Methods and apparatus for identifying the impact of changes in computer networks

• US 8,595,476 B2
• Filed: 03/01/2013
• Issued: 11/26/2013
• Est. Priority Date: 07/01/2009
• Status: Active Grant

• Current Assignee: Infoblox Incorporated
• Original Assignee: Infoblox Incorporated
• Inventors: Ennis, James D. Jr., Nardo, Fiore Louis II, Belamaric, John Dominic
• Primary Examiner(s): Stoynov, Stefan
• Application Number:
  US13/782,085
• Publication Number:
  US 20130246587A1
• Time in Patent Office: 270 Days
• Field of Search: 713/1, 713/100, 370/254, 455/403, 702/182, 702/188, 709/220, 709/223, 717/171, 717/176
• US Class Current: 713/100
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

The impact of device configuration changes on operational issues and policy compliance in a computer network can be discerned from a visual data presentation that jointly shows representations of changes, issues, and policy compliance in a common view for a group of network devices. Configuration information is collected from devices in the computer network and processed to determine whether a change has occurred in a configuration of any of the devices, whether any operational issues exist for each of the devices, and whether any of the devices are not in compliance with any applicable operational policies. A display device displays the visual data presentation to allow an operator to see trends and relationships between device configuration changes and operational issues and incidents of policy non-compliance. The visual data presentation can be depicted as a graphical timeline view, a network topology view, or a table view of the information.

Claims

1. An apparatus, comprising:

a processor configured to analyze configuration information collected from a plurality of devices in a computer network, and further configured to;

determine whether a configuration change has occurred in a configuration of any of the devices based on the collected configuration information, wherein the configuration change of a device refers to a modification or alteration to the device'"'"'s software, hardware, or setting configuration;

determine whether an operational issue exists for any of the devices based on the collected configuration information, wherein the operational issue relates to an improper or inefficient configuration, a component failure, a failure state, an overutilization of resources, or any combination thereof;

in the event that the operational issue exists for one of the devices;

determine a level of severity of the operational issue comprising;

determine whether the operational issue refers to a problem condition to be immediately addressed by a system administrator;

in the event that the operational issue refers to a problem condition to be immediately addressed by the system administrator;

assign the level of severity to a first level; and

in the event that the operational issue does not refer to an indication of a problem condition that should be addressed by the system administrator;

assign the level of severity to a second level;

determine whether any of the devices are not in compliance with operational policies based on the collected configuration information, wherein the operational policies refer to a collection of rules that the plurality of devices in the computer network are required or expected to follow; and

generate a visual data presentation that includes a representation of device configuration changes, operational issues, severity levels of the operational issues, and policy compliance information for a group of devices in the computer network;

wherein the representation of device configuration changes, operational issues, and policy compliance information for the group of devices in the computer network facilitates causal analysis between configuration changes, operational issues, or policy compliance information, or any combination thereof.

2. The apparatus of claim 1, the apparatus further comprising:

a data collection module configured to collect the configuration information from the plurality of devices in the computer network.

3. The apparatus of claim 1, wherein the visual data presentation comprises a timeline view, the timeline view further comprising:

a change graph displayed on a timeline and indicating a number of configuration changes that occurred in each of a sequence of time periods for a selected group of devices in the computer network, wherein the change graph and the issue graph are bar graphs;

an issue graph displayed on the timeline and indicating a number of operational issues in each of the sequence of time periods for the selected group of devices; and

a policy compliance graph displayed on the timeline and indicating a degree of policy compliance for the selected group of devices as a function of time.

4. The apparatus of claim 1, wherein the visual data presentation comprises a timeline view, the timeline view further comprising:

a change graph displayed on a timeline and indicating a number of configuration changes that occurred in each of a sequence of time periods for a selected group of devices in the computer network;

an issue graph displayed on the timeline and indicating a number of operational issues in each of the sequence of time periods for the selected group of devices; and

a policy compliance graph displayed on the timeline and indicating a degree of policy compliance for the selected group of devices as a function of time;

wherein the timeline view further comprises a change trend line indicating a measure of a number of configuration changes over a plurality of time periods.

5. The apparatus of claim 1, wherein the visual data presentation comprises a timeline view, the timeline view further comprising:

a change graph displayed on a timeline and indicating a number of configuration changes that occurred in each of a sequence of time periods for a selected group of devices in the computer network;

an issue graph displayed on the timeline and indicating a number of operational issues in each of the sequence of time periods for the selected group of devices; and

a policy compliance graph displayed on the timeline and indicating a degree of policy compliance for the selected group of devices as a function of time;

wherein the processor is further configured to generate a hover feature within the timeline view such that additional information about graphically represented configuration changes or operational issues is displayed based on a display position of a user-controlled cursor.

