Flexible event data content management for relevant event and alert analysis within a distributed processing system

• US 9,286,143 B2
• Filed: 11/15/2012
• Issued: 03/15/2016
• Est. Priority Date: 06/22/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Carey, James E., Markland, Matthew W., Sanders, Philip J.
• Primary Examiner(s): Onat, Umut
• Application Number:
  US13/678,153
• Publication Number:
  US 20130074102A1
• Time in Patent Office: 1,216 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: H03M 13/1102 Codes on graphs and decoding on graphs, e.g. low-density parity check [LDPC] codes
• CPC Class Codes: H04B 7/0413 MIMO systems
• CPC Class Codes: H04L 1/0041 Arrangements at the transmitter end

Abstract

Methods, systems, and computer program products for flexible event data content management for relevant event and alert analysis within a distributed processing system are provided. Embodiments include capturing, by an interface connector, an event from a resource of the distributed processing system; inserting, by the interface connector, the event into an event database; receiving from the interface connector, by a notifier, a notification of insertion of the event into the event database; based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database; receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database; in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database; and processing, by the monitor, the retrieved events.

Claims

1. A method of flexible event data content management for relevant event and alert analysis within a distributed processing system, the method comprising:

capturing, by each of a plurality of interface connectors, one or more events from a resource of the distributed processing system, wherein each of the one or more events is a notification of an error occurring in a component of the distributed computing system, wherein each event is identified by an event identifier, wherein each event identifier is unique such that no two interface connectors capture events with identical event identifiers;

inserting, by each of the plurality of interface connectors, one or more of the events into an event database, wherein no two interface connectors insert events with identical event identifiers into the event database;

receiving from the plurality of interface connectors, by a notifier, a notification of insertion of the event into the event database;

based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database;

receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database;

in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database;

processing, by the monitor, the retrieved events; and

identifying, by the event analyzer, at least one alert based on the retrieved events.

2. The method of claim 1, wherein the cumulative notification is transmitted in response to the notifier determining that the number of events that have been inserted into the event database exceeds a predetermined number.

3. The method of claim 1, wherein the notifier is coupled to a plurality of interface connectors;

the method further comprising;

inserting, by the plurality of interface connectors, a plurality of events into the event database; and

receiving from the plurality of interface connectors, by the notifier, a plurality of notifications of insertions of the plurality of events into the event database;

wherein the cumulative notification received by the monitor indicates all of the events indicated in the plurality of notifications received by the notifier.

4. The method of claim 1, wherein each interface connector is configured to interface with a different resource of the distributed processing system.

5. The method of claim 1, wherein each interface connector uses a different notification class for transmitting notifications to the notifier.

6. The method of claim 1, wherein the monitor retrieves the event inserted into the event database without polling the event database.

7. The method of claim 1, wherein the monitor retrieves the event inserted into the event database without relying on a database trigger to detect the event captured at the interface connector.

8. The method of claim 1, wherein the cumulative notification is transmitted in response to the notifier determining that a predetermined amount of time has elapsed.