System and method for event-driven prioritization

• US 9,043,317 B2
• Filed: 12/06/2012
• Issued: 05/26/2015
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Burke, Christopher, Cosgrove, David, Pirozzi, Timothy
• Primary Examiner(s): Ly, Anh
• Application Number:
  US13/707,228
• Publication Number:
  US 20140164364A1
• Time in Patent Office: 901 Days
• Field of Search: 707/748, 707/723, 715/794, 715/795, 715/807.73, 714/4.1, 718/101, 718/102
• US Class Current: 707/723
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 9/44 Arrangements for executing specific programs
• CPC Class Codes: G06F 9/50 Allocation of resources, e.g. of the central processing unit [CPU]
• CPC Class Codes: G06Q 10/0639 Performance analysis of employees; Performance analysis of enterprise or organisation operations

Abstract

Methods include receiving at a receiving device a plurality of reports, each corresponding to at least one item and comprising data associated with one or more performance metrics. The methods further include identifying events for each report corresponding to at least one item using the data in the report. In addition, the methods include determining a report score for each report based on a number and type of the identified events. The methods also include outputting the report scores.

Claims

1. A method comprising:

receiving at a receiving device a plurality of reports, each corresponding to one or more items and comprising data associated with one or more performance metrics;

for each report;

identifying events corresponding to one or more items using the data in the report; and

determining a report score based on a number and type of the identified events;

outputting the report scores,

determining a rank for each of the plurality of reports based on the report scores; and

displaying the plurality of reports organized based on the determined ranks,

wherein determining a report score further comprises assigning weights to the number of the identified items, the number of the identified events, the types of the identified events, and the types of the identified items.

2. The method of claim 1:

wherein an item comprises a computer component, a logical computer component, a physical network entity, or a logical network entity; and

wherein performance metrics are selected from the group comprising;

port utilization, memory utilization, CPU utilization, disk capacity, and average reachability response time.

3. The method of claim 1, wherein identifying events comprises identifying when:

a portion of the data in the report crosses a threshold value;

a portion of the data in the report deviates more than a predetermined amount from an average;

or a portion of the data in the report deviates more than a predetermined amount from an order statistic.

4. The method of claim 1, further comprising:

identifying items corresponding to the identified events; and

wherein determining a report score further comprises determining a report score based on a number and type of the identified items.

5. The method of claim 1, wherein a type of identified event is based on an amount of deviation from a predetermined value, the type of identified event being one of a low event and a high event,

wherein the amount of deviation associated with a low event is less than an amount of deviation associated with a high event.

6. A system comprising:

a receiving device configured to receive a plurality of reports, each corresponding to one or more items and comprising data associated with one or more performance metrics;

for each report;

a first identifying device configured to identify events corresponding to one or more items using the data in the report; and

a first determining device configured to determine a report score based on a number and type of the identified events;

an outputting device configured to output the report scores,

a second determining device configured to determine a rank for each of the plurality of reports based on the report scores; and

a displaying device configured to display the plurality of reports organized based on the determined ranks,

wherein the first determining device is further configured to determine a report score by assigning weights to the number of the identified items, the number of the identified events, the types of the identified events, and the types of the identified items.

7. The system according to claim 6;

wherein an item comprises a computer component, a logical computer component, a physical network entity, or a logical network entity; and

wherein performance metrics are selected from the group comprising;

port utilization, memory utilization, CPU utilization, disk capacity, and average reachability response time.

8. The system according to claim 6, wherein the identifying device is configured to identify when:

a portion of the data in the report crosses a threshold value;

a portion of the data in the report deviates more than a predetermined amount from an average;

or a portion of the data in the report deviates more than a predetermined amount from an order statistic.

9. The system according to claim 6, further comprising:

a second identifying device configured to identify items corresponding to the identified events; and

wherein the first determining device is further configured to determine a report score based on a number and type of the identified items.

10. The system according to claim 6, wherein a type of identified event is based on an amount of deviation from a predetermined value, the type of identified event being one of a low event and a high event,

wherein the amount of deviation associated with a low event is less than an amount of deviation associated with a high event.

11. A computer program product comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising;

computer readable program code configured to receive at a receiving device a plurality of reports, each corresponding to one or more items and comprising data associated with one or more performance metrics;

for each report;

computer readable program code configured to identify events corresponding to the one or more items using the data in the report; and

computer readable program code configured to determine a report score based on a number and type of the identified events;

computer readable program code configured to output the report scores,

computer readable program code configured to determine a rank for each of the plurality of reports based on the report scores; and

computer readable program code configured to display the plurality of reports organized based on the determined ranks,

wherein the computer readable program code configured to determine a report score further comprises computer readable program code configured to determine a report score by assigning weights to the number of the identified items, the number of the identified events, the types of the identified events, and the types of the identified items.

12. The computer program product according to claim 11:

wherein an item comprises a computer component, a logical computer component, a physical network entity, or a logical network entity; and

wherein performance metrics are selected from the group comprising;

port utilization, memory utilization, CPU utilization, disk capacity, and average reachability response time.

13. The computer program product according to claim 11, wherein the computer readable program code configured to identify events comprises computer readable program code configured to identify events when:

a portion of the data in the report crosses a threshold value;

a portion of the data in the report deviates more than a predetermined amount from an average;

or a portion of the data in the report deviates more than a predetermined amount from an order statistic.

14. The computer program product according to claim 11, further comprising:

computer readable program code configured to identify items corresponding to identified events; and

wherein the computer readable program code configured to determine a report score further comprises computer readable program code configured to determine a report score based on a number and type of the identified items.

15. The computer program product according to claim 11, wherein a type of identified event is based on an amount of deviation from a predetermined value, the type of identified event being one of a low event and a high event,

wherein the amount of deviation associated with a low event is less than an amount of deviation associated with a high event.