Method and system for managing computer systems

• US 7,707,133 B2
• Filed: 10/23/2006
• Issued: 04/27/2010
• Est. Priority Date: 04/10/2002
• Status: Active Grant

• Current Assignee: IpVenture, Inc.
• Original Assignee: IpVenture, Inc.
• Inventors: Chiu, Bill `Yuan-Chi`, Sokolov, Stepan, Das, Saumitra
• Primary Examiner(s): Vincent; David R
• Assistant Examiner(s): BUSS, BENJAMIN J
• Application Number:
  US11/585,660
• Publication Number:
  US 20070094212A1
• Time in Patent Office: 1,282 Days
• Field of Search: 706 45- 48, 706 50- 51, 706 59- 61, 714/18, 714/26, 714/31, 714/48, 714/E11.025
• US Class Current: 706/50
• CPC Class Codes: G06F 11/3604 Software analysis for verifying properties of programs byte-code verification G06F9/44589
• CPC Class Codes: G06F 11/3612 by runtime analysis performance monitoring G06F11/3466
• CPC Class Codes: G06N 5/00 Computing arrangements using knowledge-based models
• CPC Class Codes: G06N 5/025 Extracting rules from data
• CPC Class Codes: G06N 5/043 Distributed expert systems; Blackboards
• CPC Class Codes: G06N 5/046 Forward inferencing; Production systems
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/0817 by checking functioning

Abstract

A management system for a computer system is disclosed. The computer system operates or includes various products (e.g., software products) that can be managed in a management system or collectively by a group of management systems. Typically, the management system operates on a computer separate from the computer system being managed. The management system can make use of a knowledge base of causing symptoms for previously observed problems at other sites or computer systems. In other words, the knowledge base can built from and shared by different users across different products to leverage knowledge that is otherwise disparate. The knowledge base typically grows over time. The management system can use its ability to request information from the computer system being managed together with the knowledge base to infer a problem root cause in the computer system being managed. The computer system being managed can also request the management system to process its knowledge base for possible problem cause analysis. The management system can also continually identify persisting problem causing symptoms.

Claims

1. A management system for at least one computer system, comprising:

a plurality of agents residing within managed nodes of a plurality of different products used within the computer system;

a system manager for said management system, said manager operating across the different products; and

a data storage device storing at least a knowledge base, said knowledge base containing information pertaining to problems regarding the different products, the information pertaining to the different products including at least one collection of rules, and

wherein the information within said knowledge base is updated based on contributions submitted by at least one user,

wherein the knowledge base includes a plurality of separate knowledge domains, each of the knowledge domains being a logically separate piece of knowledge which can be installed and uninstalled as desired, and

wherein said manager utilizes the knowledge domains and the at least one collection of rules in monitoring at least a plurality of the different products used within the computer system.

2. A management system as recited in claim 1, wherein the different products include at least a plurality of software products.

3. A management system as recited in claim 1, wherein said knowledge base is shared and used by a plurality of different organizations to manage their computer systems, the different organizations having the same or different product configurations on their computer systems.

4. A management system as recited in claim 1, wherein the information being contributed is integrated into the knowledge base in an automated manner.

5. A management system as recited in claim 1, wherein the rules include rules specific to root-cause analysis.

6. A management system as recited in claim 5, wherein said manager further comprises an inference engine that evaluate the rules.

7. A management system as recited in claim 1, wherein the information in said knowledge base is described using thresholds on resource information and relationships between resource information from the different products.

8. A management system as recited in claim 7, wherein the information contributed to the information within said knowledge base is provided by a plurality of users through use of one or more graphical user interfaces.

9. A management system as recited in claim 1, wherein said knowledge base includes possible causing symptoms for previously observed problems at other sites or computer systems.

10. A management system as recited in claim 9, wherein each of the different products being managed has at least one application component, and

wherein the causing symptoms pertain to resource information from the application component of the different products.

11. A management system as recited in claim 1, wherein said manager determines within which of the different products a problem arises.

12. A management system as recited in claim 11, wherein after said manager determines within which of the different products the problem arises, said manager initiates a reporting or corrective action.

13. A management system as recited in claim 1, wherein said management system performs just-in-time or near real-time diagnosis to determine which of the different products a problem has arisen or is likely to arise.

14. A management system as recited in claim 1, wherein said management system operates on a separate computer that is connected to the computer system being managed.

15. A management system as recited in claim 1, wherein said management system is for a plurality of computer systems, and

wherein said manager is central and operable across the different products on the different computer systems.

16. A management system as recited in claim 1, wherein said knowledge base is updated by contributions from other users.

17. A management system as recited in claim 1, wherein the managed nodes can be managed by more than one of said management systems.

18. A management system as recited in claim 1, wherein said manager receives a rule submitted via a graphical user interface, validates the rule and, if validated, integrates the rule into the knowledge base.

19. A management system as recited in claim 1, wherein the update to said knowledge base is distributed to a central knowledge base.

20. A management system as recited in claim 1, wherein the update to said knowledge base is built from and shared by different users across different products to leverage knowledge.

21. A management system as recited in claim 20, wherein the computer system is an enterprise computer system.

22. A management system as recited in claim 1, wherein said manager is configured to manage the computer system by operating to:

(i) receive a fact pertaining to a condition of one of the plurality of different products that are operating in the computer system;

(ii) assert the fact with respect to an inference engine, the interference engine using rules based on facts;

(iii) retrieve updated facts from the interference engine from those of the rules that are dependent on the fact that has been asserted; and

(iv) perform an action in view of the updated facts.

23. A management system as recited in claim 22, wherein the different products send resource information to the interference engine to process rules that depend on at least one fact representing the resource information.

24. A management system as recited in claim 23, wherein the action includes a debug data acquisition.

25. A management system as recite din claim 24, wherein the debug action further asserts at least one fact with respect to the interference engine.

26. A management system as recited in claim 22, wherein the interference engine obtains resource information from the different products to process rules based on at least one fact already asserted.

27. A management system as recited in claim 1,

wherein the computer system is an enterprise computer system, and

wherein said manager isolates a root cause of a software problem in the enterprise computer system supporting a plurality of software products.

28. A management system as recited in claim 27,

wherein the different products include at least a plurality of software products,

wherein the knowledge base includes causing symptoms and experienced problems provided by a disparate group of personal contributors, and

wherein the manager is configured to examine the knowledge base with respect to the software problem to isolate the cause of the software problem to one of the software products.

29. A management system as recited in claim 28, wherein the causing symptoms pertain to resources of the software products.

30. A management system as recited in claim 27, wherein the knowledge base further includes corrective actions for certain software problems.

31. A method as recited in claim 30, wherein said manager is configured to manage the computer system by operating to automatically perform a correction operation to attempt correction of the software problem, the correction operation being associated with one of the corrective actions within the knowledge base that is suitable for use with the software problem.

32. A management system as recited in claim 27, wherein a repeating symptom cause can be ignored until after the cause ceases to exist at least once.

33. A management system as recited in claim 1, wherein said management system performs diagnosis to determine which of the different products a problem has arisen or is likely to arise, and

wherein said management system can send a notification including information on the diagnosis to at least one recipient.

34. A management system as recited in claim 1, wherein when an additional product is used within the computer system, an additional knowledge module is obtained and included within the knowledge base used by said manager so as to potentially diagnosis problems associated with the plurality of different products as well as the additional product.

35. A management system as recited in claim 1, wherein at least one of the rules in the least one collection of rules can be edited.