Behavioral rules discovery for intelligent computing environment administration
First Claim
Patent Images
1. A management system for determining causal relationships among system entities, the management system comprising:
- at least one processor;
a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement,a causal relationship detector configured to receive events from a computing environment having a plurality of entities, and configured to detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the events, the causal relationship detector being configured to create vertices and arcs connecting temporally adjacent vertices, and annotate each arc with a coefficient value representing a level of connectivity between the temporally adjacent vertices based on the events; and
a rules converter configured to convert one or more of the causal relationships into at least one behavioral rule, the rules converter configured to map the temporally adjacent vertices to corresponding entities of the plurality of entities that generated the temporally adjacent vertices when the coefficient value is above a threshold value, the at least one behavioral rule indicating a causal relationship between the corresponding entities.
13 Assignments
0 Petitions
Accused Products
Abstract
A management system for determining causal relationships among system entities may include a causal relationship detector configured to receive events from a computing environment having a plurality of entities, and detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the events, and a rules converter configured to convert one or more of the causal relationships into at least one behavioral rule. The at least one behavioral rule may indicate a causal relationship between at least two entities of the plurality of entities.
-
Citations
18 Claims
-
1. A management system for determining causal relationships among system entities, the management system comprising:
-
at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, a causal relationship detector configured to receive events from a computing environment having a plurality of entities, and configured to detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the events, the causal relationship detector being configured to create vertices and arcs connecting temporally adjacent vertices, and annotate each arc with a coefficient value representing a level of connectivity between the temporally adjacent vertices based on the events; and a rules converter configured to convert one or more of the causal relationships into at least one behavioral rule, the rules converter configured to map the temporally adjacent vertices to corresponding entities of the plurality of entities that generated the temporally adjacent vertices when the coefficient value is above a threshold value, the at least one behavioral rule indicating a causal relationship between the corresponding entities. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A non-transitory computer-readable medium storing instructions that when executed cause at least one processor to determine causal relationships among system entities, the instructions comprising instructions to:
-
receive events from a computing environment having a plurality of entities; generate a graph including, create vertices based on an initial set of events including a first vertex, a second vertex, and a third vertex, and arrange the first vertex, the second vertex, and the third vertex in chronological order; create arcs between temporally adjacent vertices including a first arc connected between the first vertex and the second vertex and a second arc connected between the second vertex and the third vertex; and annotate each arc with a coefficient value representing a level of connectivity between the temporally adjacent vertices; detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the graph; and convert one or more of the causal relationships into at least one behavioral rule, the at least one behavioral rule indicating a causal relationship between at least two entities of the plurality of entities. - View Dependent Claims (10, 11, 12, 13, 14, 15)
-
-
16. A method for determining causal relationships among system entities, the method comprising:
-
receiving, by at least one processor, events from a computing environment having a plurality of entities; detecting, by the at least one processor, causal relationships among the plurality of entities, during runtime of the computing environment including creating vertices and arcs connecting temporally adjacent vertices, and annotating each arc with a coefficient value representing a level of connectivity between the temporally adjacent vertices based on the events; and converting, by the at least one processor, one or more of the causal relationships into at least one behavioral rule including mapping the temporally adjacent vertices to corresponding entities of the plurality of entities that generated the temporally adjacent vertices when the coefficient value is above a threshold value, the at least one behavioral rule indicating a causal relationship between the corresponding entities. - View Dependent Claims (17, 18)
-
Specification