Method and management agent for event notifications correlation

• US 9,985,821 B2
• Filed: 05/08/2015
• Issued: 05/29/2018
• Est. Priority Date: 12/01/2005
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Tse, Edwin, Petersen, Robert, Power, John
• Primary Examiner(s): Wathen, Brian W
• Assistant Examiner(s): SEYE, ABDOU K
• Application Number:
  US14/707,879
• Publication Number:
  US 20150280967A1
• Time in Patent Office: 1,117 Days
• Field of Search: None
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Methods and apparatus for correlating event notifications between agents in a management network are provided. An agent constructs a network notification in response to receiving an event notification. If the received event notification is associated with a prior notification already received and stored by the agent, a correlation attribute is added to the constructed network notification. If the received notification matches a peer agent notification category that another agent in the management network is interested in receiving, the constructed network notification is sent to the other agent.

Claims

1. A method at a first agent in a management network that is one among a plurality of agents in the management network, said method comprising:

receiving, at the first agent, a Network Resource (NR) notification from a first network resource managed by the first agent;

determining that the received NR notification matches a type of event notification a second agent is interested in receiving from the first agent, said second agent being among the plurality of agents and, in response to said determining, sending the NR notification from the first agent to the second agent;

maintaining a category list at the first agent that defines the event categories of interest for the one or more other ones of the plurality of agents, including the second agent, and wherein said step of determining that the received NR notification matches a type of event notification the second agent is interested in receiving from the first agent comprises determining whether an event category of the received NR notification matches or is associated with an event category of interest known from the category list for the second agent;

receiving, at the first agent, an agent notification from the second agent;

determining that a correlation exists between the agent notification received from the second agent and the NR notification received from the first network resource;

creating a modified notification that indicates the correlation; and

sending the modified notification to the second agent or to a manager.

2. The method of claim 1, further comprising:

determining that a correlation exists between the NR notification received from the first network resource and a previously received notification from a second network resource; and

modifying the NR notification to indicate the correlation prior to sending the NR notification from the first agent to the second agent.

3. The method of claim 1, further comprising, determining, one or more further agents from the category list that are associated with the matched event notification category and sending, the NR notification from the first agent to the one or more further agents.

4. The method of claim 1, further comprising:

determining whether a correlation exists between the received NR notification and any logged notifications indicated in a notification log maintained at the first agent, wherein the notification log indicates at least one of;

previously received agent notifications, previously received NR notifications, and previously transmitted notifications, as sent from the first agent to the manager; and

in response to determining that the correlation exists, adding a correlation attribute to the received NR notification to obtain a modified notification, and sending the modified notification instead of the NR notification to the manager.