Method and system for managing a group of computers

• US 6,212,581 B1
• Filed: 01/22/1997
• Issued: 04/03/2001
• Est. Priority Date: 05/05/1994
• Status: Expired due to Fees

• Current Assignee: Nitrosecurity-Openservice Incorporated
• Original Assignee: Openservice, Inc.
• Inventors: Graf, Lars Oliver
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): DU, THUAN N
• Application Number:
  US08/787,115
• Time in Patent Office: 1,532 Days
• Field of Search: 395/674, 395/200, 706/45, 710/17-19, 717/1
• US Class Current: 710/18
• CPC Class Codes: G06F 11/0715 in a system implementing multitasking multitasking per se G06F9/46
• CPC Class Codes: G06F 11/1438 Restarting or rejuvenating
• CPC Class Codes: G06F 11/327 Alarm or error message display
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/81 Threshold

Abstract

The system and method of this invention automatically manages a group of computers by automatically gathering data, storing the data, analyzing the stored data to identify specified conditions, and initiating automated actions to respond to the detected conditions. The invention, hereafter “SYSTEMWatch AI-L”, comprises a SYSTEMWatch AI-L client which turns a computer into a managed computer, a SYSTEMWatch AI-L console, which turns a computer into a monitoring computer, a SYSTEMWatch AI-L send facility, which allows a system administrator to send commands to various SYSTEMWatch AI-L clients through the SYSTEMWatch AI-L console, and a SYSTEMWatch AI-L report facility which allows a system administrator to query information collected and processed by the SYSTEMWatch AI-L clients and SYSTEMWatch AI-L consoles.

Claims

1. A computer management system, comprising:

a monitoring computer system including a console program; and

a managed computer system including a client program with a continuously running main loop, wherein the client program includes;

an exception detection system for detecting when the availability of a resource on the managed computer system falls below a predetermined threshold;

an alert manager including a system for creating and validating an alert, a system for communicating the alert to the console program, and a system for determining a default action; and

an action manager for automatically initiating the default action in response to the alert.

2. The computer management system of claim 1, wherein the default action includes a mechanism for terminating the client program.

3. The computer management system of claim 1, wherein the default action includes a mechanism for gathering file information and for removing files of a predefined type.

4. The computer management system of claim 3, wherein the predefined type includes junk files.

5. The computer management system of claim 1, wherein the resource includes swap space on the managed computer system, and wherein the default action includes a mechanism for adding swap space.

6. The computer management system of claim 1, wherein the monitoring computer system and the managed computer system are contained in a single computer system.

7. The computer management system of claim 1, wherein the client program includes a plurality of predefined alert escalation schemes, and the alert manager further includes a system for associating one of the predefined escalation schemes to the alert.

8. The computer management system of claim 1, wherein the exception detection system includes an expert system that is initiated from the continuously running main loop, and wherein the expert system is comprised of a plurality of forward chaining rules.

9. A computer system comprising:

a central processing unit;

a computer system memory; and

a computer management program stored in the computer system memory for managing resources on the computer system, wherein the computer management program includes;

a database for storing data associated with the resources, wherein each piece of data stored in the database includes a host of origin identifier and a timestamp;

an expert system for detecting problems associated with the resources by testing a plurality of rules, and for responding to problems by initiating one of a plurality of possible actions, wherein the expert system examines a state of each rule to determine if the rule is eligible for testing; and

a language interpreter that configures the database and generates the plurality of rules for the expert system based on a program file.

10. The computer system of claim 9, wherein the computer management program further includes a communications mechanism for communicating detected problems and responsive actions over a network.

11. The computer system of claim 9, wherein the computer management program further includes an application layer having a plurality of program files written in a high level language that can be interpreted by the language interpreter.

12. The computer system of claim 11, wherein the program files include an executable program.

13. The computer system of claim 11, wherein one of the program files includes a system for creating database declarations.

14. The computer system of claim 11, wherein one of the program files includes an alert handling mechanism that generates an alert in response to a detected problem.

15. The computer system of claim 14, wherein the alert handling mechanism includes a system for validating the alert.

16. The computer system of claim 14, wherein the alert handling mechanism includes a system for assigning an escalation scheme to the alert.

17. The computer system of claim 14, wherein the alert handling mechanism includes a system for executing a default action assigned to the alert.

18. The computer system of claim 17, wherein the default action includes terminating the computer management program.

19. The computer system of claim 17, wherein the default action includes gathering file information and then removing files of a predefined type.

20. The computer system of claim 11, wherein one of the program files includes rules for the expert system to monitor resources on the computer system.