Способ использования модели IoT-устройства для определения аномалий в работе устройства

Изобретение относится к области информационной безопасности. Технический результат заключается в реализации возможности определения аномалий в работе устройства с помощью использования модели IoT-устройства (далее - устройство). Указанный результат достигается с помощью способа использования модели IoT-устройства для определения аномалий в работе устройства, в котором определяют новое устройство; получают данные об устройстве для формирования профиля; создают свертку устройства на основании профиля; выбирают из базы данных свёрток свёртку, схожую с созданной свёрткой; если существует известная модель, то используют уже известную модель поведения устройства, связанную с выбранной свёрткой, в ином случае собирают данные в профиле устройства для создания и обучения модели устройства и последующего использования обученной модели, при этом использование модели предполагает определение аномалий в работе устройства. 22 ил., 12 табл.

ДОСТИЖЕНИЕ КОНСЕНУСА МЕЖДУ СЕТЕВЫВЫМИ УЗЛАМИ В РАСПРЕДЕЛЕННОЙ СИСТЕМЕ

Изобретение относится к области технологий передачи данных в распределенных системах. Техническим результатом является расширение арсенала средств для увеличения эффективности достижения консенсуса между множеством сетевых узлов в цепочке блоков. Технический результат предложенного технического решения достигается за счет того, что выполняются этапы, на которых выполняют прием запроса транзакции первичным узлом, отправку первичным узлом некоторого количества первых сообщений резервным узлам, прием первичным узлом вторых сообщений от резервных узлов, восстановление запроса транзакции на основе данных во вторых сообщениях посредством первичного узла, отправку третьего сообщения резервным узлам посредством первичного узла и выполнение запроса транзакции в ответ на прием предопределенного количества третьих сообщений. 6 н. и 51 з.п. ф-лы, 17 ил.

ВИЗУАЛЬНЫЕ ИНСТРУМЕНТЫ ДЛЯ АНАЛИЗА ОТКАЗОВ В РАСПРЕДЕЛЕННЫХ СИСТЕМАХ

PROCEDURE FOR THE CONTROLLING OF THE ACCESS TO DIGITAL CONTENTS AND STREAMING MEDIA

REDUNTANTE INPUT/OUTPUT MANAGEMENT UNIT, IN PARTICULAR A CHOICE OF ROUTE SYSTEM

FENCE MECHANISM FOR CLIENT ERRORS FOR THE FENCE OF NETWORK FILE SYSTEM DATA IN A HOST CLUSTER ENVIRONMENT

ERRORTOLERANT COMPUTER SYSTEM.

DEVICE FOR THE MONITORING OF ON A VIDEO INDICATOR INDICATED INFORMATION

PROCEDURE FOR THE REAL TIME MONITORING OF A COMPUTER SYSTEM FOR ITS ADMINISTRATION AND ASSISTANCE FOR ITS MAINTENANCE DURING ITS READY STATUS

Failure resistant distributed computing system

A method for providing a failover between a primary datacenter and a standby datacenter, the method comprising: detecting that a failover condition exists in the primary datacenter; stopping processing on the primary datacenter; ensuring that each database of the primary datacenter is in 5 read-only mode; ensuring that each database of the standby datacenter is in read/write mode; and redirecting communications from the primary datacenter to the standby datacenter.

Activity detection in web applications

A computing system includes a web server, client computing devices, a proxy between the web server and the client computing devices, and an analytics server. Each client computing device is operated by an end-user to access an application based on end-user events resulting in representational state transfer (REST) calls to the web server. The proxy passes through the REST calls to the web server and returns responses from the web server, with the return responses corresponding to activities being performed within the web application. The analytics server correlates the end-user events with the corresponding REST calls and return responses from the proxy for each client computing device, and uses vectorization to compare similar activities. The analytics server associates the similar activities with a quality indicator to identify anomalies within the application for corrective action to be taken.

METHODS AND APPARATUS FOR ROOT CAUSE IDENTIFICATION AND PROBLEM DETERMINATION IN DISTRIBUTED SYSTEMS

Coding method

Integrated customer interface for web based communications network management

Method and apparatus for controlling an extensible computing system

A method, system and apparatus for providing monitoring of electronic transactions

Medical device system and method having a distributed database

A medical device system (10) including a distributed database (10a to 10f); a plurality of medical devices (12) operating with the distributed database (10a to 10f); and a logic implementer (20) associated with each medical device (12), wherein each logic implementer (20) is programmed to access the distributed database (10a to 10f), so that each medical device (12) of system (10) periodically (i) delivers at least one of prescription input parameters or treatment output data to and (ii) retrieves at least one of prescription input parameters or treatment output data from each of the other medical devices (12).

