公开(公告)号：US08180723B2

公开(公告)日：2012-05-15

申请号：US12239747

申请日：2008-09-27

申请人： Bob Bethke ,  Srikanth Natarajan

发明人： Bob Bethke ,  Srikanth Natarajan

IPC分类号： G06F17/00 ,  G06N5/02

CPC分类号： G06F11/079 ,  G06F11/0709

摘要： A method of performing root cause analysis for use in a system comprising a plurality of inter-related elements, wherein at least some of the elements experience one or more abnormal conditions, comprising defining one or more conditions for more than one element symptomatic of abnormal operation of the element; defining one or more causal relationships between the conditions and results on one or more related elements; compiling the conditions and causal relationships of each element for which conditions and relationships have been defined, as at least one continuation in a continuation passing style (CPS); receiving one or more observed events symptomatic of abnormal operation of at least one element of the system; processing the received events using the conditions and the continuations; concluding at least one root cause of the received events consistent with the received events; and outputting the root cause.

摘要翻译： 一种执行根本原因分析以在包括多个相关元件的系统中使用的方法，其中所述元件中的至少一些经历一个或多个异常状况，包括为异常操作的多于一个元件定义一个或多个条件 的元素; 定义一个或多个相关要素的条件和结果之间的一个或多个因果关系; 编制条件和关系定义的每个要素的条件和因果关系，作为连续传递风格（CPS）中的至少一个延续; 接收至少一个所述系统元件异常操作的一个或多个观察事件; 使用条件和延续处理接收到的事件; 结束接收到的事件的至少一个根本原因与接收的事件一致; 并输出根本原因。

公开(公告)号：US20100235493A1

公开(公告)日：2010-09-16

申请号：US12404968

申请日：2009-03-16

申请人： Lawrence M. Besaw ,  Bob Bethke ,  Brad Jones ,  Srikanth Natarajan ,  Jacob Bastiaan Ven ,  Robert J. Wernsman

发明人： Lawrence M. Besaw ,  Bob Bethke ,  Brad Jones ,  Srikanth Natarajan ,  Jacob Bastiaan Ven ,  Robert J. Wernsman

IPC分类号： G06F15/173

CPC分类号： H04L41/042 ,  H04L41/0266 ,  H04L41/0273 ,  H04L41/20

摘要： An extendable network management system and method is provided to manage a network environment. The system can include a management server with a management application. In addition, the management application is configured to enable a user to manage the network environment. A extension application server can host a plurality of extension modules. The extension modules can supply management functions to the management application for defined network components. Further, a plurality of management engines can be located on the extension application server. The management engines can provide network probing and network event management, while integrating an extension modules' data object model with a management application's data object

摘要翻译： 提供可扩展的网络管理系统和方法来管理网络环境。 该系统可以包括具有管理应用的管理服务器。 此外，管理应用被配置为使得用户能够管理网络环境。 扩展应用服务器可以托管多个扩展模块。 扩展模块可以为管理应用程序提供管理功能，用于定义的网络组件。 此外，多个管理引擎可以位于扩展应用服务器上。 管理引擎可以提供网络探测和网络事件管理，同时将扩展模块的数据对象模型与管理应用程序的数据对象进行集成

公开(公告)号：US20090183029A1

公开(公告)日：2009-07-16

申请号：US12239747

申请日：2008-09-27

申请人： Bob BETHKE ,  Srikanth NATARAJAN

发明人： Bob BETHKE ,  Srikanth NATARAJAN

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06F11/0709

摘要： A method of performing root cause analysis for use in a system comprising a plurality of inter-related elements, wherein at least some of the elements experience one or more abnormal conditions, comprising defining one or more conditions for more than one element symptomatic of abnormal operation of the element; defining one or more causal relationships between the conditions and results on one or more related elements; compiling the conditions and causal relationships of each element for which conditions and relationships have been defined, as at least one continuation in a continuation passing style (CPS); receiving one or more observed events symptomatic of abnormal operation of at least one element of the system; processing the received events using the conditions and the continuations; concluding at least one root cause of the received events consistent with the received events; and outputting the root cause.

