Method and system for performing root cause analysis
    1.
    发明授权
    Method and system for performing root cause analysis 有权
    执行根本原因分析的方法和系统

    公开(公告)号:US08583581B2

    公开(公告)日:2013-11-12

    申请号:US13347368

    申请日:2012-01-10

    IPC分类号: G06F17/00 G06N5/02

    摘要: A root cause analysis engine uses event survival times and gradual deletion of events to improve analysis accuracy and reduce the number of required calculations. Certainty factors of relevant rules are recalculated every time notification of an event is received. The calculation results are held in a rule memory in the analysis engine. Each event has a survival time, and when the time has expired, that event is deleted from the rule memory. Events held in the rule memory can be deleted without affecting other events held in the rule memory. The analysis engine can then re-calculate the certainty factor of each rule by only performing the re-calculation with respect to affected rules that are related with the deleted event. The calculation cost can be reduced because analysis engine processes events incrementally or decrementally.

    摘要翻译: 根本原因分析引擎使用事件生存时间和逐渐删除事件来提高分析准确性并减少所需计算的数量。 每次收到事件的通知时,重新计算相关规则的确定性因素。 计算结果保存在分析引擎的规则存储器中。 每个事件都有生存时间,当时间到期时,该事件将从规则内存中删除。 在规则存储器中保存的事件可以被删除,而不会影响规则存储器中保存的其他事件。 然后,分析引擎可以通过仅针对与删除的事件相关的受影响的规则执行重新计算来重新计算每个规则的确定性因子。 计算成本可以减少,因为分析引擎会逐渐或者递减地处理事件。

    Methods and systems for performing root cause analysis
    2.
    发明申请
    Methods and systems for performing root cause analysis 有权
    执行根本原因分析的方法和系统

    公开(公告)号:US20090313198A1

    公开(公告)日:2009-12-17

    申请号:US12213257

    申请日:2008-06-17

    IPC分类号: G06N5/02

    摘要: A root cause analysis engine uses event durations and gradual deletion of events to improve analysis accuracy and reduce the number of required calculations. Matching ratios of relevant rules are recalculated every time notification of an event is received. The calculation results are held in a rule memory in the analysis engine. Each event has a valid duration, and when the duration has expired, that event is deleted from the rule memory. Events held in the rule memory can be deleted without affecting other events held in the rule memory. The analysis engine can then re-calculate the matching ratio of each rule by only performing the re-calculation with respect to affected rules related to the deleted event. The calculation cost can be reduced because analysis engine processes events incrementally or decrementally. Analysis engine can determine the most possible conclusion even if one or more condition elements were not true.

    摘要翻译: 根本原因分析引擎使用事件持续时间和逐渐删除事件,以提高分析准确性并减少所需计算的数量。 每次收到事件通知时,都会重新计算相关规则的匹配比例。 计算结果保存在分析引擎的规则存储器中。 每个事件都有有效的持续时间,当持续时间到期时,该事件将从规则存储器中删除。 在规则存储器中保存的事件可以被删除,而不会影响规则存储器中保存的其他事件。 然后,分析引擎可以通过仅针对与已删除事件相关的受影响规则执行重新计算来重新计算每个规则的匹配比例。 计算成本可以减少,因为分析引擎会逐渐或者递减地处理事件。 分析引擎可以确定最可能的结论,即使一个或多个条件元素不是真的。

    Methods and systems for performing root cause analysis
    3.
    发明授权
    Methods and systems for performing root cause analysis 有权
    执行根本原因分析的方法和系统

    公开(公告)号:US08112378B2

    公开(公告)日:2012-02-07

    申请号:US12213257

    申请日:2008-06-17

    IPC分类号: G06F17/00 G06N5/02

    摘要: A root cause analysis engine uses event durations and gradual deletion of events to improve analysis accuracy and reduce the number of required calculations. Matching ratios of relevant rules are recalculated every time notification of an event is received. The calculation results are held in a rule memory in the analysis engine. Each event has a valid duration, and when the duration has expired, that event is deleted from the rule memory. Events held in the rule memory can be deleted without affecting other events held in the rule memory. The analysis engine can then re-calculate the matching ratio of each rule by only performing the re-calculation with respect to affected rules related to the deleted event. The calculation cost can be reduced because analysis engine processes events incrementally or decrementally. Analysis engine can determine the most possible conclusion even if one or more condition elements were not true.

