Administering event pools for relevant event analysis in a distributed processing system

• US 9,213,621 B2
• Filed: 05/27/2011
• Issued: 12/15/2015
• Est. Priority Date: 05/27/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Atkins, Mark G., Carey, James E., Sanders, Philip J.
• Primary Examiner(s): TRUONG, LOAN
• Application Number:
  US13/117,371
• Publication Number:
  US 20120304013A1
• Time in Patent Office: 1,663 Days
• Field of Search: 714/25, 714/37, 714/39, 709/224, 719/318
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0763 by bit configuration check, e.g. of formats or tags
• CPC Class Codes: G06F 11/0784 Routing of error reports, e.g. with a specific transmission path or data flow
• CPC Class Codes: G06F 11/3495 for systems

Abstract

Methods, systems, and computer program products for administering event pools for relevant event analysis are provided. Embodiments include assigning, by an incident analyzer, a plurality of events to an events pool; determining, by the incident analyzer, an event suppression duration; determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

Claims

1. A system for administering event pools for relevant event analysis in a distributed processing system, the system comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions capable, when executed by the computer processor, of causing the system to carry out the steps of:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining based on an event type and an identification of a reporting component that reported an event of the plurality of events, by the incident analyzer, an event suppression duration indicating a particular time period for the event to occur;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes including the identification of the reporting component that reported the event and an occurred time, which indicates that the event occurred during the event suppression duration;

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes; and

continuing, by the incident analyzer, event processing for events having the particular attributes.

2. The system of claim 1 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

3. The system of claim 1 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.

4. A computer program product for administering event pools for relevant event analysis in a distributed processing system, the computer program product includes a non-transitory computer readable storage device, wherein the computer readable storage device is not a signal, the computer program product comprising computer program instructions for:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining based on an event type and an identification of a reporting component that reported an event of the plurality of events, by the incident analyzer, an event suppression duration indicating a particular time period for the event to occur;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes including the identification of the reporting component that reported the event and an occurred time, which indicates that the event occurred during the event suppression duration;

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes; and

continuing, by the incident analyzer, event processing for events having the particular attributes;

expired.

5. The computer program product of claim 4 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

6. The computer program product of claim 4 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.