公开(公告)号：US10592308B2

公开(公告)日：2020-03-17

申请号：US15569206

申请日：2015-04-30

Applicant: ENTIT Software LLC

Inventor： Fernando Vizer ,  Noam Fraenkel ,  Yair Horovitz

IPC: G06F9/54 ,  G06F16/28 ,  G06F11/34 ,  G06F17/40 ,  G06F11/30 ,  G06F11/07 ,  G06F11/32

Abstract: According to an example, aggregation based event identification may include aggregating each of a plurality of source events by an event type of event types that represent dusters of the source events and/or a host of a source event of the source events to generate a reduced number of the source events. Aggregation based event identification may further include analyzing a characteristic for each of the reduced number of the source events, and assigning, based on the analysis of the characteristic for each of the reduced number of the source events, a characteristic weight to each of the reduced number of the source events. Further, aggregation based event identification may include aggregating the characteristic weights for each of the reduced number of the source events to determine an aggregated event issue weight for each of the reduced number of the source events.

公开(公告)号：US10516578B2

公开(公告)日：2019-12-24

申请号：US15558659

申请日：2015-03-31

Applicant: ENTIT Software LLC

Inventor： Noam Fraenkel ,  Doron Shaked ,  Maya Cohen Harel

IPC: G06F15/173 ,  H04L12/24

Abstract: In a method for inferring a topology of components in a network, at least one operation parameter is provided for each of a plurality of components in a network, and a similarity measure is computed between at least two of said components based on values of said operation parameters. Based on said similarity measure, it is determined whether said two components are topologically connected, wherein said similarity measure is computed in terms of a normalized mutual information between said operation parameters pertaining to said two components.

公开(公告)号：US20180107528A1

公开(公告)日：2018-04-19

申请号：US15569206

申请日：2015-04-30

Applicant: ENTIT Software LLC

Inventor： Fernando Vizer ,  Noam Fraenkel ,  Yair Horovitz

IPC: G06F9/54 ,  G06F11/07 ,  G06F11/34

Abstract: According to an example, aggregation based event identification may include aggregating each of a plurality of source events by an event type of event types that represent dusters of the source events and/or a host of a source event of the source events to generate a reduced number of the source events. Aggregation based event identification may further include analyzing a characteristic for each of the reduced number of the source events, and assigning, based on the analysis of the characteristic for each of the reduced number of the source events, a characteristic weight to each of the reduced number of the source events. Further, aggregation based event identification may include aggregating the characteristic weights for each of the reduced number of the source events to determine an aggregated event issue weight for each of the reduced number of the source events.