摘要翻译： 一种执行根本原因分析以在包括多个相关元件的系统中使用的方法，其中所述元件中的至少一些经历一个或多个异常状况，包括为异常操作的多于一个元件定义一个或多个条件 的元素; 定义一个或多个相关要素的条件和结果之间的一个或多个因果关系; 编制条件和关系定义的每个要素的条件和因果关系，作为连续传递风格（CPS）中的至少一个延续; 接收至少一个所述系统元件异常操作的一个或多个观察事件; 使用条件和延续处理接收到的事件; 结束接收到的事件的至少一个根本原因与接收的事件一致; 并输出根本原因。

公开(公告)号：US20090183031A1

公开(公告)日：2009-07-16

申请号：US12239751

申请日：2008-09-27

申请人： Bob BETHKE ,  Srikanth NATARAJAN

发明人： Bob BETHKE ,  Srikanth NATARAJAN

IPC分类号： G06F11/00

CPC分类号： G06F11/3604

摘要： An engine for performing root cause analysis on a system comprising a plurality of elements in a modeled domain, the engine comprising a module loader and parser for loading modules of computer code containing computer language statements modeling elements of the system, including one or more of model type definitions, conditions, causal rules, and continuations; and for parsing the computer language statements; a storage for storing the parsed computer language statements; a receiver for receiving conditions representing state changes of system elements, accessing the storage, and determining one or more parsed computer language statements to apply to the received conditions; a hypothesis generator for instantiating one or more hypotheses of potential causes of each received condition consistent with the received conditions and the parsed computer language statements; a blackboard for receiving the instantiated hypotheses, and determining a root cause of the received conditions based on the hypotheses consistent with the received conditions and the parsed computer language statements; and an output for outputting the determined root cause.

摘要翻译： 一种用于在包括建模域中的多个元素的系统上执行根本原因分析的引擎，所述引擎包括用于加载包含所述系统的建模元素的计算机语言语句建模元素的计算机代码的模块的模块加载器和解析器，所述计算机代码包括一个或多个模型 类型定义，条件，因果规则和延续; 并用于解析计算机语言语句; 用于存储解析的计算机语言语句的存储器; 接收器，用于接收表示系统元件的状态变化，访问存储器以及确定一个或多个解析的计算机语言语句以适用于所接收的条件的条件; 一个假设生成器，用于实例化一个或多个与接收的条件和解析的计算机语言语句一致的接收到的条件的潜在原因的假设; 用于接收实例化假设的黑板，以及基于与接收到的条件和解析的计算机语言语句一致的假设来确定接收到的条件的根本原因; 以及用于输出确定的根本原因的输出。

公开(公告)号：US08447719B2

公开(公告)日：2013-05-21

申请号：US12239755

申请日：2008-09-27

申请人： Bob Bethke ,  Srikanth Natarajan

发明人： Bob Bethke ,  Srikanth Natarajan

IPC分类号： G06N5/02 ,  G06F9/44

CPC分类号： G06N5/04

摘要： A method of compiling causal rules into continuations for use in root cause analysis of a system comprising a plurality of inter-related elements, comprising defining observable events occurring on system elements; defining at least one of a cause and a result of each of the events; defining causal rules, each rule describing a causal relationship between an event and one of its cause and its result; and compiling the causal relationships as continuations in a continuation passing style (CPS) for use in analyzing the root cause of subsequent observed events symptomatic of at least one problem on the system.

摘要翻译： 一种将因果规则编译成连续性以用于包括多个相关元素的系统的根本原因分析的方法，包括定义在系统元件上发生的可观察事件; 定义每个事件的原因和结果中的至少一个; 定义因果规则，每个规则描述事件与其原因之间的因果关系及其结果; 并将因果关系作为继续传递风格（CPS）的延续进行编译，用于分析系统中至少一个问题的后续观察事件的根本原因。

公开(公告)号：US20110196964A1

公开(公告)日：2011-08-11

申请号：US13123644

申请日：2008-10-14

申请人： Srikanth Natarajan ,  Praveen Yalagandul ,  Bob Bethke ,  Puneet Sharma ,  Sujata Banerjee

发明人： Srikanth Natarajan ,  Praveen Yalagandul ,  Bob Bethke ,  Puneet Sharma ,  Sujata Banerjee

IPC分类号： G06F15/173

CPC分类号： H04L41/0681 ,  H04L41/0604 ,  H04L43/16 ,  H04L63/0227 ,  H04L63/1416

摘要： A network system and associated operating methods manage event storms. The network system comprises an event analysis and control engine that detects and manages events occurring on a network. The event analysis and control engine receives events from a plurality of agents, and analyzes the events according to policies specified in a policies templates database. The event analysis and control engine processes raw network packets directly with less than full packet parsing to generate a filtered stream of events based on the analysis. The event analysis and control engine propagates the filtered stream of events to a monitoring system.