SYSTEM AND METHOD FOR TAKING SEQUENCE OF DYNAMIC RECOVERY ACTIONS FROM NETWORK MANAGEMENT SYSTEM SUPPORTING SNMP PROTOCOL

The present invention relates to a system and method for enabling SNMP (Simple Network Management Protocol) based Network Management System to correlate and control sequence of recovery actions to be performed and dynamically change the recovery action sequence across various systems/platforms/devices. Disclosed is a system for taking sequence of dynamic recovery actions in network management system upon occurrence of a fault, in one aspect of the present invention. The system includes an action definition repository containing a sequence of recovery actions for the fault in a particular business scenario. The action definition repository is initialized and updated for every new scenario. The system further includes an action sequence engine being capable of reading the recovery sequence listed in the action definition repository for the fault in the particular business scenario. The action sequence engine sends a list of enhanced SNMP SET commands to agent module to enable the recovery ...

Asset health scores and uses thereof

Disclosed herein are systems, devices, and methods related to assets and asset operating conditions. In particular, examples involve defining and executing predictive models for outputting health metrics that estimate the operating health of an asset or a part thereof, analyzing health metrics to determine variables that are associated with high health metrics, and modifying the handling of abnormal-condition indicators in accordance with a prediction of a likely response to such abnormal-condition indicators, among other examples.

Information service terminal communication adapter

Identyfying a failed device in a network

Method and appartus for monitoring and controlling programs in a network

USER SELECTABLE DEFAULT ALARM SEVERITY LEVELS

A user identification is input to a system. The system uses the user identification to select a set of default alarm severity levels. An indication of the selected set of default alarm severity levels is stored in memory. When a predetermined condition occurs in one of the system's function cards, the alarm that is generated is based on the selected default alarm severity level.

CLIENT SELECTABLE SERVER-SIDE ERROR RESOLUTION

An illustrative embodiment of a computer-implemented process for client selectable server-side data error resolutions receives a request from a client to perform an action on a server, identifies a data error during performance of the action of the request and generates a response including an error description and a resolution subset for the identified error. The computer-implemented process further sends a response to the client, receives a selected resolution returned from the client, and responsive to a determination the selected resolution associated with the token returned executes on the server, executes the selected resolution, associated with the token returned, on the server to correct the data error.

ACTIVITY DETECTION IN WEB APPLICATIONS

A computing system includes a web server, client computing devices, a proxy between the web server and the client computing devices, and an analytics server. Each client computing device is operated by an end-user to access an application based on end-user events resulting in representational state transfer (REST) calls to the web server. The proxy passes through the REST calls to the web server and returns responses from the web server, with the return responses corresponding to activities being performed within the web application. The analytics server correlates the end-user events with the corresponding REST calls and return responses from the proxy for each client computing device, and uses vectorization to compare similar activities. The analytics server associates the similar activities with a quality indicator to identify anomalies within the application for corrective action to be taken.

VALIDATION OF TEST RESULTS IN NETWORK TESTING

A network testing system includes one or more test devices each including a media-specific testing module and a processing device with a network interface, wherein the processing device is configured to test a network with the media-specific testing module; one or more servers configured to receive test results from the test of the network either directly from the one or more test devices or an intermediate data source communicatively coupled to the one or more test devices; and a validator module executed on the one or more servers configured to perform automated post-processing on the test results to compare the test results to a pre-defined Method of Procedure (MOP), to auto-correct one or more errors in the test results, and to provide a report based on the comparison.

DETECTING SERVICE VULNERABILITIES IN A DISTRIBUTED COMPUTING SYSTEM

One embodiment of the present invention sets forth a technique for testing microservices in distributed computing systems. The technique includes routing a first traffic sample associated with request traffic from one or more client devices to a first instance of a first service implemented in a distributed computing system, wherein the first instance generates a first plurality of request responses in response to a first plurality of data requests included in the first traffic sample and transmits the first plurality of request responses to a second service included in the sequence of services, and routing a second traffic sample associated with the request traffic to a second instance of the first service, wherein the second instance generates a second plurality of request responses in response to a second plurality of data requests included in the second traffic sample and transmits the second plurality of request responses to the second service.