    摘要翻译: 根本原因分析引擎使用事件持续时间和逐渐删除事件,以提高分析准确性并减少所需计算的数量。 每次收到事件通知时,都会重新计算相关规则的匹配比例。 计算结果保存在分析引擎的规则存储器中。 每个事件都有有效的持续时间,当持续时间到期时,该事件将从规则存储器中删除。 在规则存储器中保存的事件可以被删除,而不会影响规则存储器中保存的其他事件。 然后,分析引擎可以通过仅针对与已删除事件相关的受影响规则执行重新计算来重新计算每个规则的匹配比例。 计算成本可以减少,因为分析引擎会逐渐或者递减地处理事件。 分析引擎可以确定最可能的结论,即使一个或多个条件元素不是真的。

    System, method, apparatus and program for event processing
    4.
    发明申请
    System, method, apparatus and program for event processing 审中-公开
    用于事件处理的系统,方法,装置和程序

    公开(公告)号:US20070150571A1

    公开(公告)日:2007-06-28

    申请号:US11471480

    申请日:2006-06-21

    IPC分类号: G06F15/173

    CPC分类号: G06Q10/06

    摘要: An event processing system that can perform processing corresponding to event messages certainly, and improve efficiency of processing event messages.To that end, the event processing system of the present invention holds event messages, which are received owing to state transitions of an IT service system, in an event message holding unit in order of issue. Among the event messages held in the event message holding unit, the event processing system searches for an event message for which a state of the IT service system after issue of the event message in question coincides with a state of the IT service system before issue of the oldest event message in the event message holding unit. When the event processing system can retrieve the event message in question, the event processing system deletes event messages ranging from the oldest event message to the retrieved event message from the event message holding unit.

    摘要翻译: 可以肯定地执行与事件消息相对应的处理的事件处理系统,并提高处理事件消息的效率。 为此,本发明的事件处理系统保持由于IT服务系统的状态转换而被接收的事件消息在事件消息保存单元中。 在事件消息保存单元中保存的事件消息中,事件处理系统搜索在发布所述事件消息之后的IT服务系统的状态与发布之前的IT服务系统的状态一致的事件消息 事件消息保存单元中最旧的事件消息。 当事件处理系统可以检索有问题的事件消息时,事件处理系统从事件消息保存单元删除从最早的事件消息到检索到的事件消息的事件消息。

    Management apparatus and management method
    5.
    发明授权
    Management apparatus and management method 有权
    管理装置和管理方法

    公开(公告)号:US08473786B2

    公开(公告)日:2013-06-25

    申请号:US12745212

    申请日:2010-03-11

    IPC分类号: G06F11/00

    CPC分类号: G06F11/2257 G06N5/025

    摘要: A management apparatus and a management method that enable parsing processing to be executed efficiently by means of a working memory of a fixed size are proposed. One or more predefined rules are divided into one or more rule segments that comprise a condition and a conclusion that each form part of the rule, and the rule segments obtained through the division are stored in the secondary storage, and when an event notification from the information processing device is received, one or more related rule segments are selected and, by linking the selected one or more rule segments in the memory as required, a rule parsing network is constructed that indicates relationships between rules in the memory, an inference is derived on the basis of the constructed rule parsing network, and rule segments that are not readily used in inference derivation are deleted from the memory.

    摘要翻译: 提出了能够通过固定尺寸的工作存储器有效执行解析处理的管理装置和管理方法。 一个或多个预定义的规则被划分为一个或多个规则段,其包括每个形成规则的一部分的条件和结论,并且通过划分获得的规则段被存储在辅助存储器中,并且当来自 信息处理设备被接收,选择一个或多个相关规则段,并且通过根据需要链接所选存储器中的一个或多个规则段,构建指示存储器中的规则之间的关系的规则解析网络,推导推导 在构建的规则解析网络的基础上,从存储器中删除不容易用于推断推导的规则段。

    MANAGEMENT APPARATUS AND MANAGEMENT METHOD
    6.
    发明申请
    MANAGEMENT APPARATUS AND MANAGEMENT METHOD 有权
    管理装置和管理方法

    公开(公告)号:US20110314330A1

    公开(公告)日:2011-12-22

    申请号:US12745212

    申请日:2010-03-11

    IPC分类号: G06F11/07

    CPC分类号: G06F11/2257 G06N5/025

    摘要: A management apparatus and a management method that enable parsing processing to be executed efficiently by means of a working memory of a fixed size are proposed. One or more predefined rules are divided into one or more rule segments that comprise a condition and a conclusion that each form part of the rule, and the rule segments obtained through the division are stored in the secondary storage, and when an event notification from the information processing device is received, one or more related rule segments are selected and, by linking the selected one or more rule segments in the memory as required, a rule parsing network is constructed that indicates relationships between rules in the memory, an inference is derived on the basis of the constructed rule parsing network, and rule segments that are not readily used in inference derivation are deleted from the memory.

    摘要翻译: 提出了能够通过固定尺寸的工作存储器有效执行解析处理的管理装置和管理方法。 一个或多个预定义的规则被划分为一个或多个规则段,其包括每个形成规则的一部分的条件和结论,并且通过划分获得的规则段被存储在辅助存储器中,并且当来自 信息处理设备被接收,选择一个或多个相关规则段,并且通过根据需要链接所选存储器中的一个或多个规则段,构建指示存储器中的规则之间的关系的规则解析网络,推导推导 在构建的规则解析网络的基础上,从存储器中删除不容易用于推断推导的规则段。

    Performance evaluating apparatus, performance evaluating method, and program
    7.
    发明授权
    Performance evaluating apparatus, performance evaluating method, and program 有权
    性能评估装置,性能评估方法和程序

    公开(公告)号:US08099379B2

    公开(公告)日:2012-01-17

    申请号:US13102231

    申请日:2011-05-06

    IPC分类号: G06F17/00 G06N5/02

    摘要: A performance evaluating apparatus for a rule is provided, which is capable of evaluating a business value of a rule applied to the operation and management of an information system through autonomous control. The performance evaluating apparatus for a rule collects, respectively before activation processing that is prescribed by a rule and after completion of the execution of the processing, a rule execution history and a system state information indicating a state of a monitored information system that is necessary for calculation of the business value. The business value is calculated from the collected system state information and rule execution history by a given calculation formula.

