Selected alert delivery in a distributed processing system

• US 8,713,581 B2
• Filed: 10/27/2011
• Issued: 04/29/2014
• Est. Priority Date: 10/27/2011
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Carey, James E., Sanders, Philip J.
• Primary Examiner(s): Ho, Andy
• Application Number:
  US13/282,995
• Publication Number:
  US 20130111502A1
• Time in Patent Office: 915 Days
• Field of Search: 719/318, 709/223, 709/224
• US Class Current: 719/318
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/0781 Error filtering or prioritizing based on a policy defined by the user or on a policy defined by a hardware/software module, e.g. according to a severity level
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3058 Monitoring arrangements for monitoring environmental properties or parameters of the computing system or of the computing system component, e.g. monitoring of power, currents, temperature, humidity, position, vibrations thermal management in cooling arrangements of a computing system G06F1/206
• CPC Class Codes: G06F 11/3072 where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
• CPC Class Codes: G06F 11/3089 Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents software debugging using additional hardware using a specific debug interface G06F11/3656; performance evaluation by tracing or monitoring G06F11/3466
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time

Abstract

Methods, apparatuses, and computer program products for selected alert delivery in a distributed processing system are provided. Embodiments include receiving, by an incident analyzer, one or more events from one or more resources, each event identifying a location of the resource producing the event; creating, by the incident analyzer, potential alerts in dependence upon a location of the resource producing the event and location scoping rules; selecting for consolidation, by the incident analyzer, one or more of the potential alerts based on consolidation rules; and creating, by the incident analyzer, a consolidated alert based on the consolidation rules and the selected one or more potential alerts.

Claims

1. A method of selected alert delivery in a distributed processing system, the method comprising:

receiving, by an incident analyzer, one or more events from one or more resources, each event identifying a location of the resource producing the event;

creating, by the incident analyzer, potential alerts in dependence upon the location of the resource producing the event and location scoping rules that indicate information to include in the potential alerts;

selecting for consolidation, by the incident analyzer, one or more of the potential alerts based on consolidation rules; and

creating, by the incident analyzer, a consolidated alert based on the consolidation rules and the selected one or more potential alerts, wherein the consolidated alert identifies each of the selected one of more potential alerts.

2. The method of claim 1 wherein the selected one or more potential alerts are selected for consolidation in dependence upon alert identifications of the potential alerts.

3. The method of claim 1 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts.

4. The method of claim 1 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts matching exactly.

5. The method of claim 1 wherein the selected one or more potential alerts are selected for consolidation in dependence upon at least one of the selected potential alerts including a location that is in a higher tier than the locations of the other selected potential alerts.

6. The method of claim 1 wherein the selected one or more potential alerts each include one or more reporting locations;

wherein the selected one or more potential alerts are selected for consolidation in dependence upon each of the selected potential alerts including at least one overlapping reporting location.

7. An apparatus for selected alert delivery in a distributed processing system, the system comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions capable, when executed by the computer processor, of causing the apparatus to carry out the steps of:

receiving, by an incident analyzer, one or more events from one or more resources, each event identifying a location of the resource producing the event;

creating, by the incident analyzer, potential alerts in dependence upon the location of the resource producing the event and location scoping rules that indicate information to include in the potential alerts;

selecting for consolidation, by the incident analyzer, one or more of the potential alerts based on consolidation rules; and

creating, by the incident analyzer, a consolidated alert based on the consolidation rules and the selected one or more potential alerts, wherein the consolidated alert identifies each of the selected one of more potential alerts.

8. The apparatus of claim 7 wherein the selected one or more potential alerts are selected for consolidation in dependence upon alert identifications of the potential alerts.

9. The apparatus of claim 7 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts.

10. The apparatus of claim 7 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts matching exactly.

11. The apparatus of claim 7 wherein the selected one or more potential alerts are selected for consolidation in dependence upon at least one of the selected potential alerts including a location that is in a higher tier than the locations of the other selected potential alerts.

12. The apparatus of claim 7 wherein the selected one or more potential alerts each include one or more reporting locations;

wherein the selected one or more potential alerts are selected for consolidation in dependence upon each of the selected potential alerts including at least one overlapping reporting location.

13. A computer program product for selected alert delivery in a distributed processing system, the computer program product disposed upon a computer readable medium that is not a signal, the computer program product comprising computer program instructions that when executed by a processor cause the processor to carry out the steps of:

receiving, by an incident analyzer, one or more events from one or more resources, each event identifying a location of the resource producing the event;

creating, by the incident analyzer, potential alerts in dependence upon the location of the resource producing the event and location scoping rules that indicate information to include in the potential alerts;

selecting for consolidation, by the incident analyzer, one or more of the potential alerts based on consolidation rules; and

creating, by the incident analyzer, a consolidated alert based on the consolidation rules and the selected one or more potential alerts, wherein the consolidated alert identifies each of the selected one of more potential alerts.

14. The computer program product of claim 13 wherein the selected one or more potential alerts are selected for consolidation in dependence upon alert identifications of the potential alerts.

15. The computer program product of claim 13 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts.

16. The computer program product of claim 13 wherein the selected one or more potential alerts are selected for consolidation in dependence upon one or more locations corresponding to the selected potential alerts matching exactly.

17. The computer program product of claim 13 wherein the selected one or more potential alerts are selected for consolidation in dependence upon at least one of the selected potential alerts including a location that is in a higher tier than the locations of the other selected potential alerts.

18. The computer program product of claim 13 wherein the selected one or more potential alerts each include one or more reporting locations;

wherein the selected one or more potential alerts are selected for consolidation in dependence upon each of the selected potential alerts including at least one overlapping reporting location.

19. The computer program product of claim 13 wherein the computer readable medium further comprises a computer readable storage medium.