Event correlation and calculation engine

• US 9,703,624 B2
• Filed: 10/12/2015
• Issued: 07/11/2017
• Est. Priority Date: 10/12/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Ghelani, Ketan J., Shaikh, Moinuddin, Purushothaman, Sasidhar
• Primary Examiner(s): Lottich, Joshua P
• Application Number:
  US14/880,349
• Publication Number:
  US 20170102988A1
• Time in Patent Office: 638 Days
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/0772 Means for error signaling, e.g. using interrupts, exception flags, dedicated error registers
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3452 Performance evaluation by statistical analysis

Abstract

Apparatus and methods for learning and implementing rules for remediating system errors are provided. The method may include identifying a configuration item that is not in compliance with a configuration baseline. The method may also include tracking a workflow executed by a remote user in an attempt to remediate the configuration error. The method may additionally include monitoring the status of the configuration item. In the event the workflow brings the configuration item in compliance with the configuration baseline, the method may further include storing the workflow in a database.

Claims

1. One or more non-transitory computer-readable media storing computer-executable instructions which, when executed by a processor on a computer system, perform a method for remediating a system error, the method comprising:

receiving a first set of data including a first event metric value and a first configuration item identification number identifying a first configuration item on a first server;

in response to a determination that the first event metric value is below a first configuration threshold, transmitting an alert to a predetermined electronic address;

recording, in a first database, a plurality of instructions received by the first server from a remote user, the plurality of instructions being responsive to, and received at later in time than, the transmission of the alert;

identifying compliance of the first configuration item with the first configuration threshold subsequent to the execution of the plurality of instructions;

in response to the identification of the compliance, storing the plurality of instructions in a second database;

receiving a second set of data including a second event metric value and a second configuration item identification number identifying a second configuration item on a second server;

in response to a determination that the second event metric value is below the second configuration threshold, searching the second database for a configuration item identification number identical to the second configuration item identification number;

identifying the first configuration item identification number;

extracting the plurality of instructions; and

executing the plurality of instructions on the second server.

2. The media of claim 1 wherein, in the method, the first configuration item identification number is identical to the second configuration item identification number.

3. The media of claim 1 wherein the method further comprises monitoring data on a plurality of servers.

4. The media of claim 1 wherein the method further comprises transmitting a notification to a predetermined e-mail address prior to the executing of the instructions.

5. The media of claim 4 wherein, in the method, the executing of the plurality of instructions is initiated subsequent to the receipt of a user command.

6. The media of claim 1 wherein, in the method:

the first set of data includes a first error identifier; and

the plurality of instructions are input by the remote user into a graphical user interface (“

GUI”

).

7. The media of claim 6 wherein the method further comprises:

receiving the first error identifier, the first error identifier being input into the GUI;

in response to receipt of the first error identifier, recording the plurality of instructions input into the GUI; and

associating the instructions with the first error identifier.

8. The media of claim 1 wherein, in the method, the determination that the first event metric value is below a first configuration threshold includes:

accessing an error definitions database; and

comparing the first event metric value to the first configuration threshold, the first configuration threshold being stored in the error definitions database.

9. The media of claim 8 wherein, in the method, the determination that the second event metric value is below a first configuration threshold includes:

accessing the error definitions database; and

comparing the second event metric value to the second configuration threshold, the second configuration threshold being stored in the error definitions database.