Method and apparatus for event correlation in service level management (SLM)

• US 7,600,007 B1
• Filed: 05/23/2000
• Issued: 10/06/2009
• Est. Priority Date: 05/24/1999
• Status: Expired due to Fees

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Lewis, Lundy
• Primary Examiner(s): Srivastava; Vivek
• Assistant Examiner(s): Swearingen; Jeffrey R
• Application Number:
  US09/578,156
• Time in Patent Office: 3,423 Days
• Field of Search: 709/223, 709/231, 345/810, 370/222
• US Class Current: 709/223
• CPC Class Codes: G06Q 10/04 Forecasting or optimisation specially adapted for administrative or management purposes, e.g. linear programming or "cutting stock problem" market predictions or forecasting for commercial activities G06Q30/0202
• CPC Class Codes: G06Q 10/0631 Resource planning, allocation, distributing or scheduling for enterprises or organisations
• CPC Class Codes: G06Q 10/06311 Scheduling, planning or task assignment for a person or group
• CPC Class Codes: G06Q 10/06312 Adjustment or analysis of established resource schedule, e.g. resource or task levelling, or dynamic rescheduling
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/0637 Strategic management or analysis, e.g. setting a goal or target of an organisation; Planning actions based on goals; Analysis or evaluation of effectiveness of goals
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 41/024 using relational databases for representation of network management data, e.g. managing via structured query language [SQL]
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 41/5003 Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 41/5032 Generating service level reports
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0847 Transmission error
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/0882 : Utilisation of link capacity
• CPC Class Codes: H04L 43/0888 : Throughput
• CPC Class Codes: H04L 43/0894 : Packet rate
• CPC Class Codes: H04L 43/12 : Network monitoring probes

Abstract

Method and apparatus for service level management, wherein business processes are composed of services. A state of the service is defined by one or more service parameters, and the service parameters depend upon performance of network components that support the service, e.g., component parameters. The state of the service may depend, for example, on a collection of service parameter values for availability, reliability, security, integrity and response time. A service level agreement is a contract between a supplier and a customer that identifies services supported by a network, service parameters for the services, and service levels (e.g., acceptable levels) for each service parameter.

Claims

1. A computer-implemented system for providing service level management comprising:

a network having a plurality of network hardware components that support a service provided over the network, wherein performance of the service depends upon performances of the plurality of network hardware components that support the service, and wherein the service has a state that represents the performance of the service;

a plurality of monitoring agents configured to monitor respective individual domains of the network that include respective subsets of the plurality of network hardware components that support the service, wherein the plurality of monitoring agents include;

a first monitoring agent configured to monitor one or more component parameters for a first subset of the plurality of network hardware components in a first domain of the network, detect one or more intra-domain events in the first domain as a function of the component parameters monitored in the first domain, and generate one or more intra-domain alarms in the first domain as a function of the intra-domain events detected in the first domain; and

a second monitoring agent configured to monitor one or more component parameters for a second subset of the plurality of network hardware components in a second domain of the network, detect one or more intra-domain events in the second domain as a function of the component parameters monitored in the second domain, and generate one or more intra-domain alarms in the second domain as a function of the intra-domain events detected in the second domain; and

an alarm correlation agent configured to;

correlate the intra-domain alarms generated in the first domain and the second domain to generate one or more inter-domain alarms across the first domain and the second domain;

map the inter-domain alarms generated across the first domain and the second domain to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issue one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

2. The system of claim 1, wherein the plurality of monitoring agents further include:

at least one infrastructure agent configured to monitor one or more parameters for at least one transmission device in an infrastructure of the network;

at least one system agent configured to monitor one or more parameters for at least one computer system on the network;

at least one traffic agent configured to monitor traffic that flows over transmission media on the infrastructure of the network;

at least one application agent configured to monitor at least one software application operating on the network;

at least one trouble-ticketing agent configured to receive reports of problems reported by one or more users with respect to operation of the network;

at least one response time agent configured to monitor response times of one or more communications on the network;

at least one device agent configured to monitor one or more parameters for an individual device on the network; and

at least one multicomponent agent comprising an aggregate of any of the infrastructure agent, the system agent, the traffic agent, the application agent, the trouble-ticketing agent, the response time agent, and the device agent.

3. The system of claim 1, wherein the plurality of monitoring agents comprise reasoning agents that provide reactive or reflexive behavior designed for short-term problem solving relating to the service, and wherein the alarm correlation agent comprises a reasoning agent that provides deliberative behavior designed for long-term problem solving relating to the service.

