Unified message parser apparatus and system for real-time event correlation
First Claim
1. A system for parsing network messages, comprising:
- a parser knowledge structure on a computer readable medium comprising a hierarchal graph of message classes, wherein each message class parses a portion of the message; and
a universal parsing procedure means for driving the parser knowledge structure including means for receiving a remaining portion of the message being parsed from a higher level message class if message class parsing the portion of the message is not the root node, or retrieving and the message from the notification service if the message class performing the method is the root node.
2 Assignments
0 Petitions
Accused Products
Abstract
Systems and methods consistent with the present invention perform message parsing in a distributed component-based network management system using a parsing knowledge structure called a Message Class Grammar (MCG) containing the set of all potential pre-calculated parsing sequences for an active network element. The MCG may be customized to the messages of different active network elements. A universal parsing procedure (UPP) may be used to traverse the hierarchy structure of the MCG. Tracing the MCG hierarchy from the root node along class-subclass arcs until a terminal node is reached determines the parsing sequence for a particular message. The MCG may be developed with a text editor or with a graphical user interface that enables a non-programmer to edit the parser structure.
-
Citations
10 Claims
-
1. A system for parsing network messages, comprising:
-
a parser knowledge structure on a computer readable medium comprising a hierarchal graph of message classes, wherein each message class parses a portion of the message; and
a universal parsing procedure means for driving the parser knowledge structure including means for receiving a remaining portion of the message being parsed from a higher level message class if message class parsing the portion of the message is not the root node, or retrieving and the message from the notification service if the message class performing the method is the root node. - View Dependent Claims (2, 3, 4, 5, 6, 7)
a developer for building the parser knowledge structure;
a message validating component for validating the accuracy of the built parser knowledge structure; and
a repository for storing at least one validated parser knowledge structure.
-
-
4. A system according to claim 3, wherein the developer is a graphical user interface structured to enable a non-programmer to develop the parser knowledge structure.
-
5. A system according to claim 4, wherein the graphical user interface comprises multiple, linked screens.
-
6. A system according to claim 3, wherein the developer is a text editor.
-
7. A system according to claim 1, wherein each message class of the parser knowledge structure comprises:
-
a pattern string to compare to the message;
an instruction on how to parse a portion of the message corresponding to the pattern string if the pattern string matches the message; and
a means for specifying a location for storing a portion of the message remaining to be parsed.
-
-
8. A method for parsing messages in a distributed component network management system with a parser knowledge structure comprising a hierarchal graph of message classes having a root node and at least one terminal node, wherein each message class parses a portion of the message, the method performed by each message class, comprising:
-
retrieving a message;
determining whether a pattern string of a message class matches the message;
parsing a portion of the message corresponding to the pattern string if the pattern string matches the message; and
saving a remaining portion of the message to be parsed in a predetermined location;
wherein the step of retrieving a message comprises retrieving a remaining portion of the message to be parsed from a higher level message class if the message class performing the method is not the root node, or retrieving the message from the distributed-component network management system if the message class performing the method is the root node.- View Dependent Claims (9, 10)
traversing the parser knowledge structure comprising the hierarchal graph of message classes from the root node to the terminal node, wherein each message class parses a portion of the message and the message is completely parsed when the terminal node is reached; and
providing the parsed message to the distributed-component network management system.
-
-
10. A method according to claim 9, further comprising:
accessing a parser structure from a repository.
Specification