Error analysis fed from a knowledge base

• US 7,007,200 B2
• Filed: 07/11/2002
• Issued: 02/28/2006
• Est. Priority Date: 07/11/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Salem, Hany A.
• Primary Examiner(s): Beausoliel, Robert
• Assistant Examiner(s): Manoskey, Joseph D
• Application Number:
  US10/195,182
• Publication Number:
  US 20040078667A1
• Time in Patent Office: 1,328 Days
• Field of Search: 714/25, 714/26, 714/30, 714/38, 706/45
• US Class Current: 714/26
• CPC Class Codes: G06F 11/0706 the processing taking place on a specific hardware platform or in a specific software environment
• CPC Class Codes: G06F 11/0778 Dumping, i.e. gathering error/state information after a fault for later diagnosis
• CPC Class Codes: G06F 11/0781 Error filtering or prioritizing based on a policy defined by the user or on a policy defined by a hardware/software module, e.g. according to a severity level
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

An example of a solution provided here comprises analyzing an incident, responding to said incident, and customizing the response, based on the result of the analysis. Another example of a solution comprises accessing a knowledge base, comparing a current incident to known incidents in said knowledge base, and if a match is found, retrieving information from said knowledge base, said information being relevant to the current incident. Methods for handling errors, systems for executing such methods, and instructions on a computer-usable medium, for executing such methods, are provided.

Claims

1. A method, in a data processing system, for handling errors, said method comprising:

receiving an indication of a current incident from a runtime environment of said data processing system;

invoking, in response to receiving said indication of said current incident, a diagnostic module associated with a component of said data processing system associated with said current incident, wherein said diagnostic module utilizes a specific subset of one or more utilities from a plurality of utilities provided in a diagnostic engine for data capture, and wherein different subsets of utilities in said plurality of utilities are defined for different diagnostic modules associated with components of said data processing system;

determining if an analysis engine is enabled;

performing customized data capture for said current incident, if said analysis engine is enabled, wherein said customized data capture is retrieval of a set of data specified as data to be retrieved for incidents of a type matching said current incident;

accessing a knowledge base if said analysis engine is enabled;

comparing said current incident to known incidents in said knowledge base if said analysis engine is enabled;

if a match is found, retrieving information from said knowledge base, said information being relevant to said current incident;

generating a customized response based on said retrieved information from said knowledge base and data captured by invoking said diagnostic module and performing customized data capture, if a match is found; and

generating a basic response if said analysis engine is not enabled, wherein said basic response is not customized based on information from said knowledge base and data captured by performing customized data capture.

2. The method of claim 1, wherein said accessing a knowledge base further comprises accessing data elements chosen from:

symptoms;

directives;

solutions;

work-arounds; and

explanations.

3. The method of claim 1, wherein said retrieving information further comprises retrieving at least one item chosen from:

directives;

solutions;

work-arounds; and

explanations.

4. The method of claim 1, wherein said retrieving information further comprises:

retrieving at least one message associated with said current incident, chosen from;

a message suggesting how to solve a problem;

a message suggesting how to work around a problem; and

a message about a cause of said current incident.

5. The method of claim 1, further comprising:

making said knowledge base available to a plurality of software components.

6. The method of claim 1, further comprising:

making said knowledge base available to a plurality of users.

7. The method of claim 1, further comprising:

automatically keeping said knowledge base up to date.

8. The method of claim 1, further comprising:

utilizing said information from said knowledge base to dynamically tune a response to said current incident in at least one software component;

whereby said response may be changed without changing code in said at least one software component.

9. The method of claim 1, further comprising:

taking corrective action in response to said current incident.

10. The method of claim 1, further comprising:

determining if said current incident warrants further analysis by an analysis engine based on a configurable filter of incidents, wherein the configurable filter of incidents is applied to a plurality of incidents of different types; and

returning control to said runtime environment without further analysis if it is determined that said current incident does not warrant further analysis.

11. The method of claim 10, wherein said configurable filter includes a set of operational states of said data processing system where further analysis of incidents is suspended, and wherein determining if said current incident warrants further analysis includes:

determining, based on said configurable filter, if said data processing system is in an operational state where further analysis of incidents is suspended; and

determining that said current incident does not warrant further analysis if said data processing system is in an operational state where further analysis of incidents is suspended.

12. The method of claim 10, wherein said configurable filter includes a listing of previously handled incidents, and wherein determining if said current incident warrants further analysis includes:

determining if said current incident matches a previously handled incident in said listing of previously handled incidents; and

determining that said current incident does not warrant further analysis if said current incident matches a previously handled incident in said listing of previously handled incidents.

13. The method of claim 10, wherein said configurable filter includes severity of incident criteria and type of incident criteria against which characteristics of said current incident are compared to determine if further analysis of said current incident is warranted.

14. A system for handling errors, comprising:

means for receiving an indication of a current incident from a runtime environment of said data processing system;

means for invoking, in response to receiving said indication of said current incident, a diagnostic module associated with a component of said data processing system associated with said current incident, wherein said diagnostic module utilizes a specific subset of one or more utilities from a plurality of utilities provided in a diagnostic engine for data capture, and wherein different subsets of utilities in said plurality of utilities are defined for different diagnostic modules associated with components of said data processing system;

means for determining if an analysis engine is enabled;

means for performing customized data capture for said current incident, if said analysis engine is enabled, wherein said customized data capture is retrieval of a set of data specified as data to be retrieved for incidents of a type matching said current incident;

means for accessing a knowledge base if said analysis engine is enabled;

means for comparing said current incident to known incidents in said knowledge base if said analysis engine is enabled;

means for retrieving information from said knowledge base, said information being relevant to said current incident, if a match is found;

means for generating a customized response based on said retrieved information from said knowledge base and data captured by invoking said diagnostic module and performing customized data capture, if a match is found; and

means for generating a basic response if said analysis engine is not enabled, wherein said basic response is not customized based on information from said knowledge base and data captured by performing customized data capture.