4. The system of claim 3, wherein the reasoning agents comprise:

at least one rule-based reasoning agent having a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

at least one model-based reasoning agent having a plurality of models that represent the plurality of network hardware components that support the service and a correlation architecture that provides collaboration among the plurality of models;

at least one state-transition graph based reasoning agent having fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

at least one code book based reasoning agent; and

at least one case-based reasoning agent having a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

5. The system of claim 1, further comprising an alarm bucket configured to receive the intra-domain alarms generated in the first domain and the second domain from the first monitoring agent and the second monitoring agent, wherein the alarm correlation agent is further configured to correlate the intra-domain alarms in the alarm bucket.

6. The system of claim 1, wherein the service level agreement further identifies one or more penalties for a supplier of the service when the value of the service parameter does not meet or exceed the service level identified in the service level agreement.

7. The system of claim 6, wherein the service level agreement further identifies one or more rewards for the supplier of the service when the value of the service parameter meets or exceeds the service level identified in the service level agreement.

10. The system of claim 6, wherein the first monitoring agent and the second monitoring agent comprise reasoning agents that provide reactive or reflexive behavior designed for short-term problem solving relating to the service, and wherein the alarm correlation agent comprises a reasoning agent that provides deliberative behavior designed for long-term problem solving relating to the service, wherein the reasoning agents comprise:

at least one rule-based reasoning agent having a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

at least one model-based reasoning agent having a plurality of models that represent the plurality of network hardware components that support the service and a correlation architecture that provides collaboration among the plurality of models;

at least one state-transition graph based reasoning agent having fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

at least one code book based reasoning agent; and

at least one case-based reasoning agent having a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

8. A computer-implemented system for providing service level management comprising:

a network having a plurality of network hardware components that support a service provided over the network, wherein performance of the service depends upon performances of the plurality of network hardware components that support the service, and wherein the service has a state that represents the performance of the service;

a first monitoring agent configured to;

monitor one or more component parameters for a first subset of the plurality of network hardware components in a first domain of the network;

detect one or more intra-domain events in the first domain as a function of the component parameters monitored in the first domain; and

generate one or more intra-domain alarms in the first domain as a function of the intra-domain events detected in the first domain;

a second monitoring agent configured to;

monitor one or more component parameters for a second subset of the plurality of network hardware components in a second domain of the network;

detect one or more intra-domain events in the second domain as a function of the component parameters monitored in the second domain; and

generate one or more intra-domain alarms in the second domain as a function of the intra-domain events detected in the second domain;

an alarm bucket configured to receive the intra-domain alarms generated in the first domain and the second domain from the first monitoring agent and the second monitoring agent; and

an alarm correlation agent configured to;

correlate the intra-domain alarms in the alarm bucket to generate one or more inter-domain alarms across the first domain and the second domain;

map the inter-domain alarms generated across the first domain and the second domain to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issue one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

9. The system of claim 8, wherein the first monitoring agent and the second monitoring agent comprise:

at least one infrastructure agent configured to monitor one or more parameters for at least one transmission device in an infrastructure of the network;

at least one system agent configured to monitor one or more parameters for at least one computer system on the network;

at least one traffic agent configured to monitor traffic that flows over transmission media on the infrastructure of the network;

at least one application agent configured to monitor at least one software application operating on the network;

at least one trouble-ticketing agent configured to receive reports of problems reported by one or more users with respect to operation of the network;

at least one response time agent configured to monitor response times of one or more communications on the network;

at least one device agent configured to monitor one or more parameters for an individual device on the network; and

at least one multicomponent agent comprising an aggregate of any of the infrastructure agent, the system agent, the traffic agent, the application agent, the trouble-ticketing agent, the response time agent, and the device agent.

11. A computer-implemented system for providing service level management comprising:

a network having a plurality of network hardware components that support a service provided over the network, wherein performance of the service depends upon performances of the plurality of network hardware components that support the service, and wherein the service has a state that represents the performance of the service;

a plurality of monitoring agents, wherein each of the plurality of monitoring agents are configured to;

monitor one or more component parameters for a subset of the plurality of network hardware components in a respective domain of a plurality of domains of the network;

detect one or more intra-domain events in the respective domain as a function of the component parameters monitored in the respective domain; and

generate one or more intra-domain alarms in the respective domain as a function of the intra-domain events detected in the respective domain; and

an alarm correlation agent, wherein the alarm correlation agent is configured to;

correlate the intra-domain alarms generated in the respective domains by the plurality of monitoring agents to generate one or more inter-domain alarms across the plurality of domains of the network;

map the inter-domain alarms generated across the plurality of domains of the network to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issue one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

12. The system of claim 11, wherein the alarm correlation agent comprises a reasoning agent that provides deliberative behavior designed for long-term problem solving relating to the service, wherein the reasoning agent comprises:

at least one rule-based reasoning agent having a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

at least one model-based reasoning agent having a plurality of models that represent the plurality of network hardware components that support the service and a correlation architecture that provides collaboration among the plurality of models;

at least one state-transition graph based reasoning agent having fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

at least one code book based reasoning agent; and

at least one case-based reasoning agent having a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

