Relevant alert delivery in a distributed processing system

• US 8,769,096 B2
• Filed: 02/26/2013
• Issued: 07/01/2014
• Est. Priority Date: 11/02/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Carey, James E., Markland, Matthew W., Sanders, Philip J.
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US13/776,823
• Publication Number:
  US 20130166743A1
• Time in Patent Office: 490 Days
• Field of Search: 709/201, 709/202, 709/223, 709/224, 719/318
• US Class Current: 709/224
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time
• CPC Class Codes: H04L 41/0613 based on the type or category of the network elements

Abstract

Methods, systems and products are provided relevant alert delivery including assigning by an event analyzer each received event to an events pool; determining by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool whether to suppress one or more of the events; identifying by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool one or more alerts; sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer; assigning by the alert analyzer the identified alerts to an alerts pool; determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and transmitting the unsuppressed alerts to one or more components of the distributed processing system.

Claims

1. A method of relevant alert delivery in a distributed processing system, the method comprising:

identifying by an event analyzer one or more alerts;

sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer;

assigning by the alert analyzer the identified alerts to an alerts pool;

determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and

transmitting the unsuppressed alerts to one or more components of the distributed processing system; and

assigning by the event analyzer each received event to an events pool, each events pool having a predetermined initial period of time, wherein assigning each received event to an events pool further comprises extending for each event assigned to the events pool the predetermined initial period of time by a particular period of time assigned to the event.

2. The method of claim 1 wherein determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprises selecting events from one or more components of a distributed processing system and determining whether to suppress any alerts in dependence upon the selected events.

3. The method of claim 2 further comprising identifying by the alert analyzer in dependence upon alert analysis rules, the alerts in the alert pool, and selected events, one or more additional alerts;

and

transmitting the unsuppressed alerts further comprises transmitting the one or more additional alerts to one or more components of the distributed processing system.

4. The method of claim 1 wherein the alerts pool has a predetermined initial period of time and assigning by the alert analyzer each received alert to an alerts pool further comprises extending for each alert assigned to the alerts pool the predetermined initial period of time by a particular period of time assigned to the alert.

5. The method of claim 1 wherein determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprises determining whether to suppress one or more alerts in dependence upon one or more attributes of the alerts.