Administering event pools for relevant event analysis in a distributed processing system

• US 9,201,756 B2
• Filed: 11/29/2012
• Issued: 12/01/2015
• Est. Priority Date: 05/27/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Atkins, Mark G., Carey, James E., Sanders, Philip J.
• Primary Examiner(s): TRUONG, LOAN
• Application Number:
  US13/688,603
• Publication Number:
  US 20130091386A1
• Time in Patent Office: 1,097 Days
• Field of Search: 714/25, 714/37, 714/39, 709/224, 719/318
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0763 by bit configuration check, e.g. of formats or tags
• CPC Class Codes: G06F 11/0784 Routing of error reports, e.g. with a specific transmission path or data flow
• CPC Class Codes: G06F 11/3495 for systems

Abstract

Methods, systems, and computer program products for administering event pools for relevant event analysis are provided. Embodiments include assigning, by an incident analyzer, a plurality of events to an events pool; determining, by the incident analyzer, an event suppression duration; determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes indicating the events occurred during the event suppression duration; and suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes indicating the events occurred during the event suppression duration.

Claims

1. A method of administering event pools for relevant event analysis in a distributed processing system, the method comprising:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining based on an event type and an identification of a reporting component that reported an event of the plurality of events, by the incident analyzer, an event suppression duration indicating a particular time period for an event to occur;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes including the identification of the reporting component that reported the event and an occurred time, which indicates that the event occurred during the event suppression duration; and

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes.

2. The method of claim 1 wherein suppressing each event assigned to the events pool having the particular attributes includes instantiating, by the incident analyzer, a suppression object associated with the events pool having a function called by the incident analyzer.

3. The method of claim 1 wherein determining in dependence upon the event analysis rules, to suppress events having particular attributes includes determining, by the incident analyzer, whether to suppress one or more events in dependence upon one or more of the particular attributes of the events.

4. The method of claim 1 further comprising continuing, by the incident analyzer, event processing for events having particular attributes indicating the events occurred after the event suppression duration expired.

5. A method of administering event pools for relevant event analysis in a distributed processing system, the distributed processing system including a parallel computer having a plurality of compute nodes, wherein each compute node is an automated computing device composed of one or more computer processors and computer memory, wherein at least one compute node includes an incident analyzer for analyzing events generated by one or more of the other compute nodes in the plurality of compute nodes, the method comprising:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining based on an event type and an identification of a reporting component that reported an event of the plurality of events, by the incident analyzer, an event suppression duration indicating a particular time period for an event to occur;

determining, by the incident analyzer in dependence upon event analysis rules, to suppress events having particular attributes including the identification of the reporting component that reported the event and an occurred time, which indicates that the event occurred during the event suppression duration; and

suppressing, by the incident analyzer, each event assigned to the events pool having the particular attributes.

6. A method of administering event pools for relevant event analysis in a distributed processing system, the method comprising:

assigning, by an incident analyzer, a plurality of events to an events pool;

determining based on an event type and an identification of a reporting component that reported an event of the plurality of events, by the incident analyzer, a suppression duration indicating a particular time period for an event to occur; and

generating one or more alerts, by the incident analyzer in dependence upon event analysis rules and the suppression duration.