Monitoring data categorization and module-based health correlations
First Claim
1. A computer-implemented method, comprising:
- in a health model representing a hierarchy of related components within component groups in a computer system, each component having at least one health indicator, wherein a health indicator is associated with a category including at least one of;
a key health indicator (KHI), forensic data, and a non-service impacting issue (NSI);
selecting one of a plurality of KHIs for a component to be an aggregated KHI;
determining whether an alert condition exists for the aggregated KHI;
traversing the health model from a root to identify a path in the hierarchy having the alert condition;
determining that a first component in the path depends on a second component;
determining that the second component does not have an active alert and has a timestamp within a correlation time window; and
raising an alert for the second component.
1 Assignment
0 Petitions
Accused Products
Abstract
Architecture for aggregating health alerts from a number of related components into a single aggregated health state that can be analyzed to isolate the component responsible for the fault condition. In a hierarchy of related components within various component groups in a computer system, a number of health indicators can indicate alerts occurring in one or more of the related components whereas the fault condition occurs in only one component upon which the other components depend. The health indicators of related components are aggregated into an aggregated health state for each component group. These aggregated health states are analyzed to identify the related component associated with a root cause of the alert condition for an affected component group.
36 Citations
19 Claims
-
1. A computer-implemented method, comprising:
-
in a health model representing a hierarchy of related components within component groups in a computer system, each component having at least one health indicator, wherein a health indicator is associated with a category including at least one of;
a key health indicator (KHI), forensic data, and a non-service impacting issue (NSI);selecting one of a plurality of KHIs for a component to be an aggregated KHI; determining whether an alert condition exists for the aggregated KHI; traversing the health model from a root to identify a path in the hierarchy having the alert condition; determining that a first component in the path depends on a second component; determining that the second component does not have an active alert and has a timestamp within a correlation time window; and raising an alert for the second component. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A computer-implemented diagnostic apparatus, comprising:
-
a processor; a health model executing on the processor to represent a hierarchy of related components within component groups in a computer system, each component having at least one health indicator, wherein a health indicator is associated with a category including at least one of;
a key health indicator (KHI), forensic data, and a non-service impacting issue (NSI);an aggregation component to select one of a plurality of KHIs for a component to be an aggregated KHI; a correlation component to; determine whether an alert condition exists for the aggregated KHI; traversing the health model from a root to identify a path in the hierarchy having the alert condition; determine that a first component in the path depends on a second component; determine that the second component does not have an active alert and has a timestamp within a correlation time window; and raise an alert for the second component. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A computer-readable memory storage device comprising instructions that, when executed by a computing device, cause the computing device to:
-
receive health indicators that indicate an alert condition for components of a computer system, the health indicators representing health of components; aggregate health indicators of related components into an aggregated health state; vote to select a health indicator based on voting weight from the aggregated health indicators to determine which one health indicator defines the aggregated health state, wherein voting weight represents a relative importance of health indicators; link a non-selected key health indicator of the aggregated health indicators to the selected health indicator as a forensic health indicator; and analyze the aggregated health state to identify a related component having the alert condition. - View Dependent Claims (14, 15, 16, 17, 18, 19)
-
Specification