Scalable performance management system

• US 9,009,185 B2
• Filed: 12/28/2010
• Issued: 04/14/2015
• Est. Priority Date: 12/28/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: SevOne, Inc. (International Business Machines Corporation)
• Inventors: Bakalov, Vesselin
• Primary Examiner(s): CHANNAVAJJALA, SRIRAMA T
• Application Number:
  US12/979,934
• Publication Number:
  US 20120166430A1
• Time in Patent Office: 1,568 Days
• Field of Search: 709203-206, 709215-220, 709/242, 709/238, 702177-188, 370396-402, 714/47.2, 714/46, 714/47.3, 717154-156, 707/694, 707/736, 707/754, 707/758, 707/763, 707/766, 707/805
• US Class Current: 707/763
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3072 where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: H04L 43/065 related to network devices

Abstract

A performance management system leverages an iterative process to provide performance reports, with reduced computing resources. In response to a request for a performance report, a respective subset of performance data records may be received from each of a plurality of sources. It may then be determined whether additional performance data records are to be requested from the plurality of sources for the report. The received data may be processed and the resultant report may be outputted. For example, the iterative process may be applied to generate a top-n report based on network flow performance data in a computer information system.

Claims

1. A computer implemented method for responding to a request for a report, comprising:

a first system receiving a request for a report that identifies performance satisfying particular criteria;

the first system querying mapping data comprised therein to identify that the first system collects and has stored thereon first performance data responsive to the requested report, and at least a second system collects and has stored thereon second performance data responsive to the requested report;

the first system querying the first performance data and retrieving data regarding performance satisfying the particular criteria, the retrieved data comprising a subset of the first performance data;

the first system transmitting to the at least a second system a request for a subset of data from the second performance data regarding performance satisfying the particular criteria;

the first system, in response to the request, receiving from the second system data regarding performance satisfying the particular criteria;

the first system determining, based upon the retrieved data regarding performance satisfying the particular criteria from the first system and the received data regarding performance satisfying the particular criteria from the at least a second system, prior to outputting the report, whether additional data regarding performance satisfying the particular criteria possibly exists on the first system or the at least a second system;

the first system, upon determining additional data regarding performance satisfying the particular criteria possibly exists on the first system or the at least a second system, performing at least one of;

querying the first system for additional data regarding performance satisfying the particular criteria; and

transmitting a request to the at least a second system for additional data regarding performance satisfying the particular criteria; and

the first system generating the requested report using data retrieved from the first system and received from the at least a second system.

2. The computer-implemented method of claim 1, wherein said determining whether additional computing data regarding performance satisfying that may the particular criteria possibly exists comprises determining whether values of data retrieved from the first system and values of data received from the at least second system indicate additional computing data regarding performance satisfying the particular criteria exist on the first system or the at least a second system.

3. The computer-implemented method of claim 1, wherein said determining whether additional computing data regarding performance satisfying the particular criteria possibly exists comprises determining whether the retrieved data and the received data indicate that additional data from the first system or the at least a second system exceed a threshold value derived from the retrieved data regarding performance satisfying the particular criteria, and the received data regarding performance satisfying the particular criteria.

4. The computer-implemented method of claim 1, wherein the retrieved data regarding performance comprises performance records and the received data regarding performance comprises performance records and each performance record comprises a respective value, the method further comprising compiling a list of performance records and ordering the list by respective value.

5. The computer-implemented method of claim 4, wherein said determining whether additional computing data regarding performance satisfying the particular criteria possibly exists comprises determining whether a sum of respective values from performance records of each of the first system and the at least a second system exceeds a threshold.

6. The computer-implemented method of claim 5, wherein the threshold is the value of the nth record of the list.

7. The computer-implemented method of claim 6, wherein the requested report is a top-n report.

8. The computer-implemented method of claim 6, wherein the requested report is a bottom-n report.

9. The computer-implemented method of claim 5,

wherein the first system querying the first performance data comprises querying the first performance for a set of top ten values satisfying the particular criteria;

and

wherein transmitting to the at least a second system a request for data regarding performance satisfying the particular criteria comprises transmitting a request for a set of top ten values satisfying the particular criteria.

10. The computer-implemented method of claim 5, further comprising receiving additional data from the at least a second system, and updating the list to reflect values for performance records in the received additional data.

11. The computer-implemented method of claim 1, wherein the data regarding performance comprises data regarding netflow.

12. A computing system, comprising:

a computing processor; and

computing memory communicatively coupled with the computing processor,

the computing memory having stored therein mapping data identifying a plurality of systems and for each of the plurality of systems identifying performance data stored thereon,

the computing memory further having stored therein computer executable instructions that when executed cause the computing system to perform operations comprising;

receiving at the computing system a request to generate a report on performance;

the computing system querying the mapping data to identify a plurality of systems having performance data responsive to the request to generate a report;

the computing system transmitting a request for performance records to the identified plurality of systems;

receiving at the computing system a respective subset of performance data records from each of the identified plurality of systems for the requested report, each record comprising a respective value;

the computing system compiling an ordered list of received records by value;

the computing system determining, prior to outputting the report, whether additional performance data records are to be requested from at least one of the plurality of systems for the requested report by determining whether a value derived from records received from the plurality of systems exceeds a threshold;

the computing system requesting and receiving additional performance records from one or more of the plurality of systems and updating the ordered list; and

outputting the requested report based on the updated ordered list.

13. The computing system of claim 12, wherein each respective subset of performance data records are ordered by value.

14. The computing system of claim 12, wherein said determining whether a value derived from records received from the plurality of systems exceeds a threshold comprises determining whether the sum of each lowest-valued record received from each system passes a threshold.

15. The computing system of claim 14, wherein the threshold is the value of the nth record of the list.

16. The computing system of claim 15, wherein the requested report is a top-n report.

17. The computing system of claim 15, wherein the requested report is a bottom-n report.

18. The computing system of claim 12, wherein the performance data records are indicative of netflow.

19. A computer-implemented method, comprising:

a computing system receiving a request to generate a report on performance with particular characteristics, the computing system comprising mapping data identifying a plurality of systems and for each of the plurality of systems identifying performance data collected and stored thereon;

the computing system querying the mapping data to identify a plurality of systems having performance data responsive to the request to generate a report;

the computing system transmitting a request for performance data to the identified plurality of systems;

receiving at the computing system a respective subset of performance data records from each of the identified plurality of systems, each record comprising a respective value, each respective subset of performance data records being ordered by value;

the computing system compiling an ordered list of received records by value;

the computing system determining, prior to outputting the report, whether additional performance data records are to be requested from the plurality of systems by determining whether a sum of each lowest-valued record received from each of the identified plurality of systems exceeds a particular value record in the ordered list;

the computing system requesting and receiving additional performance records from one or more of the identified plurality of systems and updating the ordered list; and

outputting the report based on the updated ordered list.