6. The apparatus of claim 1, wherein the visual data presentation comprises a topology view of a selected group of devices in the network, the topology view further comprising:

a device indicator for each device in the selected group;

a change indicator associated with the device indicator of each device for which a configuration change has occurred within a certain time period;

an issue indicator associated with the device indicator of each device for which an operational issue exists, wherein the issue indicator indicates a degree of significance of a device'"'"'s most significant operational issue; and

a policy compliance indicator associated with the device indicator of each device that is not in compliance with operational policies.

7. The apparatus of claim 1, wherein the visual data presentation comprises a table view of a selected group of devices in the network, the table view further comprising:

a listing of the selected group of devices;

a change field indicating which of the devices in the listing have had a configuration change within a certain time period;

an issue field indicating which of the devices in the listing have operational issues, a symbol in the issue field indicating a degree of significance of a device'"'"'s most significant operational issue; and

a policy compliance field indicating which of the devices in the listing are not in compliance with operational policies.

8. The apparatus of claim 1, wherein the processor is further configured to generate a plurality of visual data presentations for a selected group of devices, further comprising:

a timeline view of graphical data relating to device configuration changes, operational issues, and policy compliance;

a topology view of devices and associated configuration changes, operational issues, and policy compliance information; and

a table view of devices and associated configuration changes, operational issues, and policy compliance information.

9. The apparatus of claim 1, wherein the processor is further configured to generate a plurality of visual data presentations for a selected group of devices, further comprising:

a timeline view of graphical data relating to device configuration changes, operational issues, and policy compliance;

a topology view of devices and associated configuration changes, operational issues, and policy compliance information; and

a table view of devices and associated configuration changes, operational issues, and policy compliance information;

wherein at least one of the timeline view, the topology view, and the table view includes hyperlinks to other visual data presentations relating to more specific information about device configuration changes, operational issues, and policy compliance.

10. The apparatus of claim 1, wherein the processor is further configured to filter the visual data presentation to represent only selected categories of device configuration changes, operational issues, and policy compliance information for a group of devices in the computer network.

11. The apparatus of claim 1, wherein a policy compliance indicator relating to a device indicates compliance of an operational policy of the device in the event the compliance of the operational policy of the device exceeds a threshold.

12. The apparatus of claim 1, wherein the assigning of the level of severity comprises:

determining whether the operational issue refers to a condition that may eventually lead to an operational problem;

in the event that the condition may eventually lead to an operational problem, assigning the level of severity to the second level; and

in the event that the condition may not eventually lead to an operational problem, assigning the level of severity to a third level.

13. A method, comprising:

determining using a processor whether a configuration change has occurred in a configuration of any of the devices based on collected configuration information, wherein the configuration change of a device refers to a modification or alteration to the device'"'"'s software, hardware, or setting configuration;

determining using the processor whether an operational issue exists for any of the devices based on the collected configuration information, wherein the operational issue relates to an improper or inefficient configuration, a component failure, a failure state, an overutilization of resources, or any combination thereof;

in the event that the operational issue exists for one of the devices;

determining a level of severity of the operational issue comprising;

determining whether the operational issue refers to a problem condition to be immediately addressed by a system administrator;

in the event that the operational issue refers to a problem condition to be immediately addressed by the system administrator;

assigning the level of severity to a first level; and

in the event that the operational issue does not refer to an indication of a problem condition that should be addressed by the system administrator;

assigning the level of severity to a second level;

determining using the processor whether any of the devices are not in compliance with operational policies based on the collected configuration information, wherein the operational policies refer to a collection of rules that the plurality of devices in the computer network are required or expected to follow; and

generating a visual data presentation that includes a representation of device configuration changes, operational issues, severity levels of the operational issues, and policy compliance information for a group of devices in the computer network;

wherein the representation of device configuration changes, operational issues, severity levels of the operational issues, and policy compliance information for the group of devices in the computer network facilitates causal analysis between configuration changes, operational issues, or policy compliance information, or any combination thereof.

14. The method of claim 13, the method further comprising:

collecting, in a data collection module, configuration information from the plurality of devices in the computer network.

15. The method of claim 13, wherein generating the visual data presentation includes generating a timeline view, the timeline view comprising:

a change graph displayed on a timeline and indicating a number of configuration changes that occurred in each of a sequence of time periods for a selected group of devices in the computer network, wherein the change graph and the issue graph are bar graphs;

an issue graph displayed on the timeline and indicating a number of operational issues in each of the sequence of time periods for the selected group of devices; and

a policy compliance graph displayed on the common timeline and indicating a degree of policy compliance for the selected group of devices as a function of time;

wherein the timeline view further includes a change trend line indicating a measure of a number of configuration changes over a plurality of time periods.

