Relevant alert delivery in a distributed processing system

• US 8,825,852 B2
• Filed: 01/23/2013
• Issued: 09/02/2014
• Est. Priority Date: 11/02/2010
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Carey, James E., Markland, Matthew W., Sanders, Philip J.
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US13/747,895
• Publication Number:
  US 20130138809A1
• Time in Patent Office: 587 Days
• Field of Search: 709/201, 709/202, 709/223, 709/224, 719/318
• US Class Current: 709/224
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time
• CPC Class Codes: H04L 41/0613 based on the type or category of the network elements

Abstract

Methods, systems and products are provided relevant alert delivery including assigning by an event analyzer each received event to an events pool; determining by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool whether to suppress one or more of the events; identifying by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool one or more alerts; sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer; assigning by the alert analyzer the identified alerts to an alerts pool; determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and transmitting the unsuppressed alerts to one or more components of the distributed processing system.

Claims

1. A system for relevant alert delivery in a distributed processing system, the system comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions capable, when executed by the computer processor, of causing the apparatus to carry out the steps of:

identifying by an event analyzer one or more alerts;

sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer;

assigning by the alert analyzer the identified alerts to an alerts pool;

determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and

transmitting the unsuppressed alerts to one or more components of the distributed processing system, wherein;

the system further comprises an events pool that has a predetermined initial period of time and computer program instructions capable, when executed by the computer processor, of causing the system to carry out the step of assigning by the event analyzer each received event to an events pool, including extending for each event assigned to the events pool the predetermined initial period of time by a particular period of time assigned to the event.

2. The system of claim 1 wherein determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprises selecting events from one or more components of a distributed processing system and determining whether to suppress any alerts in dependence upon the selected events.

3. The system of claim 2 wherein the computer memory has disposed within it computer program instructions capable, when executed by the computer processor, of causing the system to identify by the alert analyzer in dependence upon alert analysis rules, the alerts in the alert pool, and any selected events, one or more additional alerts;

and

transmitting the unsuppressed alerts further comprises transmitting the one or more additional alerts to one or more components of the distributed processing system.

4. The system of claim 1 wherein the alerts pool has a predetermined initial period of time and assigning by the alert analyzer each received event to an alerts pool further comprises extending for each alert assigned to the alerts pool the predetermined initial period of time by a particular period of time assigned to the alert.

5. The system of claim 1 wherein determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprises determining whether to suppress one or more alerts in dependence upon one or more attributes of the alerts.

6. A computer program product for relevant alert delivery in a distributed processing system, the computer program product disposed upon a computer readable storage medium, the computer program product comprising computer program instructions for:

identifying by an event analyzer one or more alerts;

sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer;

assigning by the alert analyzer the identified alerts to an alerts pool;

determining by the alert analyzer in dependence upon alert analysis rules and the alerts whether to suppress any alerts; and

transmitting the unsuppressed alerts to one or more components of the distributed processing system, wherein;

the computer program product further comprises an events pool that has a predetermined initial period of time and computer program instructions for assigning by the event analyzer each received event to an events pool, including computer program instructions for extending for each event assigned to the events pool the predetermined initial period of time by a particular period of time assigned to the event.

7. The computer program product of claim 6 wherein computer program instructions for determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprise computer program instructions for selecting events from one or more components of a distributed processing system and determining whether to suppress any alerts in dependence upon the selected events.

8. The computer program product of claim 7 further comprising computer program instructions for identifying by the alert analyzer in dependence upon alert analysis rules, the alerts in the alert pool, and selected events, one or more additional alerts;

and

computer program instructions for transmitting the unsuppressed alerts further comprise computer program instructions for transmitting the one or more additional alerts to one or more components of the distributed processing system.

9. The computer program product of claim 6 wherein the alerts pool has a predetermined initial period of time and computer program instructions for assigning by the alert analyzer each received alert to an alerts pool further comprise computer program instructions for extending for each alert assigned to the alerts pool the predetermined initial period of time by a particular period of time assigned to the alert.

10. The computer program product of claim 6 wherein computer program instructions for determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts further comprise computer program instructions for determining whether to suppress one or more alerts in dependence upon one or more attributes of the alerts.