Method and apparatus for generating configuration rules for computing entities within a computing environment using association rule mining

• US 8,051,028 B2
• Filed: 05/31/2007
• Issued: 11/01/2011
• Est. Priority Date: 05/31/2007
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Karnik, Neeran, Roy, Subhojit, Kabra, Navin
• Primary Examiner(s): Gaffin; Jeffrey A
• Assistant Examiner(s): Kim; David H
• Application Number:
  US11/809,419
• Publication Number:
  US 20080301081A1
• Time in Patent Office: 1,615 Days
• Field of Search: 706/12, 706/14, 706/48, 706/45, 706/46, 706/47, 717/168, 717/169, 717/171, 726/1, 709/220, 709/221
• US Class Current: 706/48
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files

Abstract

A method and apparatus for generating computer configuration rules comprising receiving configuration data regarding a plurality of computers, analyzing the configuration data to determine associations within the configuration data, and generating configuration rules from a result of the analysis.

Claims

1. A method comprising:

receiving configuration data for a plurality of computing entities of a data center,

wherein the configuration data comprises

a plurality of attributes, and

semantics that characterize the configuration data;

analyzing the configuration data to infer one or more relationships, wherein

the analyzing infers the one or more relationships between the plurality of attributes,

the analyzing is performed independent of the semantics of the configuration data, and

the analyzing is performed by a computing system that comprises at least one processor;

generating one or more configuration rules based on one or more relationships;

receiving user input specifying at least one invalid configuration rule out of the one or more configuration rules; and

filtering out the at least one invalid configuration rule from the one or more configuration rules.

2. The method of claim 1 wherein

the receiving step further comprises:

gathering the configuration data through at least one of polling of the computing entities, or

applying agents to the computing entities.

3. The method of claim 1 wherein

the receiving step further comprises:

saving the configuration data in a database.

4. The method of claim 1 wherein

the analyzing step comprises:

preprocessing the configuration data prior to the analyzing.

5. The method of claim 4 wherein

a configuration table comprises the configuration data, and

the preprocessing step removes columns from the configuration table.

6. The method of claim 1 further comprising:

applying statistical analysis to the one or more configuration rules.

7. The method of claim 6 wherein

the statistical analysis determines a reliability of each of the one or more configuration rules.

8. The method of claim 1 further comprising:

performing post processing with respect to the one or more configuration rules.

9. The method of claim 1 further comprising:

comparing the one or more configuration rules to the configuration data; and

identifying violations of the one or more configuration rules within the configuration data.

17. The method of claim 1, further comprising:

receiving user input specifying one or more explicit configuration rules, and

combining the one or more configuration rules and the one or more explicit configuration rules to generate combined configuration rules.

10. An apparatus comprising:

an analyzer, comprising at least one processor, for

analyzing configuration data collected from a plurality of computing entities of a data center, wherein

the configuration data comprises

a plurality of attributes, and

semantics that characterize the configuration data,

the analyzer infers the one or more relationships between the plurality of attributes,

the analyzer performs the analyzing independently of the semantics of the configuration data,

generating at least one configuration rule based on the one or more relationships,

receiving user input specifying at least one invalid configuration rule out of the at least one configuration rule; and

filtering out the at least one invalid configuration rule from the at least one configuration rule.

11. The apparatus of claim 10 further comprising:

a configuration data collection system for compiling the configuration data for the plurality of computing entities.

12. The apparatus of claim 10 further comprising:

a preprocessor for preprocessing the configuration data.

13. The apparatus of claim 10 wherein

the analyzer infers the one or more relationships by performing a market basket analysis with respect to the configuration data.

14. The apparatus of claim 10 further comprising:

a post processor that applies statistical analysis to the at least one configuration rule.

15. The apparatus of claim 14 wherein

the statistical analysis determines a reliability of the at least one configuration rule.

16. The apparatus of claim 10 further comprising:

a violation analyzer for

comparing at least one of the at least one configuration rule and predefined rules to the configuration data, and

identifying violations of the at least one of the at least one configuration rule or the predefined rules within the configuration data.