Method and management agent for event notifications correlation

• US 9,032,420 B2
• Filed: 10/10/2011
• Issued: 05/12/2015
• Est. Priority Date: 12/01/2005
• Status: Expired due to Fees

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Tse, Edwin, Petersen, Robert, Power, John
• Primary Examiner(s): Wathen, Brain W
• Assistant Examiner(s): SEYE, ABDOU K
• Application Number:
  US13/269,898
• Publication Number:
  US 20120079024A1
• Time in Patent Office: 1,310 Days
• Field of Search: 719/318, 726/22
• US Class Current: 719/318
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Methods and apparatus for correlating event notifications between agents in a management network are provided. An agent constructs a network notification in response to receiving an event notification. If the received event notification is associated with a prior notification already received and stored by the agent, a correlation attribute is added to the constructed network notification. If the received notification matches a peer agent notification category that another agent in the management network is interested in receiving, the constructed network notification is sent to the other agent.

Claims

1. A method at a first agent in a management network that is one among a plurality of peer agents that report event notifications up to a common manager in the management network, said method comprising:

receiving Peer Agent (PA) notifications from one or more other ones of the peer agents in the plurality of peer agents;

receiving Network Resource (NR) notifications from one or more network resources managed by the first agent;

determining whether a correlation exists between a PA notification received at the first agent from a given second peer agent among the plurality of peer agents and a NR notification received at the first agent; and

if the correlation exists, creating a modified notification, said modified notification indicating the correlation, and sending the modified notification to the manager.

2. The method of claim 1, wherein said step of determining comprises determining whether the correlation exists between the PA notification and any NR notifications received at the first agent before receipt of the PA notification.

3. The method of claim 2, wherein said step of determining further comprises determining whether the correlation exists between the PA notification and any NR notifications received at the first agent within a defined delay after receipt of the PA notification, and, if the correlation does not exist, sending the PA notification without modification to the manager after expiry of the defined delay.

4. The method of claim 1, wherein said step of determining comprises determining whether the correlation exists between the PA notification and any NR notification received at the first agent before receipt of the PA notification or within a defined delay after receipt of the PA notification, or any other PA notification received at the first agent before receipt of the PA notification or within a defined delay after receipt of the PA notification, and, if the correlation does not exist, sending the PA notification to the manager after expiry of the defined delay without modification, and, if the correlation exists, sending the modified notification to the manager after expiry of the defined delay.

5. The method of claim 1, wherein said step of determining comprises determining whether the correlation exists between the PA notification and any logged notifications indicated in a notification log maintained at the first agent, wherein the notification log indicates at least one of:

previously received PA notifications, previously received NR notifications, and previously transmitted notifications, as sent from the first agent to the manager.

6. The method of claim 1, wherein the one or more network resources managed by the first agent comprise first network resources, and wherein the second peer agent manages second network resources.

7. The method of claim 1, wherein said step of determining comprises determining whether an event category of the PA notification matches or is associated with an event category of the NR notification.

8. The method of claim 7, further comprising maintaining a Peer Agent Category List (PACL) that defines associations between one or more categories of PA events and one more categories of local, NR events, and wherein said step of determining whether the event category of the PA notification matches or is associated with the event category of the NR notification comprises using the PACL at least in part to determine whether the event category of the PA notification is associated with the event category of the NR notification.

9. The method of claim 1, further comprising determining whether an event category associated with any given NR notification received at the first agent matches a category of interest known for one or more other ones of the peer agents among the plurality of peer agents and, if so, sending the given NR notification or a modified version of the given NR notification to the one or more other peer agents.

10. The method of claim 9, further comprising maintaining a Peer Agent Category List (PACL) at the first agent that defines the categories of interest for the one or more other ones of the peer agents.

11. The method of claim 9, wherein the modified version of the given NR notification indicates a correlation between the given NR notification and any PA notifications previously received at the first agent.