Method and system to correlate a specific alarm to one or more events to identify a possible cause of the alarm
First Claim
Patent Images
1. A method of monitoring network performance comprising:
- maintaining a database of alarms and events from a system of monitored elements; and
automatically identifying a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein automatically identifying the possible cause comprises;
(1) analysis of performance abnormalities and at least one of an event or alert;
(2) statistical correlation;
(3) elimination of unrelated causes;
(4) user defined groupings; and
,(5) relative weightings of monitored elements.
12 Assignments
0 Petitions
Accused Products
Abstract
A system is provided to monitor network performances. The system maintains a database of performance abnormalities, alarms and events from a system of monitored elements. The system automatically identifies a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database. The system displays the cause of the specific alarm. The database includes alarms and events of network devices, network systems, and network applications. The specific alarm consists of a notification of an occurrence of the plurality of events.
-
Citations
57 Claims
-
1. A method of monitoring network performance comprising:
-
maintaining a database of alarms and events from a system of monitored elements; and automatically identifying a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein automatically identifying the possible cause comprises; (1) analysis of performance abnormalities and at least one of an event or alert; (2) statistical correlation; (3) elimination of unrelated causes; (4) user defined groupings; and
,(5) relative weightings of monitored elements. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36)
-
-
37. A network performance monitor comprising:
-
a database maintenance module to maintain a database of alarms and events from a system of monitored elements; an alarm cause identification module coupled to the database maintenance module, wherein the alarm cause identification module is configured to automatically identify a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein the alarm cause identification module automatically identifies a possible cause based on (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements. - View Dependent Claims (38, 39, 40, 41, 42, 43)
-
-
44. A network performance monitor comprising:
-
means for maintaining a database of alarms and events from a system of monitored elements; and means for automatically identifying a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein the means for automatically identifying a possible cause comprises means for (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements. - View Dependent Claims (45, 46, 47, 48, 49, 50)
-
-
51. A computer readable medium, the medium having stored thereon a sequence of instructions which, when executed by a processor, cause the processor to:
-
collect a database of alarms and events from a system of monitored elements; and automatically identify a possible cause of a specific alarm by correlating the specific alarm with a plurality of events using the database, wherein automatically identifying a possible cause comprises (1) analysis of performance abnormalities and at least one of an event or alert, (2) statistical correlation, (3) elimination of unrelated causes, (4) user defined groupings and (5) relative weightings of monitored elements. - View Dependent Claims (52, 53, 54, 55, 56, 57)
-
Specification