Filtering approach for network system alarms
First Claim
1. A method for creating an updateable report representing the alarm status of a network comprising:
- categorizing all alarms generated in the network based on the source and type of alarm;
placing the alarms in at least one filtering system based on source and type, wherein the filtering system replaces selected alarms with alarm representations, and wherein the filtering system includes each of a group of filtering systems comprising;
a temporal filtering system, wherein the temporal filtering system includes at least one temporal filter that is selected from a group of temporal filters comprising;
a frequency-based filter that generates a temporal alarm representation that replaces multiple alarms in response to a quantity of the multiple alarms exceeding a threshold within a period of time; and
a cycling-based filter that generates a second temporal alarm representation that replaces multiple alarms in response to a quantity of cycles of the multiple alarms exceeding a threshold within a period of time, wherein each cycle of the multiple alarms includes generating an alarm followed by clearing the alarm; and
a linkage-based filtering system, wherein the linkage-based filtering system generates a linkage-based alarm representation that replaces sympathetic alarms generated by portions of the network impacted by a failure of a first portion of the network; and
updating a report with the alarm representations.
6 Assignments
0 Petitions
Accused Products
Abstract
A method for creating an updateable report representing the alarm status of a network. Network alarms are categorized based on the source and type of alarm, the alarms are placed in a filtering system based on source and type, selected alarms are replaced with alarm representations, and a report is updated with alarm representations. The filtering system comprises non-temporal, temporal, and linkage-based filtering. Non-temporal filtering includes de-duplication, clear message mapping, and classification. Temporal filtering includes frequency-based and cycling-based filtering. Linkage-based filtering includes internal linkage-based and external linkage-based filtering. The network can comprise the interconnected networks of an enterprise or of a single domain of an enterprise. The domain can comprise a business domain or operating system domain. The network can comprise a group of client computers connected to a server computer. The report can be displayed on a computer screen or can be sent to another location for further processing.
-
Citations
37 Claims
-
1. A method for creating an updateable report representing the alarm status of a network comprising:
-
categorizing all alarms generated in the network based on the source and type of alarm; placing the alarms in at least one filtering system based on source and type, wherein the filtering system replaces selected alarms with alarm representations, and wherein the filtering system includes each of a group of filtering systems comprising; a temporal filtering system, wherein the temporal filtering system includes at least one temporal filter that is selected from a group of temporal filters comprising; a frequency-based filter that generates a temporal alarm representation that replaces multiple alarms in response to a quantity of the multiple alarms exceeding a threshold within a period of time; and a cycling-based filter that generates a second temporal alarm representation that replaces multiple alarms in response to a quantity of cycles of the multiple alarms exceeding a threshold within a period of time, wherein each cycle of the multiple alarms includes generating an alarm followed by clearing the alarm; and a linkage-based filtering system, wherein the linkage-based filtering system generates a linkage-based alarm representation that replaces sympathetic alarms generated by portions of the network impacted by a failure of a first portion of the network; and updating a report with the alarm representations. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. A method for creating an updateable report representing the alarm status of a network comprising:
-
categorizing all alarms generated by one or more elements in a network based on the source and type of alarm; placing the alarms in at least one filtering system based on source and type, wherein the filtering system replaces selected alarms with alarm representations, and wherein the filtering system includes each of a group of filtering systems comprising; a non-temporal filtering system wherein the non-temporal filtering system includes at least one non-temporal filter that is selected from a group of non-temporal filters comprising; a de-duplication filter that generates a de-duplication alarm representation that masks alarms that are repeated while an alarm condition is maintained; and a clear message mapping filter that removes alarms or alarm representations in response to receiving a clear message from the one or more elements that originally generated the alarms or alarms replaced by the alarm representations; and an external linkage-based filtering system that generates a linkage-based alarm representation that replaces sympathetic alarms generated by elements of the network impacted by a failure of a first element of the network; and updating a report with the alarm representations. - View Dependent Claims (22, 23, 24, 25)
-
-
26. A method for creating an updateable report representing the alarm status of a network comprising:
-
categorizing all alarms generated in a network based on the source and type of alarm; placing the alarms in at least one filtering system based on source and type, wherein the filtering system replaces selected alarms with alarm representations, and wherein the filtering system includes each of a group of filtering systems comprising; a de-duplication filtering system that generates a de-duplication alarm representation that masks alarms that are repeated while an alarm condition is maintained; a clear message mapping filtering system that removes alarms or alarm representations in response to receiving a clear message from an originator of the alarms or alarms replaced by the alarm representations; a frequency-based filtering system that generates a temporal alarm representation that replaces multiple alarms in response to a quantity of the multiple alarms exceeding a threshold within a period of time; and a cycling-based filtering system that generates a second temporal alarm representation that replaces multiple alarms in response to a quantity of cycles of the multiple alarms exceeding a threshold within a period of time, wherein each cycle of the multiple alarms includes generating an alarm followed by generating a clear message; and updating a report with the alarm representations. - View Dependent Claims (27)
-
-
28. A method for monitoring the alarm status of a network comprising:
-
capturing alarms generated by elements of the network; applying at least one filter to the alarms wherein the filter generates alarm representations for selected alarms and wherein the filters include each of a group of filters comprising; non-temporal filters, wherein the non-temporal filters include at least one non-temporal filter that is selected from a group of non-temporal filters comprising; a de-duplication filter that generates a de-duplication alarm representation that masks alarms that are repeated while an alarm condition is maintained; and a clear message mapping filter that removes alarms or alarm representations in response to receiving a clear message from corresponding ones of the elements that originally generated the alarms or alarms replaced by the alarm representations; temporal filters, wherein the temporal filters include at least one temporal filter selected from a group of temporal filters comprising; a frequency-based filter that generates a temporal alarm representation that replaces multiple alarms in response to a quantity of the multiple alarms exceeding a threshold within a period of time; and a cycling-based filter that generates a second temporal alarm representation that replaces multiple alarms in response to a quantity of cycles of the multiple alarms exceeding a threshold within a period of time, wherein each cycle of the multiple alarms includes generating an alarm followed by clearing the alarm; and linkage-based filters, wherein the linkage-based filters generate a linkage-based alarm representation that replaces sympathetic alarms generated by portions of the network impacted by a failure of a first portion of the network; displaying the generated alarm representations and a selection of the alarms which have passed through the filters; monitoring the display; and taking action in response to the displayed alarm representations and alarms. - View Dependent Claims (29, 30, 31, 32, 33, 34, 35, 36, 37)
-
Specification