Method and apparatus for triage of network alarms
First Claim
1. A method, comprising:
- maintaining a relative importance value and a health value for each of one or more monitored entities;
receiving one or more alarms that are each associated with one of the one or more monitored entities;
determining, for each of the one or more alarms, a triage value based on both the relative importance value and the health value for the monitored entity associated with the alarm; and
determining an order in which the one or more alarms should be addressed based on the triage value associated with each alarm of the one or more alarms.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and apparatus for triaging alarms transmitting from monitored entities in a network is provided. A relative importance value and a health value are maintained for each of one or more monitored entities. A monitored entity may be any hardware or software component that is capable of issuing an alarm. In response to receiving an alarm at a monitoring device, a triage value is determined based on both the relative importance value and the health value for the monitored entity associated with the received alarm. The triage value reflects any dependencies that the monitored entity that issued the alarm shares with another monitored entities. The triage value also reflects the current operational status of the monitored entity that issued the alarm. The monitoring device may determine an order in which the one or more received alarms should be addressed based on the triage value associated with each alarm.
25 Citations
52 Claims
-
1. A method, comprising:
-
maintaining a relative importance value and a health value for each of one or more monitored entities; receiving one or more alarms that are each associated with one of the one or more monitored entities; determining, for each of the one or more alarms, a triage value based on both the relative importance value and the health value for the monitored entity associated with the alarm; and determining an order in which the one or more alarms should be addressed based on the triage value associated with each alarm of the one or more alarms. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. A method, comprising:
-
assigning an intrinsic value to each of one or more monitored entities; dynamically determining a relative importance value for each of one or more monitored entities based on a set of dependent relationships among the one or more monitored entities; receiving two or more alarms that were each issued by one of the one or more monitored entities; and dynamically determining an order of importance for two or more alarms based, at least in part, upon the relative importance value associated with the monitored entity in the one or more monitored entities that issued the alarm.
-
-
14. A machine-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:
-
maintaining a relative importance value and a health value for each of one or more monitored entities; receiving one or more alarms that are each associated with one of the one or more monitored entities; determining, for each of the one or more alarms, a triage value based on both the relative importance value and the health value for the monitored entity associated with the alarm; and determining an order in which the one or more alarms should be addressed based on the triage value associated with each alarm of the one or more alarms. - View Dependent Claims (15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25)
-
-
26. A machine-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to perform the steps of:
-
assigning an intrinsic value to each of one or more monitored entities; dynamically determining a relative importance value for each of one or more monitored entities based on a set of dependent relationships among the one or more monitored entities; receiving two or more alarms that were each issued by one of the one or more monitored entities; and dynamically determining an order of importance for two or more alarms based, at least in part, upon the relative importance value associated with the monitored entity in the one or more monitored entities that issued the alarm.
-
-
27. An apparatus comprising a memory storing instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:
-
maintaining a relative importance value and a health value for each of one or more monitored entities; receiving one or more alarms that are each associated with one of the one or more monitored entities; determining, for each of the one or more alarms, a triage value based on both the relative importance value and the health value for the monitored entity associated with the alarm; and determining an order in which the one or more alarms should be addressed based on the triage value associated with each alarm of the one or more alarms. - View Dependent Claims (28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38)
-
-
39. An apparatus comprising a memory storing instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:
-
assigning an intrinsic value to each of one or more monitored entities; dynamically determining a relative importance value for each of one or more monitored entities based on a set of dependent relationships among the one or more monitored entities; receiving two or more alarms that were each issued by one of the one or more monitored entities; and dynamically determining an order of importance for two or more alarms based, at least in part, upon the relative importance value associated with the monitored entity in the one or more monitored entities that issued the alarm.
-
-
40. An apparatus, comprising:
-
means for maintaining a relative importance value and a health value for each of one or more monitored entities; means for receiving one or more alarms that are each associated with one of the one or more monitored entities; means for determining, for each of the one or more alarms, a triage value based on both the relative importance value and the health value for the monitored entity associated with the alarm; and means for determining an order in which the one or more alarms should be addressed based on the triage value associated with each alarm of the one or more alarms. - View Dependent Claims (41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51)
-
-
52. An apparatus, comprising:
-
means for assigning an intrinsic value to each of one or more monitored entities; means for dynamically determining a relative importance value for each of one or more monitored entities based on a set of dependent relationships among the one or more monitored entities; means for receiving two or more alarms that were each issued by one of the one or more monitored entities; and means for dynamically determining an order of importance for two or more alarms based, at least in part, upon the relative importance value associated with the monitored entity in the one or more monitored entities that issued the alarm.
-
Specification