System and method for managing a virtual domain environment to enable root cause and impact analysis

• US 8,031,634 B1
• Filed: 03/31/2008
• Issued: 10/04/2011
• Est. Priority Date: 03/31/2008
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Kleers, Ehud, Adiwijaya, Igg M., Vijendra, Sudhir, Artzi, Amanuel Ronen
• Primary Examiner(s): Shah; Chirag
• Assistant Examiner(s): Van; Jenkey
• Application Number:
  US12/058,834
• Time in Patent Office: 1,282 Days
• Field of Search: 370/254, 370/255, 370/395.53
• US Class Current: 370/254
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272

Abstract

A virtual domain management system is provided which associates application, physical and virtual domains to enable propagation of events, symptoms and other information across the domains. The virtual domain manager collects events and symptom information across multiple domains by correlating domain topology models. Using a causality matrix and codebook technology the virtual domain manager uses the information to perform root cause and impact analysis across domains. Information from the analysis may be fed back into the domains to enhance domain management.

Claims

1. A method for managing a virtual domain includes the steps of:

maintaining a first topology associated with the virtual domain by representing the virtual domain in at least one computer model, the at least one computer model having one or more computer objects representing the structure and causal behavior of one or more virtual entities of the virtual domain, wherein the virtual domain provides abstraction between a virtual application infrastructure existing in the virtual domain and a physical infrastructure, wherein the virtual application infrastructure is dynamically mapped to resources of the physical infrastructure based on the available resources and application need, and wherein the virtual entities are unaware of the characteristics of the physical infrastructure;

wherein at least one of the represented virtual entities is selected from the group consisting of a virtual machine and a virtual server; and

correlating the first topology to a second topology associated with a second domain by identifying overlapping objects of the first topology and the second topology, the overlapping objects comprising topology end points, wherein information is propagated from the virtual domain to the second domain through the topology end points.

2. The method of claim 1 wherein second topology is associated with at least one of a network infrastructure, a storage infrastructure and an application infrastructure.

3. The method of claim 1 wherein the information includes at least one of event information, symptom information and problem information.

4. The method of claim 3 including the step of:

providing a mapping between a plurality of observable events and a plurality of causing events across the first and second topologies, and

determining at least one likely causing event based on one of event, symptom or problem information propagated between the first domain and the second domain.

5. The method of claim 1 wherein the first domain is a virtual domain, and wherein the information is used to improve a quality of provisioning, disaster recovery and high availability decisions in the virtual domain.

6. The method of claim 1, wherein the information is used to improve path selection decisions in the first domain.

7. The method of claim 3 further including the step of displaying the first topology, second topology, at least one of the event, symptom and problem information to a user and results of root-cause and impact analysis, generated using the information, to a user.

15. The method of claim 1 wherein the available model representations comprise virtual applications, virtual machines, and virtual servers.

8. A domain management system comprising a non-transitory computer readable medium having program code stored thereon, operable when executed to:

extract structural and behavior model information from entities in a virtual domain for populating and maintain a dynamic representation of a first topology associated with the virtual domain;

represent the virtual domain in at least one computer model, the at least one computer model having one or more computer objects wherein the one or more computer objects are based on the extracted structural and behavioral model information;

wherein the virtual domain provides abstraction between a virtual application infrastructure existing in the virtual domain and a physical infrastructure, wherein the virtual application infrastructure is dynamically mapped to resources of the physical infrastructure based on the available resources and application need, and wherein the virtual entities are unaware of the characteristics of the physical infrastructure;

wherein at least one of the represented virtual entities is selected from the group consisting of a virtual machine and a virtual server; and

correlate the first topology to a second topology by identifying topology end-points, wherein information is propagated between the virtual domain and second domain through the topology end-points.

9. The domain management system of claim 8 wherein the second topology is associated with at least one of a network infrastructure, a storage infrastructure and an application infrastructure.

10. The domain management system of claim 8 wherein the information includes at least one of event information, symptom information and problem information.

11. The domain management system of claim 10, wherein the program code is further operable to:

provide a mapping between a plurality of observable events and a plurality of causing events across the first and second topologies, and

determine at least one likely causing event based on one of event, symptom or problem information propagated between the first domain and the second domain.

12. The domain management system of claim 8 wherein the first domain is a virtual domain, and wherein the information is used to improve a quality of provisioning, disaster recovery and high availability decisions in the virtual domain.

13. The domain management system of claim 8, wherein the information is used to improve path selection decisions in the first domain.

14. The domain management system of claim 8 wherein the program code is further operable to display the first topology, second topology, at least one of the event, symptom and problem information to a user and results of root-cause and impact analysis, generated using the information, to a user.

16. The domain management system of claim 10 wherein the available model representations comprise virtual applications, virtual machines, and virtual servers.