16. The method of claim 13, wherein generating the visual data presentation includes generating a topology view of a selected group of devices in the network, the topology view further comprising:

a device indicator for each device in the selected group;

a change indicator associated with the device indicator of each device for which a configuration change has occurred within a certain time period;

an issue indicator associated with the device indicator of each device for which an operational issue exists; and

a policy compliance indicator associated with the device indicator of each device that is not in compliance with operational policies.

17. The method of claim 13, wherein generating the visual data presentation includes generating a table view of a selected group of devices in the network, the table view further comprising:

a listing of the selected group of devices;

a change field indicating which of the devices in the listing have had a configuration change within a certain time period;

an issue field indicating which of the devices in the listing have operational issues, a symbol in the issue field indicating a degree of significance of a device'"'"'s most significant operational issue; and

a policy compliance field indicating which of the devices in the listing are not in compliance with operational policies.

18. The method of claim 13, wherein a policy compliance indicator relating to a device indicates compliance of an operational policy of the device in the event the compliance of the operational policy of the device exceeds a threshold.

19. A computer program product, the computer program product being embodied in a tangible, non-transitory computer readable storage medium and comprising computer instructions for:

determining whether a configuration change has occurred in a configuration of any of the devices based on collected configuration information, wherein the configuration change of a device refers to a modification or alteration to the device'"'"'s software, hardware, or setting configuration;

determining whether an operational issue exists for any of the devices based on the collected configuration information, wherein the operational issue relates to an improper or inefficient configuration, a component failure, a failure state, an overutilization of resources, or any combination thereof;

in the event that the operational issue exists for one of the devices;

determining a level of severity of the operational issue comprising;

determining whether the operational issue refers to a problem condition to be immediately addressed by a system administrator;

in the event that the operational issue refers to a problem condition to be immediately addressed by the system administrator;

assigning the level of severity to a first level; and

in the event that the operational issue does not refer to an indication of a problem condition that should be addressed by the system administrator;

assigning the level of severity to a second level;

determining whether any of the devices are not in compliance with operational policies based on the collected configuration information, wherein the operational policies refer to a collection of rules that the plurality of devices in the computer network are required or expected to follow; and

generating a visual data presentation that includes a representation of device configuration changes, operational issues, severity levels of the operational issues, and policy compliance information for a group of devices in the computer network;

wherein the representation of device configuration changes, operational issues, severity levels of the operational issues, and policy compliance information for the group of devices in the computer network facilitates causal analysis between configuration changes, operational issues, or policy compliance information, or any combination thereof.

20. The computer readable non-transitory medium of claim 19, the computer readable non-transitory medium further comprising:

collecting configuration information from the plurality of devices in the computer network.

21. The computer readable non-transitory medium of claim 19, storing further instructions, that when executed by a computer, cause the computer to perform the further functions of:

generating the visual data presentation as a timeline view, the timeline view comprising;

a change graph displayed on a timeline and indicating a number of configuration changes that occurred in each of a sequence of time periods for a selected group of devices in the computer network, wherein the change graph and the issue graph are bar graphs;

an issue graph displayed on the timeline and indicating a number of operational issues in each of the sequence of time periods for the selected group of devices; and

a policy compliance graph displayed on the common timeline and indicating a degree of policy compliance for the selected group of devices as a function of time.

22. The computer readable non-transitory medium of claim 19, storing further instructions, that when executed by a computer, cause the computer to perform the further functions of:

generating the visual data presentation as a topology view of a selected group of devices in the network, the topology view comprising;

a device indicator for each device in the selected group;

a change indicator associated with the device indicator of each device for which a configuration change has occurred within a certain time period;

an issue indicator associated with the device indicator of each device for which an operational issue exists; and

a policy compliance indicator associated with the device indicator of each device that is not in compliance with operational policies.

23. The computer readable non-transitory medium of claim 19, storing further instructions, that when executed by a computer, cause the computer to perform the further functions of:

generating the visual data presentation as a table view of a selected group of devices in the network, the table view comprising;

a listing of the selected group of devices;

a change field indicating which of the devices in the listing have had a configuration change within a certain time period;

an issue field indicating which of the devices in the listing have operational issues, a symbol in the issue field indicating a degree of significance of a device'"'"'s most significant operational issue; and

a policy compliance field indicating which of the devices in the listing are not in compliance with operational policies.

24. The computer readable non-transitory medium of claim 19, wherein a policy compliance indicator relating to a device indicates compliance of an operational policy of the device in the event the compliance of the operational policy of the device exceeds a threshold.