Method and system for providing operator guidance in network and systems management

• US 8,370,466 B2
• Filed: 07/23/2008
• Issued: 02/05/2013
• Est. Priority Date: 07/23/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Verma, Dinesh, Bent, Graham Anthony
• Primary Examiner(s): Winder, Patrice
• Assistant Examiner(s): Golabbakhsh, Ebrahim
• Application Number:
  US12/177,973
• Publication Number:
  US 20100023604A1
• Time in Patent Office: 1,658 Days
• Field of Search: 709/221
• US Class Current: 709/221
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies

Abstract

An operator guidance system is provided for an administrator managing a computer network such as a distributed computer system. Fault events reported by a fault management system in the network are enhanced to include topology information about other nodes (such as neighbor nodes, path nodes and/or service nodes) that may have been responsible for the fault. The enhanced events are correlated with configuration commands used in the past to correct faults. A set of guidance rules are developed based on the actions that were taken by the operator in handling previous faults of a similar nature. The guidance rules can be displayed to the administrator to facilitate network fault resolution. Using a set of predefined policies, some of the corrective actions can be performed automatically.

Claims

1. A method for managing a network, comprising the steps of:

retrieving network fault event information for a target node;

retrieving network topology information for the target node and enhancing the network fault event information with the network topology information;

retrieving past network configuration change information comprising changes made to the target node to correct past fault events based on enhanced network fault event information;

correlating the enhanced network fault event information with configuration changes that were performed to correct similar past fault events from the past network configuration change information for the target node;

creating and storing a set of network operation guidance rules based on correlated past network configuration change information, wherein said guidance rules include a set of policies for governing when a corrective action may be taken automatically; and

displaying said configuration changes according to a frequency in which each configuration change was used in the past network configuration change information to correct similar past fault events.

2. The method of claim 1, further comprising:

receiving a network fault event, wherein said step of retrieving a network fault event history for a target node, is in response to said receiving step.

3. The method of claim 1, further comprising:

reconfiguring a network node based on correlated past network configuration change information.

4. The method of claim 1, further comprising:

ordering the set of network operation guidance rules based on a frequency of occurrence of each configuration change previously performed.

5. The method of claim 1, wherein said reconfiguring a network node based on the correlated past network configuration change information, further comprises:

automatically reconfiguring the network node based on the set of network operation guidance rules.

6. The method of claim 1, wherein said step of retrieving network topology information for the target node that enhances the network fault event information, further comprises:

incorporating information on path nodes in a routing path of one or more nodes identified in the network fault event.

7. The method of claim 1, wherein said step of retrieving network topology information for the target node that enhances the network fault event information further comprises:

incorporating information on one or more adjacent nodes to one or more nodes identified in the network fault event.

8. The method of claim 1, wherein said step of retrieving network topology information for the target node that enhances the network fault event information further comprises:

incorporating information on one or more nodes that perform a service function for one or more nodes identified in the network fault event.

9. A method for managing a network, comprising the steps of:

creating one or more enhanced network fault event data structures comprising;

at least one network node;

a problem code;

an adjacent node to said network node; and

one or more path nodes in a routing path of said network node;

correlating the enhanced network fault event data to past network configuration change information comprising changes made to the target node to correct similar past fault events; and

creating and storing a set of network management guidance rules based on the correlated network fault event data and past network configuration change information, wherein said guidance rules include a set of policies for governing when a corrective action may be taken automatically; and

displaying said configuration changes according to a frequency in which each configuration change was used in the past network configuration change information to correct similar past fault events.

10. The method of claim 9, further comprising:

receiving a network fault event for a network node; and

taking corrective action to resolve the network fault event, based on the network management guidance rules.

11. The method of claim 9, wherein the enhanced network fault event data structures further comprises information on one or more nodes that perform a service function for one or more nodes identified in the network fault event.

12. A system for managing a network, comprising the steps of:

fault management interface means for retrieving network fault event information for a target node;

configuration information interface means for retrieving network topology information for the target node;

event enhancer means for enhancing the network fault event information with network topology information for the target node;

information correlation means for retrieving past network configuration change information comprising changes made to the target mode to correct past fault events based on enhanced network fault event information and correlating the enhanced network fault event information with configuration changes that were performed to correct similar past fault events from the past network configuration change information for the target node;

a guidance builder means for creating and storing a set of network management guidance rules based on the correlated network fault event data and past network configuration change information and for displaying said configuration changes according to a frequency in which each configuration change was used in the past network configuration change information to correct similar past fault events, wherein said guidance rules include a set of policies for governing when a corrective action may be taken automatically.

13. The system of claim 12, wherein said fault management interface means further comprises means for receiving a network fault event and retrieving the network fault event history for a target node in response to receiving the network fault event.

14. The system of claim 12, further comprising means for reconfiguring a network node based on correlated past network configuration change information.

15. The system of claim 14, wherein the guidance builder means creates and stores an ordered set of network operation guidance rules based on correlated past network configuration change information, wherein the set of network operation guidance rules are ordered based on a frequency of occurrence of each configuration change previously performed.

16. The system of claim 15, wherein said means for reconfiguring a network node based on the correlated past network configuration change information is coupled to said guidance builder means and said configuration information means and is adapted for automatically reconfiguring the network node based on the set of network operation guidance rules.

17. The system of claim 15, wherein said step of retrieving network topology information for the target node that enhances the network fault event information, further comprises incorporating information on path nodes in a routing path of one or more nodes identified in the network fault event.

18. The system of claim 15, wherein said event enhancer means for retrieving network topology information for the target node further comprises:

means for enhancing the network fault event information with information on at least one of;

an adjacent node to a node identified in the network fault event; and

a service node adapted for performing a service a node identified in the network fault event.

19. A computer program product comprising a computer useable device having computer useable program code for managing a computer network, said computer program product including computer useable program code to perform the steps of:

retrieving network fault event information for a target node;

retrieving network topology information for the target node that enhances the network fault event information;

retrieving past network configuration change information comprising changes made to the target mode to correct past fault events based on enhanced network fault event information;

correlating the enhanced network fault event information with configuration changes that were performed to correct similar past fault events from the past network configuration change information for the target node; and

creating and storing a set of network operation guidance rules based on correlated past network configuration change information, wherein said guidance rules include a set of policies for governing when a corrective action may be taken automatically; and

displaying said configuration changes according to a frequency in which each configuration change was used in the past network configuration change information to correct similar past fault events.