Methods and apparatus for remediation execution

• US 8,862,941 B2
• Filed: 09/16/2011
• Issued: 10/14/2014
• Est. Priority Date: 09/16/2011
• Status: Active Grant

• Current Assignee: Tripwire Incorporated (Belden Inc.)
• Original Assignee: Tripwire Incorporated (Belden Inc.)
• Inventors: Whitlock, David, Gascoigne-Piggford, Guy, Granum, Geoff, Petrie, Mark
• Primary Examiner(s): MASKULINSKI, MICHAEL C
• Application Number:
  US13/235,182
• Publication Number:
  US 20130073892A1
• Time in Patent Office: 1,124 Days
• Field of Search: 709223-225
• US Class Current: 714/33
• CPC Class Codes: G06Q 10/0633 Workflow analysis
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]

Abstract

Disclosed herein are methods, systems, and articles associated with remediation execution. In embodiments, a set of policy test failures may be selected for remediation. The set of policy test failures may be associated with a computer network with a number of nodes. For each failure within the set of policy test failures, a remediation script may be obtained to remediate a corresponding policy test failure. The remediation scripts may be selectively provided to nodes that are affected by policy test failures, for execution by the nodes. A remediation script result for each remediation script executed may be received. Based upon the remediation script results, it may be determined whether or not execution of the remediation scripts was successful.

Claims

1. A method, comprising:

selecting, by a computing device, a set of policy test failures for remediation, the set of policy test failures being associated with a computer network having a plurality of nodes;

for each failure within the set of policy test failures, obtaining, by the computing device, a remediation script corresponding to the policy test failure;

providing, by the computing device, the remediation scripts, selectively, to the nodes that are affected by the policy test failures, for execution by the nodes;

receiving, by the computing device, from the nodes, a remediation script result for each remediation script executed;

based upon the remediation script results, determining, by the computing device, whether or not execution of the remediation scripts was successful;

subsequent to execution of all remediation scripts, gathering, by the computing device, a list of post-remediation categories from policy tests;

based upon the list of post-remediation categories, determining, by the computing device, post-remediation functions to be performed;

executing or causing to be executed, by the computing device, the post-remediation functions;

coalescing, by the computing device, duplicate post-remediation categories; and

eliminating, by the computing device, redundant post-remediation functions.

2. The method of claim 1, further comprising:

queuing, by the computing device, the remediation scripts for providing to the one or more nodes, such that only one remediation script per node is executed at a time.

3. The method of claim 1, wherein determining whether or not execution of the remediation scripts was successful comprises determining whether an exit code for a particular remediation script executed at a node has a non-zero value, indicating execution of the particular remediation script at the node failed.

4. The method of claim 1, further comprising:

generating, by the computing device, a report about the remediation script execution results; and

forwarding, by the computing device, the report to desired recipients.

5. The method of claim 1, further comprising:

adding to the policy tests, by the computing device, information including operations required after selective execution of the remediation script at the nodes; and

based upon the information and subsequent to the execution of the remediation scripts, executing or causing to be executed, by the computing device, one or more of the operations within the computer network.

6. The method of claim 5, wherein the information includes one or more services that need to be started subsequent to the selective execution of the remediation scripts, services that need to be stopped subsequent to the selective execution of the remediation scripts, services that need to be re-started subsequent to the selective execution of the remediation scripts, or nodes that need to be re-booted subsequent to the selective execution of the remediation scripts.

7. The method of claim 5, wherein the information further includes an identity of each of one or more nodes within the computer network that is affected by the selective execution of the remediation scripts.

8. The method of claim 5, wherein the information includes one or more of the remediation scripts selectively provided to the nodes for execution.

9. An article of manufacture, comprising:

a non-transitory computer-readable storage medium; and

a plurality of programming instructions stored on the storage medium and configured to program one or more computing devices, in response to execution of the programming instructions, to perform operations including;

selecting a set of policy test failures for remediation, the policy test failures being associated with a computer network having a plurality of nodes;

for each failure within the set of policy test failures, obtaining a remediation script for execution by one or more nodes to remediate a corresponding policy test failure;

providing, selectively, the remediation scripts to the nodes that are affected by the policy test failures, for execution by the nodes;

receiving a remediation script result for each remediation script executed by the nodes;

based upon the remediation script results, determining whether or not execution of the remediation scripts was successful;

,

subsequent to execution of all remediation scripts, gathering a list of post-remediation categories from policy tests;

based upon the list of post-remediation categories, determining post-remediation functions to be performed;

executing or causing to be executed post-remediation functions;

coalescing duplicate post-remediation categories; and

eliminating redundant post-remediation functions.

10. The article of manufacture of claim 9, wherein the operations further include:

queuing remediation scripts for providing to the one or more nodes, such that only one remediation script per node is executed at a time.

11. The article of manufacture of claim 9, wherein determine whether or not execution of the remediation scripts was successful comprises determine whether an exit code for a particular execution of a remediation script at a node has a non-zero value, indicating the particular execution of the remediation script at the node failed.

12. The article of manufacture of claim 9, wherein to the operations further include:

generating a report about execution results of the remediation scripts; and

forwarding the report to desired recipients.

13. The article of manufacture of claim 9, wherein the operations further include:

based upon information within the policy tests and subsequent to executing the remediation scripts, executing one or more operations within the computer network.

14. The article of manufacture of claim 13, wherein the information includes one or more services that need to be started subsequent to the selective execution of the remediation scripts, services that need to be stopped subsequent to the selective execution of the remediation scripts, services that need to be re-started subsequent to the selective execution of the remediation scripts or nodes that need to be re-booted subsequent to the selective execution of the remediation scripts.

15. The article of manufacture of claim 13, wherein the information further includes an identity of each of one or more nodes within the computer network that is affected by execution of the remediation scripts.

16. The article of manufacture of claim 13, wherein the information includes one or more of the remediation scripts for execution by the nodes.

17. An apparatus, comprising:

one or more processors; and

a non-transitory computer-readable storage medium coupled to the one or more processors, and having stored therein a plurality of programming instructions stored on the storage medium and configured cause the apparatus, in response to execution of the programming instructions, to;

select a set of policy test failures for remediation, the policy test failures being associated with a computer network having a plurality of nodes;

for each failure within the set of policy test failures, obtain a remediation script for execution by one or more nodes to remediate a corresponding policy test failure;

provide, selectively, the remediation scripts to the nodes that are affected by the policy test failures, for execution by the nodes;

receive a remediation script result for each remediation script executed by the nodes; and

based upon the remediation script results, determine whether or not execution of the remediation scripts was successful;

subsequent to execution of all remediation scripts, gathering, by the computing device, a list of post-remediation categories from policy tests;

based upon the list of post-remediation categories, determining, by the computing device, post-remediation functions to be performed;

executing or causing to be executed, by the computing device, the post-remediation functions;

coalescing, by the computing device, duplicate post-remediation categories; and

eliminating, by the computing device, redundant post-remediation functions.

18. The apparatus of claim 17, wherein the programming instructions are further configured to cause the apparatus, in response to execution of the programming instructions, to:

queue remediation scripts for providing to the one or more nodes, such that only one remediation script per node is executed at a time.