Monitoring and capturing early diagnostic data

• US 9,471,411 B2
• Filed: 01/23/2013
• Issued: 10/18/2016
• Est. Priority Date: 01/23/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kovalchick, Eileen S., Bariska, Arthur J. Jr., Cousens, Matthew T., Masser, Joel L., McKenzie, Kevin D., Tedesco, Eileen P.
• Primary Examiner(s): BRYAN, JASON B
• Application Number:
  US13/747,928
• Publication Number:
  US 20140208171A1
• Time in Patent Office: 1,364 Days
• Field of Search: 714/37, 714 381- 3814, 714/39, 714/45, 714 471- 473, 714/48
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0706 the processing taking place on a specific hardware platform or in a specific software environment
• CPC Class Codes: G06F 11/0754 by exceeding limits
• CPC Class Codes: G06F 11/0778 Dumping, i.e. gathering error/state information after a fault for later diagnosis
• CPC Class Codes: G06F 11/302 where the computing system component is a software system
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 11/3688 for test execution, e.g. scheduling of test suites

Abstract

A deviance monitoring module is provided for examining various parameters of an operating system for deviance from a baseline behavior at specified intervals. A range of acceptable deviance values from a baseline behavior is set for parameters of an operating system. The parameters of the operating system are then monitored at specified intervals for deviance from the baseline behavior. In response to detecting that the deviance exceeds a predetermined threshold, the method triggers diagnostic data gathering on the parameters of the operating system according to an embodiment.

Claims

1. A computer-implemented method, comprising:

setting, with a processing device, a range of acceptable deviance values from a baseline behavior for parameters of an operating system;

monitoring the parameters at specified intervals for a deviance from the baseline behavior;

determining whether the deviance falls within an exception list, wherein the exception list specifies an allowable amount of deviation of the monitored parameter values from the baseline behavior and allowable time values of deviation for the monitored parameter values from the baseline behavior, wherein the allowable time values include a set of time units and percentages of time units for which deviation is expected and wherein the exception list also specifies a list of programs associated with the monitored parameter values; and

triggering diagnostic data gathering on the parameters of the operating system in response to the deviance exceeding a predetermined threshold.

2. The computer-implemented method of claim 1, wherein, in response to the deviance returning within the predetermined threshold within a specified amount of time specified in the exception list, the diagnostic data is logged and deleted after a predetermined period of time.

3. The computer-implemented method of claim 1, further comprising notifying interested parties of the gathered diagnostic data, the notifying selected from one of an e-mail, pager, and text message.

4. The computer-implemented method of claim 1, further comprising initiating recovery/remediation actions in response to the deviance exceeding a predetermined threshold.

5. The computer-implemented method of claim 1, wherein a user provides the range of acceptable deviance values from the baseline behavior for parameters of the operating system.

6. A computer system, comprising:

a processor, a system memory, and a bus that couples various system components including the system memory to the processor, the system configured to perform a method comprising;

setting, with a processing device, a range of acceptable deviance values from a baseline behavior for parameters of an operating system;

monitoring the parameters at specified intervals for deviance from the baseline behavior;

determining whether the deviance falls within an exception list, wherein the exception list specifies an allowable amount of deviation of the monitored parameter values from the baseline behavior and allowable time values of deviation for the monitored parameter values from the baseline behavior, wherein the allowable time values include a set of time units and percentages of time units for which deviation is expected and wherein the exception list also specifies a list of programs associated with the monitored parameter values; and

triggering diagnostic data gathering on the parameters of the operating system in response to the deviance exceeding a predetermined threshold.

7. The computer system of claim 6, wherein, in response to the deviance returning within the predetermined threshold within a specified amount of time specified in the exception list, the diagnostic data is logged and deleted after a predetermined period of time.

8. The computer system of claim 6, further comprising notifying interested parties of the gathered diagnostic data, the notifying selected from one of an e-mail, pager, and text message.

9. The computer system of claim 6, further comprising initiating recovery/remediation actions in response to the deviance exceeding a predetermined threshold.

10. The computer system of claim 6, wherein a user provides the range of acceptable deviance values from the baseline behavior for parameters of the operating system.

11. A computer program product, comprising:

a non-transitory computer readable storage medium having computer readable program code stored thereon that, when executed, performs a method, the method comprising;

setting, with a processing device, a range of acceptable deviance values from a baseline behavior for parameters of an operating system;

monitoring the parameters at specified intervals for deviance from the baseline behavior;

determining whether the deviance falls within an exception list, wherein the exception list specifies an allowable amount of deviation of the monitored parameter values from the baseline behavior and allowable time values of deviation for the monitored parameter values from the baseline behavior, wherein the allowable time values include a set of time units and percentages of time units for which deviation is expected and wherein the exception list also specifies a list of programs associated with the monitored parameter values; and

triggering diagnostic data gathering on the parameters of the operating system in response to the deviance exceeding a predetermined threshold.

12. The computer program product of claim 11, wherein, in response to the deviance returning within the predetermined threshold within a specified amount of time specified in the exception list, the diagnostic data is logged and deleted after a predetermined period of time.

13. The computer program product of claim 11, further comprising notifying interested parties of the gathered diagnostic data, the notifying selected from one of an e-mail, pager, and text message.

14. The computer program product of claim 11, further comprising initiating recovery/remediation actions in response to the deviance exceeding a predetermined threshold.