System for decomposing clustering events from managed infrastructures coupled to a data extraction device
First Claim
Patent Images
1. An event clustering system configured to provide extracted information, comprising:
- an extraction engine with a processor in communication with an infrastructure, the extraction engine in operation receiving data from the infrastructure and produces clustering events and populates a database with a dictionary of event or graph entropy;
an alert engine that receives the events and creates alerts mapped into a matrix, M;
a signalizer engine that includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine, the signalizer engine determining one or more common steps from events and produces clusters relating to the alerts and or events, the signalizer engine determining one or more common steps from events and produces clusters relating to events, the signalizer engine determining one or more common characteristics of events and producing clusters of events relating to the failure or errors in the infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in physical hardware of the infrastructure directed to supporting the flow and processing of information, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware of the infrastructure directed to supporting the flow and processing of information;
one or more interactive displays that provide a collaborative interface coupled to the extraction and the signalizer engine with a collaborative interface (UI) for decomposing events from the infrastructure;
a data extraction device that is configured to collect information from one or more clusters;
a topology engine using a source address for each event and a graph topology of the infrastructure which represents node to node connectivity of the topology engine and to assign a graph coordinate to the event with an optional subset of attributes being extracted for each event and turned into a vector;
the signalizer engine with at one or more of the NMF engine and the k-means clustering engine using graph coordinates and optionally a subset of attributes assigned to each event to generate cluster to bring together events whose characteristics are similar;
the signalizer engine with at one or more of the NMF engine and the k-means clustering engine factoring the matrix M into A and B, where A is inspected and substantially significant clusters are extracted, and B is used to assign a start and end time to each cluster, wherein an output of clusters is produced; and
wherein in response to production of the clusters one or more physical changes in a managed infrastructure hardware is made.
5 Assignments
0 Petitions
Accused Products
Abstract
An event clustering system is provided. An extraction engine is in communication with an infrastructure. The extraction engine in operation receives data from the infrastructure and produces events. An alert engine receives the events and creates alerts mapped into a matrix, M. A sigalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The sigalizer engine determines one or more common steps from events and produces clusters relating to the alerts and or events. A data extraction device is configured to be coupled to the event clustering system.
51 Citations
12 Claims
-
1. An event clustering system configured to provide extracted information, comprising:
-
an extraction engine with a processor in communication with an infrastructure, the extraction engine in operation receiving data from the infrastructure and produces clustering events and populates a database with a dictionary of event or graph entropy; an alert engine that receives the events and creates alerts mapped into a matrix, M; a signalizer engine that includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine, the signalizer engine determining one or more common steps from events and produces clusters relating to the alerts and or events, the signalizer engine determining one or more common steps from events and produces clusters relating to events, the signalizer engine determining one or more common characteristics of events and producing clusters of events relating to the failure or errors in the infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in physical hardware of the infrastructure directed to supporting the flow and processing of information, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware of the infrastructure directed to supporting the flow and processing of information; one or more interactive displays that provide a collaborative interface coupled to the extraction and the signalizer engine with a collaborative interface (UI) for decomposing events from the infrastructure; a data extraction device that is configured to collect information from one or more clusters; a topology engine using a source address for each event and a graph topology of the infrastructure which represents node to node connectivity of the topology engine and to assign a graph coordinate to the event with an optional subset of attributes being extracted for each event and turned into a vector; the signalizer engine with at one or more of the NMF engine and the k-means clustering engine using graph coordinates and optionally a subset of attributes assigned to each event to generate cluster to bring together events whose characteristics are similar; the signalizer engine with at one or more of the NMF engine and the k-means clustering engine factoring the matrix M into A and B, where A is inspected and substantially significant clusters are extracted, and B is used to assign a start and end time to each cluster, wherein an output of clusters is produced; and wherein in response to production of the clusters one or more physical changes in a managed infrastructure hardware is made. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
Specification
-
- Resources
Litigation Campaign Assessment
Thank you for your request. You will receive a custom alert email when the Litigation Campaign Assessment is available.
×
-
Current AssigneeDell Products LP (Dell Technologies Inc.)
-
Original AssigneeMoogsoft Inc. (Dell Technologies Inc.)
-
InventorsTee, Philip
-
Primary Examiner(s)Trapanese, William C
-
Application NumberUS14/325,575Publication NumberTime in Patent Office1,449 DaysField of SearchNoneUS Class CurrentCPC Class CodesG06F 16/285 Clustering or classificationG06F 16/35 Clustering; ClassificationG06Q 10/107 Computer-aided management o...H04L 12/1895 for short real-time informa...H04L 41/065 involving logical or physic...H04L 41/12 Discovery or management of ...H04L 41/22 comprising specially adapte...H04L 51/216 Handling conversation histo...H04L 51/224 providing notification on i...H04L 51/42 Mailbox-related aspects, e....