15. The system of claim 14, wherein said means for generating a customized response further comprises means for at least one response chosen from:

taking corrective action;

providing a message; and

capturing data.

16. The system of claim 14, wherein said means for generating a customized response further comprises:

means for providing at least one message associated with said current incident, chosen from;

a message suggesting how to solve a problem;

a message suggesting how to work around a problem; and

a message about a cause of said current incident.

17. The system of claim 14, wherein said means for generating a customized response further comprises:

means for performing an action in addition to an action set as a default action.

18. The system of claim 14, further comprising:

means for storing customization information; and

means for retrieving said customization information.

19. The system of claim 18, further comprising:

means for automatically keeping said customization information up to date.

20. The system of claim 14, further comprising:

means for storing data elements chosen from;

symptoms;

directives;

solutions;

work-arounds; and

explanations.

21. The system of claim 14, further comprising:

means for determining if said current incident warrants further analysis by an analysis engine based on a configurable filter of incidents, wherein the configurable filter of incidents is applied to a plurality of incidents of different types; and

means for returning control to said runtime environment without further analysis if it is determined that said current incident does not warrant further analysis.

22. The system of claim 21, wherein said configurable filter includes a set of operational states of said data processing system where further analysis of incidents is suspended, and wherein said means for determining if said current incident warrants further analysis includes:

means for determining, based on said configurable filter, if said data processing system is in an operational state where further analysis of incidents is suspended; and

means for determining that said current incident does not warrant further analysis if said data processing system is in an operational state where further analysis of incidents is suspended.

23. The system of claim 22, wherein said configurable filter includes a listing of previously handled incidents, and wherein said means for determining if said current incident warrants further analysis includes:

means for determining if said current incident matches a previously handled incident in said listing of previously handled incidents; and

means for determining that said current incident does not warrant further analysis if said current incident matches a previously handled incident in said listing of previously handled incidents.

24. The system of claim 22, wherein said configurable filter includes severity of incident criteria and type of incident criteria against which characteristics of said current incident are compared to determine if further analysis of said current incident is warranted.

25. A computer-usable medium having computer-executable instructions for handling errors, said computer-executable instructions comprising:

means for receiving an indication of a current incident from a runtime environment of said data processing system;

means for invoking, in response to receiving said indication of said current incident, a diagnostic module associated with a component of said data processing system associated with said current incident, wherein said diagnostic module utilizes a specific subset of one or more utilities from a plurality of utilities provided in a diagnostic engine for data capture, and wherein different subsets of utilities in said plurality of utilities are defined for different diagnostic modules associated with components of said data processing system;

means for determining if an analysis engine is enabled;

means for performing customized data capture for said current incident, if said analysis engine is enabled, wherein said customized data capture is retrieval of a set of data specified as data to be retrieved for incidents of a type matching said current incident;

means for accessing a knowledge base if said analysis engine is enabled;

means for comparing said current incident to known incidents in said knowledge base if said analysis engine is enabled;

means for retrieving information from said knowledge base, said information being relevant to said current incident, if a match is found;

means for generating a customized response based on said retrieved information from said knowledge base and data captured by invoking said diagnostic module and performing customized data capture, if a match is found; and

means for generating a basic response if said analysis engine is not enabled, wherein said basic response is not customized based on information from said knowledge base and data captured by performing customized data capture.

26. The computer-usable medium of claim 25, wherein said means for generating a customized response further comprises means for at least one response chosen from:

taking corrective action;

providing a message; and

capturing data.

27. The computer-usable medium of claim 25, wherein said means for generating a customized response further comprises:

means for providing at least one message associated with said current incident, chosen from;

a message suggesting how to solve a problem;

a message suggesting how to work around a problem; and

a message about a cause of said current incident.

28. The computer-usable medium of claim 25, wherein said means for generating a customized response further comprises:

means for performing an action in addition to an action set as a default action.

29. The computer-usable medium of claim 25, further comprising:

means for storing customization information; and

means for retrieving said customization information.

30. The computer-usable medium of claim 29, further comprising:

means for automatically keeping said customization information up to date.

31. The computer-usable medium of claim 25, further comprising:

means for storing data elements chosen from;

symptoms;

directives;

solutions;

work-arounds; and

explanations.

32. The computer-useable medium of claim 25, further comprising:

means for determining if said current incident warrants further analysis by an analysis engine based on a configurable filter of incidents, wherein the configurable filter of incidents is applied to a plurality of incidents of different types; and

means for returning control to said runtime environment without further analysis if it is determined that said current incident does not warrant further analysis.

33. The computer-useable medium of claim 32, wherein said configurable filter includes a set of operational states of said data processing system where further analysis of incidents is suspended, and wherein said means for determining if said current incident warrants further analysis includes:

means for determining, based on said configurable filter, if said data processing system is in an operational state where further analysis of incidents is suspended; and

means for determining that said current incident does not warrant further analysis if said data processing system is in an operational state where further analysis of incidents is suspended.

34. The computer-useable medium of claim 32, wherein said configurable filter includes a listing of previously handled incidents, and wherein said means for determining if said current incident warrants further analysis includes:

means for determining if said current incident matches a previously handled incident in said listing of previously handled incidents; and

means for determining that said current incident does not warrant further analysis if said current incident matches a previously handled incident in said listing of previously handled incidents.

35. The computer-useable medium of claim 32, wherein said configurable filter includes severity of incident criteria and type of incident criteria against which characteristics of said current incident are compared to determine if further analysis of said current incident is warranted.