FACILITATING PRACTICAL BYZANTINE FAULT TOLERANCE BLOCKCHAIN CONSENSUS AND NODE SYNCHRONIZATION

AUTOMATED ANALYSIS OF COLLECTED FIELD DATA FOR ERROR DETECTION

Included are embodiments of a method for detecting errors in a set top terminal (STT). At least one embodiment of a method includes receiving error data related to at least one error that occurred in at least one STT and comparing the received error data to at least one signature file, the at least one signature file including a pattern related to at least one documented error. Additional embodiments of the method may also include in response to determining that the received error data does not match the pattern related to at least one documented error, creating a new signature file, the new signature file including at least one pattern associated with the received error data.

VISUAL TOOLS FOR FAILURE ANALYSIS IN DISTRIBUTED SYSTEMS

Visual tools are provided for failure analysis in distributed systems. Errors from synthetic measurements and usage data associated with a cloud based service are aggregated by a management application. The errors are processed to create a distribution that segments the errors based on components of the cloud based service. A failed component that generates a subset of the errors associated with a failure is highlighted. The failed component is one of the components of the cloud based service. The distribution is provided in a visualization to identify the failure by emphasizing the failed component with a failure information in proximity to the failed component.

REMOTE SHUTDOWN VIA FIBER

A system and method provide vital shutdown of a remote slave unit linked by a fiber optic connection to a local, checked redundant master unit with two paired computers. Each computer sends a life signal to an associated local vital supervision card (VSC) and copper to fiber converter (C/F converter) for transmission via fiber to a corresponding fiber to copper converter (F/C converter) on the slave unit, then to a corresponding remote VSC. Each local VSC controls power to a corresponding second local VSC-associated C/F converter, and each remote VSC controls power to a corresponding second remote VSC F/C converter. A VSC detecting an incorrect life signal signature removes power to the corresponding controlled converter and, optionally, to a respective local or remote I/O rack, thereby shutting down the slave unit.

AUDIO FINGERPRINT RECOGNITION APPARATUS, AUDIO FINGERPRINT RECOGNITION METHOD AND NON-TRANSITORY COMPUTER READABLE MEDIUM THEREOF

An audio fingerprint recognition apparatus, an audio fingerprint recognition method and a non-transitory computer readable medium thereof are provided. The audio fingerprint recognition apparatus stores an under-recognition audio fingerprint datum and an audio fingerprint database having a plurality of audio fingerprint data. Each audio fingerprint datum and the under-recognition audio fingerprint datum is formed of sub-fingerprint bits in a plurality of frequency bands. The audio fingerprint recognition apparatus executes the audio fingerprint recognition method including the following steps: performing a bit difference value comparison between the under-recognition audio fingerprint datum and one of the plurality of audio fingerprint data to obtain a bit error rate in each frequency band; calculating a percentage of the bit error rates in the frequency bands that are smaller than a first threshold; and labeling the compared audio fingerprint datum as a similar audio fingerprint datum ...

EXTENDED INTERFRAME SPACE (EIFS) EXEMPTIONS

Certain aspects of the present disclosure relate to selecting a deferral period after detecting an error in a received packet by an apparatus for wireless communications. The apparatus generally includes an interface configured to obtain a frame received over a medium, and a processing system configured to detect an occurrence of an error when processing the frame, determine an intended recipient of the frame based on information included in the frame, and select a deferral period, after detecting the occurrence of the error, during which the apparatus refrains from transmitting on the medium, wherein the selection is based, at least in part, on the determination.

NETWORK MANAGEMENT SYSTEM INCLUDING A USER INTERFACE USING SPEECH GENERATION AND RECOGNITION

A method for generating audio alerts is disclosed. The method includes detecting an alert condition (305), and determining a notification path associated with the alert condition (310). The method also includes constructing an audio notification message based on at least one parameter associated with the alert condition (315), and outputting the audio notification message via the notification path (325). A method for processing audio commands is also disclosed. This method includes receiving an audio command from a user and processing the audio command to derive command data. The method further includes constructing a command based on the command data, and storing the command in an object repository. Systems and computer-readable storage media for generating an audio alert and processing an audio command are also disclosed.