    摘要翻译: 提供了一种用于规则的性能评估装置,其能够通过自主控制来评估应用于信息系统的操作和管理的规则的业务价值。 用于规则的性能评估装置分别在由规则规定的激活处理之前并且在完成执行处理之后收集规则执行历史和指示被监视的信息系统的状态的系统状态信息,该信息系统对于 计算业务价值。 业务价值由收集的系统状态信息和规则执行历史通过给定的计算公式计算。

    METHOD AND COMPUTER FOR DESIGNING FAULT CAUSE ANALYSIS RULES IN ACCORDANCE WITH ACQUIRABLE MACHINE INFORMATION
    8.
    发明申请
    METHOD AND COMPUTER FOR DESIGNING FAULT CAUSE ANALYSIS RULES IN ACCORDANCE WITH ACQUIRABLE MACHINE INFORMATION 有权
    方法和计算机根据可接受的机器信息设计故障原因分析规则

    公开(公告)号:US20110231715A1

    公开(公告)日:2011-09-22

    申请号:US12664310

    申请日:2009-10-23

    IPC分类号: G06F11/07

    CPC分类号: G06F11/079 G06F11/0727

    摘要: A management system, which manages an information processing system by identifying a cause location based on previously defined analysis rule information, displays a status that is a condition of the analysis rule information but is not receivable, based on acquirable status information of the apparatuses making up the information processing system or information about statuses received in the past.

    摘要翻译: 基于先前定义的分析规则信息,通过识别原因位置来管理信息处理系统的管理系统基于构成的设备的可获取状态信息来显示作为分析规则信息的条件但不可接收的状态 信息处理系统或过去收到的状态信息。

    Monitoring system and monitoring method
    9.
    发明授权
    Monitoring system and monitoring method 有权
    监控系统及监控方式

    公开(公告)号:US07890620B2

    公开(公告)日:2011-02-15

    申请号:US11194614

    申请日:2005-08-02

    摘要: The monitoring technology capable of reducing total monitoring cost without degrading the monitoring capability in accordance with the configuration of the large-scale service system and quickly comprehending the state of the service system after the configuration change. A monitoring system in which information processing apparatuses constituting the service system are objects to be monitored has a monitoring manager program and a plurality of monitoring agent programs, and objects to be monitored having the same performance characteristics are sorted into the same groups. In each of the groups, parties where monitoring is carried out at a short monitoring interval and parties where the monitoring is carried out at a long monitoring interval are provided. The performance of objects to be monitored in the party of the long monitoring interval is estimated from the performance of the objects to be monitored in the party of the short monitoring interval.

    摘要翻译: 监控技术能够降低总体监控成本,而不会根据大型服务体系的配置降低监控能力,并在配置更改后快速了解业务系统的状态。 构成服务系统的信息处理装置是要被监视的对象的监视系统具有监视管理程序和多个监视代理程序,并且将具有相同性能特征的被监视对象分类为相同的组。 在每个组中,提供在短监视间隔进行监视的各方以及以较长监视间隔进行监视的各方。 在长监视间隔的一方中要监视的对象的性能根据短监视间隔的一方要监视的对象的性能进行估计。

    Monitoring system and monitoring method
    10.
    发明申请
    Monitoring system and monitoring method 有权
    监控系统及监控方式

    公开(公告)号:US20060277295A1

    公开(公告)日:2006-12-07

    申请号:US11194614

    申请日:2005-08-02

    IPC分类号: G06F15/173

    摘要: The monitoring technology capable of reducing total monitoring cost without degrading the monitoring capability in accordance with the configuration of the large-scale service system and quickly comprehending the state of the service system after the configuration change. A monitoring system in which information processing apparatuses constituting the service system are objects to be monitored has a monitoring manager program and a plurality of monitoring agent programs, and objects to be monitored having the same performance characteristics are sorted into the same groups. In each of the groups, parties where monitoring is carried out at a short monitoring interval and parties where the monitoring is carried out at a long monitoring interval are provided. The performance of objects to be monitored in the party of the long monitoring interval is estimated from the performance of the objects to be monitored in the party of the short monitoring interval.

    摘要翻译: 监控技术能够降低总体监控成本,而不会根据大型服务体系的配置降低监控能力,并在配置更改后快速了解业务系统的状态。 其中构成服务系统的信息处理装置是要被监视的对象的监视系统具有监视管理程序和多个监视代理程序,并且具有相同性能特征的被监视对象被分类到相同的组中。 在每个组中,提供在短监视间隔进行监视的各方以及以较长监视间隔进行监视的各方。 在长监视间隔的一方中要监视的对象的性能根据短监视间隔的一方要监视的对象的性能进行估计。