Preliminary classification of events to facilitate cause-based analysis
First Claim
1. A method for facilitating cause-based analysis relating to events in a networked computer system, the method comprising:
- obtaining, from the networked computer system, a plurality of event messages, wherein each of the plurality of event messages relate to an event within the networked computer system, and the plurality of event messages comprising a first event message associated with a first event;
prior to performing cause-based analysis relating to the first event, performing preliminary cause-based classification of the first event to determine a preliminary cause-based classification of the first event from among a plurality of possible cause-based classifications, wherein the preliminary cause-based classification is performed based on the first event message;
facilitating cause-based analysis relating to the first event utilizing the determined preliminary cause-based classification of the first event; and
wherein performing preliminary cause-based classification comprises determining a preliminary classification for the first event, and wherein preliminary classifications comprising root cause classification, symptom classification, and information classification.
2 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides methods and systems for performing preliminary cause-based classification of events in a computer or networked computer system. Methods are provided in which, based on an event message, cause-based preliminary classification of an associated event is performed. The result of the preliminary classification is used to facilitate subsequent cause-based analysis, such as root cause analysis, relating to the event. Methods are provided in which preliminary classification is performed using a database including a catalog associating event messages with appropriate preliminary classifications of events associated with the event messages.
73 Citations
10 Claims
-
1. A method for facilitating cause-based analysis relating to events in a networked computer system, the method comprising:
-
obtaining, from the networked computer system, a plurality of event messages, wherein each of the plurality of event messages relate to an event within the networked computer system, and the plurality of event messages comprising a first event message associated with a first event; prior to performing cause-based analysis relating to the first event, performing preliminary cause-based classification of the first event to determine a preliminary cause-based classification of the first event from among a plurality of possible cause-based classifications, wherein the preliminary cause-based classification is performed based on the first event message; facilitating cause-based analysis relating to the first event utilizing the determined preliminary cause-based classification of the first event; and wherein performing preliminary cause-based classification comprises determining a preliminary classification for the first event, and wherein preliminary classifications comprising root cause classification, symptom classification, and information classification. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
Specification