SYSTEMS AND METHODS FOR CONFIGURATION MANAGEMENT

Aspects of the present disclosure describe systems and methods for automatically configuring, managing, updating, and/or monitoring the configuration of various computing resources and/or network devices within a communications network, such as a telecommunications network. Configuration code may be deployed to a repository for a cluster of computing resources and one or more layers may be defined describing configurable aspects of the cluster. Subsequently, a script may be identified and executed to configure the cluster based on the configuration code.

Interactivity analyses of web resources based on reload events

Fault processing method and system and computer program product

System, method, and apparatus for resolving errors in system

A system (100) is provided including at least one monitored device (108) for collecting data for use in detecting an error in the data, a central server (114), and at least one local server (104) communicatively coupled to the at least one monitored device and the central server. The at least one local server is configured to receive the data and an indication of the error detected from the at least one monitored device, determine a solution for use in resolving the error, transmit instructions to perform the solution to the at least one monitored device, and transmit the error and the solution to the central server for storage.

Response message processing method, device and system

Embedded reactive and proactive intelligence

A network device may include logic configured to invoke proactive programs based on the expiration of a long time period within the network device, wherein the proactive programs collect data relating to operations of the network device, invoke reactive programs based on the detection of at least one of an event or expiration of a short time period, wherein the reactive programs collect, correlate and analyze data relating to the detected event or expiration of a short time period, determine a corrective action based on collected and analyzed data, and perform the determined corrective actionwithin the network device.

Method and equipment for improved retransmission

애셋 헬스 스코어들 및 그 사용

... 애셋들 및 애셋 동작 컨디션들에 관련된 시스템들, 디바이스들, 및 방법들이 본원에 개시된다. 특히, 예들은, 다른 예들 중에서, 애셋 또는 그 부품의 동작 헬스를 추정하는 헬스 메트릭들을 출력하기 위한 예측 모델들을 정의 및 실행하는 것, 높은 헬스 메트릭들과 연관되는 변수들을 결정하도록 헬스 메트릭들을 분석하는 것, 및 비정상-컨디션 표시자들의 핸들링을 이러한 비정상-컨디션 표시자들에 대한 가능성 있는 응답의 예측에 따라 수정하는 것을 수반한다.

INTELLIGENT ROLLING UPGRADE FOR DATA STORAGE SYSTEMS

Various method, system, and computer program product embodiments for facilitating upgrades in a computing storage environment are provided. In one such embodiment, one of an available plurality of rolling upgrade policies registering at least one selectable upgrade parameter for an upgrade window is selected. A node down tolerance factor is set for at least one node in the computing storage environment. The node down tolerance factor specifies a percentage of elements of the at least one node taken offline to apply the selected one of the available plurality of rolling upgrade policies during the upgrade window.

METHOD FOR FAULT RECOGNITION IN A SYSTEM OF SYSTEMS

The invention relates to a method for fault recognition in a distributed real-time computer system comprising fault containment units (FCUs), more particularly a fault-tolerant system of systems (SoS), having a global timebase, wherein the fault containment units communicate by means of messages via at least one message distribution unit, wherein a commitment time is associated with a message formed by a fault containment unit, and wherein a message distribution unit that receives a message relays the message to one or more fault containment units operating in parallel, and wherein a processing fault containment unit (VFCU) does not transmit any of its results that are influenced by one or more of the received messages to the environment of the processing fault containment unit or use them for changing the inner state of the processing fault containment unit before the commitment times associated with the received messages.

METHOD AND DEVICE FOR CONSISTENT MODIFICATION OF THE SCHEDULES IN TIME-CONTROLLED RELAYING

The invention relates to a method for dynamic modification of the schedules in a time-controlled switch for relaying time-controlled messages in a real-time computer system, wherein at least one active schedule and at least one new schedule are stored at a point in time in a switch, wherein, at a specified changeover time in the active interval of a sparse time base, the active schedule is deactivated and a new schedule is activated.

PARALLEL PROGRAMMING ERROR CONSTRUCTS

A system receives a program, allocates the program to a first software unit of execution (UE) and a second software UE, executes a first portion of the program with the first and second software UEs in parallel, and determines whether an error is detected during execution of the first portion of the program by the first and second software UEs. The system also sends a signal, between the first and second software UEs, to execute a second portion of the program when the error is detected in the first portion of the program, executes the second portion of the program with the first and second software UEs when the error is detected, and provides for display information associated with execution of the first portion and the second portion of the program by the first and second software UEs.