摘要翻译： 一个网络系统和相关的操作方法来管理事件风暴。 网络系统包括事件分析和控制引擎，用于检测和管理网络上发生的事件。 事件分析和控制引擎从多个代理接收事件，并根据策略模板数据库中指定的策略来分析事件。 事件分析和控制引擎直接使用小于全分组解析来处理原始网络数据包，以基于分析生成过滤的事件流。 事件分析和控制引擎将过滤的事件流传播到监控系统。

公开(公告)号：US20090183030A1

公开(公告)日：2009-07-16

申请号：US12250887

申请日：2008-10-14

申请人： Bob Bethke ,  Srikanth Natarajan

发明人： Bob Bethke ,  Srikanth Natarajan

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06F11/0709

摘要： Managing a root cause analysis and outputting an identified root cause, for use in a system comprising a plurality of inter-related elements wherein at least some of the elements experience one or more anomalous states, comprising receiving initial indicators of system element states symptomatic of anomalous element operation, selecting an episode expiration time based on the received initial indicators, receiving additional such indicators, correlating the indicators received prior to the episode expiration time based on pre-defined relationships between the system elements, generating possible causes of the anomalous element states consistent with the received indicators and the pre-defined relationships, asserting possible causes as actual causes, identifying an actual cause as a root cause, and outputting the root cause.

摘要翻译： 管理根本原因分析并输出识别的根本原因，用于包括多个相关元件的系统，其中至少一些元件经历一个或多个异常状态，包括接收异常的症状的系统元件状态的初始指示符 基于所接收到的初始指示符来选择事件到期时间，接收另外的这样的指示符，基于系统元素之间的预定义关系来相关于事件发生时间之前接收的指示符，从而产生异常元素状态的可能原因一致 接收到的指示符和预定义的关系，将可能的原因确定为实际原因，将实际原因标识为根本原因，并输出根本原因。

公开(公告)号：US08180718B2

公开(公告)日：2012-05-15

申请号：US12239751

申请日：2008-09-27

申请人： Bob Bethke ,  Srikanth Natarajan

发明人： Bob Bethke ,  Srikanth Natarajan

IPC分类号： G06F17/00 ,  G01R31/00

CPC分类号： G06F11/3604

摘要： An engine for performing root cause analysis on a system comprising a plurality of elements in a modeled domain, the engine comprising a module loader and parser for loading modules of computer code containing computer language statements modeling elements of the system, including one or more of model type definitions, conditions, causal rules, and continuations; and for parsing the computer language statements; a storage for storing the parsed computer language statements; a receiver for receiving conditions representing state changes of system elements, accessing the storage, and determining one or more parsed computer language statements to apply to the received conditions; a hypothesis generator for instantiating one or more hypotheses of potential causes of each received condition consistent with the received conditions and the parsed computer language statements; a blackboard for receiving the instantiated hypotheses, and determining a root cause of the received conditions based on the hypotheses consistent with the received conditions and the parsed computer language statements; and an output for outputting the determined root cause.

摘要翻译： 一种用于在包括建模域中的多个元素的系统上执行根本原因分析的引擎，所述引擎包括用于加载包含所述系统的建模元素的计算机语言语句建模元素的计算机代码的模块的模块加载器和解析器，所述计算机代码包括一个或多个模型 类型定义，条件，因果规则和延续; 并用于解析计算机语言语句; 用于存储解析的计算机语言语句的存储器; 接收器，用于接收表示系统元件的状态变化，访问存储器以及确定一个或多个解析的计算机语言语句以适用于所接收的条件的条件; 一个假设生成器，用于实例化一个或多个与接收的条件和解析的计算机语言语句一致的接收到的条件的潜在原因的假设; 用于接收实例化假设的黑板，以及基于与接收到的条件和解析的计算机语言语句一致的假设来确定接收到的条件的根本原因; 以及用于输出确定的根本原因的输出。

公开(公告)号：US20090182698A1

公开(公告)日：2009-07-16

申请号：US12239755

申请日：2008-09-27

申请人： Bob BETHKE ,  Srikanth NATARAJAN

发明人： Bob BETHKE ,  Srikanth NATARAJAN

IPC分类号： G06N5/00

CPC分类号： G06N5/04

摘要： A method of compiling causal rules into continuations for use in root cause analysis of a system comprising a plurality of inter-related elements, comprising defining observable events occurring on system elements; defining at least one of a cause and a result of each of the events; defining causal rules, each rule describing a causal relationship between an event and one of its cause and its result; and compiling the causal relationships as continuations in a continuation passing style (CPS) for use in analyzing the root cause of subsequent observed events symptomatic of at least one problem on the system.

摘要翻译： 一种将因果规则编译成连续性以用于包括多个相关元素的系统的根本原因分析的方法，包括定义在系统元件上发生的可观察事件; 定义每个事件的原因和结果中的至少一个; 定义因果规则，每个规则描述事件与其原因之间的因果关系及其结果; 并将因果关系作为继续传递风格（CPS）的延续进行编译，用于分析系统中至少一个问题的后续观察事件的根本原因。