine whether to test the at least one entry point using the at least one protocol based on an indication of a status of the service model.

9. The system of claim 1, wherein the discovery mechanism and the monitoring mechanism are implemented on an agent device.

10. A method for monitoring computerized services including interconnected components within a computer network, the method comprising:

using a discovery mechanism, performing a discovery process based on an initial entry point of a computerized service;

generating a service model based on results of the discovery process, the service model including indications of a plurality of components of the computerized service and indications of a plurality of entry points including the initial entry point and at least one additional entry point used for communication between ones of the plurality of components;

using a monitoring mechanism, testing at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point; and

processing an event generated based on the test.

11. The method of claim 10, wherein performing a discovery process based on an initial entry point of a computerized service comprises:

transmitting a discovery probe to a component of the computerized service to determine one or more entry points of the at least one entry point, wherein the component is referenced by the initial entry point.

12. The method of claim 10, wherein generating a service model based on results of the discovery process comprises:

associating ones of the plurality of entry points with the ones of the plurality of components.

13. The method of claim 10, wherein testing at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point comprises:

transmitting a test message to an entry point of the plurality of entry points using a protocol associated with the entry point; and

determining a metric based on a response to the test message.

14. The method of claim 13, wherein the event is generated based on the metric, wherein the event is processed responsive to determining that the metric breaches a threshold associated with the metric.

15. The method of claim 13, wherein the metric indicates any of a disrupted connection to a first component of the service model, a slow response time for accessing the first component, and a content mismatch between the first component and a second component of the service model.

16. The method of claim 10, wherein testing at least one entry point of the plurality of entry points using at least one protocol associated with the at least one entry point comprises:

selecting a subset of the plurality of entry points based on an entry point type or a configuration item type.

17. The method of claim 10, the method comprising:

determining whether to test the at least one entry point using the at least one protocol based on an indication of a status of the service model.

18. A non-transitory computer-readable storage medium comprising processor-executable routines that, when executed by a processor, facilitate a performance of operations comprising:

receiving, from a management system, a command to test an entry point included in a service model associated with a computerized service;

transmitting a test message to the entry point using a protocol associated with the entry point;

generating an event based on a response to the test message; and

transmitting the event to the management system.

19. The non-transitory computer-readable storage medium of claim 18, wherein the operations for generating an event based on a response to the test message comprise:

determining a metric based on a response to the test message; and

generating the event based on the metric responsive to determining that the metric breaches a threshold associated with the metric.

20. The non-transitory computer-readable storage medium of claim 18, the operations comprising:

opening a connection to the management system; and

receiving, from the management system and using the opened connection, a monitoring mechanism configured to process the command by transmitting the test message and generating the event.