13. A computer-implemented method for providing service level management, comprising:

providing a service over a network having a plurality of network components that support the service, wherein performance of the service depends upon performances of the plurality of network components that support the service, and wherein the service has a state that represents the performance of the service;

monitoring one or more component parameters for the plurality of network components that support the service using a plurality of monitoring agents, wherein each of the plurality of monitoring agents are configured to monitor a subset of the plurality of network components in a respective domain of a plurality of domains of the network;

detecting one or more intra-domain events in each of the respective domains as a function of the component parameters monitored by the plurality of monitoring agents in the respective domains;

generating one or more intra-domain alarms each of the respective domains as a function of the intra-domain events detected in the respective domains;

correlating the intra-domain alarms generated in the respective domains using an alarm correlation agent, wherein the alarm correlation agent is configured to correlate the intra-domain alarms to generate one or more inter-domain alarms across the plurality of domains of the network;

mapping the inter-domain alarms generated across the plurality of domains of the network to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issuing one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

14. The method according to claim 13, wherein the component parameters monitored by the plurality of monitoring agents in the respective domains include:

one or more parameters for at least one transmission device in an infrastructure of the network;

one or more parameters for at least one computer system on the network;

traffic that flows over transmission media on the infrastructure of the network;

at least one software application operating on the network; and

reports of problems reported by one or more users with respect to operation of the network;

one or more parameters for an individual device on the network;

response times of one or more communications on the network; and

an aggregate of any of the transmission device parameters, the computer system parameters, the transmission media traffic, the software application, the reports of problems, the individual device parameters, and the response times.

15. The method of claim 13, wherein the plurality of monitoring agents apply reasoning to detect the intra-domain events and generate the intra-domain alarms, wherein the reasoning includes:

applying rule-based reasoning using a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

applying model-based reasoning using a plurality of models that represent the plurality of network components that support the service and a correlation architecture that provides collaboration among the plurality of models;

applying state-transition graph based reasoning using fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

applying code book based reasoning; and

applying case-based reasoning using a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

16. The method of claim 13, wherein the alarm correlation agent applies reasoning to generate the inter-domain alarms, wherein the reasoning includes:

applying rule-based reasoning using a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

applying model-based reasoning using a plurality of models that represent the plurality of network components that support the service and a correlation architecture that provides collaboration among the plurality of models;

applying state-transition graph based reasoning using fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

applying code book based reasoning; and

applying case-based reasoning using a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

17. A computer-implemented method for providing service level management comprising:

providing a service over a network having a plurality of network components that support the service, wherein performance of the service depends upon performances of the plurality of network components that support the service, and wherein the service has a state that represents the performance of the service;

monitoring one or more component parameters for a first subset of the plurality of network components in a first domain of the network using a first monitoring agent;

detecting one or more intra-domain events in the first domain as a function of the component parameters monitored in the first domain using the first monitoring agent;

generating one or more intra-domain alarms in the first domain as a function of the intra-domain events detected in the first domain using the first monitoring agent;

monitoring one or more component parameters for a second subset of the plurality of network components in a second domain of the network using a second monitoring agent;

detecting one or more intra-domain events in the second domain as a function of the component parameters monitored in the second domain using the second monitoring agent;

generating one or more intra-domain alarms in the second domain as a function of the intra-domain events detected in the second domain using the second monitoring agent;

receiving the intra-domain alarms generated in the first domain and the second domain from the first monitoring agent and the second monitoring agent, wherein the intra-domain alarms are received at an alarm bucket;

correlating the intra-domain alarms in the alarm bucket using an alarm correlation agent, wherein the alarm correlation agent is configured to correlate the intra-domain alarms to generate one or more inter-domain alarms across the plurality of domains of the network;

mapping the inter-domain alarms generated across the plurality of domains of the network to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issuing one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

18. The method of claim 17, wherein the one or more instructions control one or more component parameters for one or more of the plurality of network components that support the service, wherein the one or more instructions are issued to cause the service parameter value to meet or exceed or the service level identified in the service level agreement.

19. A computer hardware device having computer executable instructions recorded thereon, wherein the computer executable instructions are operable to direct a computer hardware device to perform a method for providing service level management, the method comprising:

providing a service over a network having a plurality of network components that support the service, wherein performance of the service depends upon performances of the plurality of network components that support the service, and wherein the service has a state that represents the performance of the service;

monitoring one or more component parameters for the plurality of network components that support the service using a plurality of monitoring agents, wherein each of the plurality of monitoring agents are configured to monitor a subset of the plurality of network components in a respective domain of a plurality of domains of the network;

detecting one or more intra-domain events in each of the respective domains as a function of the component parameters monitored by the plurality of monitoring agents in the respective domains;

generating one or more intra-domain alarms in each of the respective domains as a function of the intra-domain events detected in the respective domains;

correlating the intra-domain alarms generated in the respective domains using an alarm correlation agent, wherein the alarm correlation agent is configured to correlate the intra-domain alarms to generate one or more inter-domain alarms across the plurality of domains of the network;

mapping the inter-domain alarms generated across the plurality of domains of the network to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issuing one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

20. A computer-implemented system for providing service level management comprising:

a network having a plurality of network hardware components that support a service provided over the network, wherein performance of the service depends upon performances of the plurality of network hardware components that support the service, and wherein the service has a state that represents the performance of the service;

a plurality of monitoring agents configured to monitor respective individual domains of the network that include respective subsets of the plurality of network hardware components that support the service, wherein the plurality of monitoring agents is configured to detect one or more intra-domain events in the respective domain as a function of the component parameters monitored in the respective domain and generate one or more intra-domain alarms in the respective domain as a function of the intra-domain events detected in the respective domain, wherein each of the plurality of monitoring agents include;

an alarm correlation agent configured to correlate the intra-domain alarms generated in the respective domain in addition to one or more intra-domain alarms generated in the other individual domains by the other monitoring agents to generate one or more inter-domain alarms across the individual domains of the network, map the inter-domain alarms generated across the individual domains and to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

a control agent configured to control the component parameters for the subset of the plurality of network hardware components in the respective monitored domain and issue one or more instructions for one or more of the controlled component parameters to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.

21. The system of claim 20, wherein the plurality of monitoring agents further include:

at least one infrastructure agent configured to monitor one or more parameters for at least one transmission device in an infrastructure of the network;

at least one system agent configured to monitor one or more parameters for at least one computer system on the network;

at least one traffic agent configured to monitor traffic that flows over transmission media on the infrastructure of the network;

at least one application agent configured to monitor at least one software application operating on the network;

at least one trouble-ticketing agent configured to receive reports of problems reported by one or more users with respect to operation of the network;

at least one response time agent configured to monitor response times of one or more communications on the network;

at least one device agent configured to monitor one or more parameters for an individual device on the network; and

at least one multicomponent agent comprising an aggregate of any of the infrastructure agent, the system agent, the traffic agent, the application agent, the trouble-ticketing agent, the response time agent, and the device agent.

22. The system of claim 20, wherein the plurality of monitoring agents comprise reasoning agents that provide reactive or reflexive behavior designed for short-term problem solving relating to the service, and wherein the alarm correlation agent within each of the plurality of monitoring agents comprises a reasoning agent that provides deliberative behavior designed for long-term problem solving relating to the services, and wherein the reasoning agents comprise:

at least one rule-based reasoning agent having a working memory that includes a plurality of facts relating to the service, a rule base that represents knowledge relating to additional facts to infer and actions to take based on the facts in the working memory, and an inference engine configured to make one or more inferences based on the facts in the working memory and the knowledge represented in the rule base;

at least one model-based reasoning agent having a plurality of models that represent the plurality of network hardware components that support the service and a correlation architecture that provides collaboration among the plurality of models;

at least one state-transition graph based reasoning agent having fuzzy logic that defines grades of membership for a plurality of states, wherein the grades of membership quantify transitions among the plurality of states;

at least one code book based reasoning agent; and

at least one case-based reasoning agent having a case library that includes a plurality of cases representing episodes of problem solving, a plurality of relevance rules for identifying one or more of the cases in the case library that are relevant to a current problem relating to the service, and parameterized adaption logic that adapts solutions variables associated with the identified cases for the current problem relating to the service.

23. A computer hardware device having computer executable instructions recorded thereon, wherein the computer executable instructions are operable to direct a computer hardware device to perform a method for providing service level management, the method comprising:

providing a service over a network having a plurality of network components that support the service, wherein performance of the service depends upon performances of the plurality of network components that support the service, and wherein the service has a state that represents the performance of the service;

monitoring one of a plurality of domains of the network using the agent operating on the computer, wherein the monitored domain includes a subset of the plurality of network components that support the service;

detecting one or more intra-domain events in the monitored domain as a function of the component parameters monitored in the domain;

generating one or more intra-domain alarms in the monitored domain as a function of the intra-domain events detected in the monitored domain;

correlating the intra-domain alarms generated in the monitored domain, the intra-domain events detected across the plurality of domains, and the intra-domain alarms generated across the plurality of domains to generate one or more inter-domain alarms across the plurality of domains of the network;

mapping the inter-domain alarms generated across the plurality of domains of the network to a service parameter that represents a current state of the service, wherein the current state of the service is undesirable when the service parameter has a value that does not meet or exceed a service level identified in a service level agreement; and

issuing one or more instructions to autonomously establish a desirable state of the service in response to the current state of the service being undesirable, wherein the desirable state of the service is established when the instructions cause the value of the service parameter to meet or exceed the service level identified in the service level agreement.