METHOD AND APPARATUS FOR DETECTING PERFORMANCE, AVAILABILITY AND CONTENT DEVIATIONS IN ENTERPRISE SOFTWARE APPLICATIONS

An automated method and apparatus for monitoring the performance, availability, and content deviations in cross application transactions of enterprise software applications is discussed. Specifically, the invention automatically discovers transactions of monitored applications, maps services and their interdependencies, determines baselines for services and transaction behaviors, and identifies the point of deviation from the baseline. Furthermore, the invention monitors the content and context of transactions and service functions to determine a class of application problems, and operation faults, i.e. bugs that are not considered as performance and availability problems.

CORRECTIVE ACTIONS FOR SERVERS WITH SHARED RESOURCES

A corrective action method or subsystem for providing corrective actions in a computing domain shared among multiple customers wherein different domain resources are shared by different customers, and each customer's corrective action preferences are accommodated differently according a repository of customer preferences. A database may be queried when a fault event or out-of-limits condition is detected for a given shared resource to determine which customers share the resource, determine each affected customer's response preferences, and to perform corrective actions according to those response preferences.

INTEGRATED INTERFACE FOR WEB BASED CUSTOMER CARE AND TROUBLE MANAGEMENT

A system and method for opening and tracking trouble tickets over the public Internet. A customer service management system (40) provides information included within a customer profile record to a Web enabled infrastructure (30) which is accessible by a remote customer workstation (20) having a web browser (14) and Internet access (15). The customer profile information is used to prepopulate data fields in dialogs used to open a trouble ticket. Once a trouble ticket is opened, the customer workstation (20) tracks the existing trouble tickets through a browser based graphical user interface (240). The graphical user interface (240) provides current and historical status reports of the actions taken to resolve a network event and the service organizations responsible for resolving the network event.

SYSTEM AND METHOD FOR FILTERING MESSAGES BASED ON CONTEXT

A method for reporting alert conditions is disclosed which includes defining alert filter criteria (405), identifying an alert condition (410), analyzing one or more properties of the alert condition based on the alert filter criteria (420), and determining whether to report the alert condition (425). Systems and computer-readable storage media for reporting an alert condition are also disclosed.

FAULT MODEL AND RULE BASED FAULT MANAGEMENT APPARATUS IN HOME NETWORK AND METHOD THEREOF

Provided are a fault model and rule based fault management apparatus and method for a home network. The fault management apparatus includes: a plurality of fault generation unit formed in a multilevel structure and generating fault notification when a fault is generated; a plurality of fault communication unit for transferring fault notification from one of the fault generation unit; a fault agent unit for transferring each fault notification from a plurality of the fault communication unit; and a fault diagnosis and process unit for receiving the fault notification from the fault agent unit, diagnosing a corresponding fault, and processing the corresponding fault using a fault model, a fault decision rule, and a fault process rule.

Generation of Debugging Log List in a Blade Server Environment

Methods, non-transitory storage medium, and systems for generating an aggregated list of problem conditions associated with blade servers to facilitate efficient debugging thereof. In a blade server environment, each chassis is equipped with a chassis management module and each blade in each chassis is associated with a blade management controller. A data map representing the relationships between the blade servers and the shared resources is utilized by a chassis management module to aggregate and link problem conditions sensed by any of the blade management controllers.

METHOD AND APPARATUS FOR MONITORING DATA-PROCESSING SYSTEM

A system management method in a system management apparatus for a distributed computing system having a plurality of computers, said system management method including: storing relations between a job and a job importance level of the job for ones of jobs handled by the distributed computing system; in response to a predetermined event, receiving predetermined event information and resource information relating to said predetermined event information from said distributed computing system; and in response to the predetermined event information and resource information, selecting a relation between said predetermined event and current importance level of the predetermined event, from said relations between said job and said current job importance level, and outputting information on the predetermined event and information on said current job importance level of at least one job associated with the predetermined event.

GENERATING STANDBY CLOUD VERSIONS OF A VIRTUAL MACHINE

Contents of a virtual machine of a primary storage are received at a first point in time. A full snapshot of the virtual machine is stored on a secondary storage using the received contents of the virtual machine. One or more cloud storage volumes of the virtual machine are caused to be created. Contents of the full snapshot for storage on the one or more cloud storage volumes are provided from the secondary storage. Changed data of the virtual machine of the primary storage is received at a second point in time. An incremental snapshot of the virtual machine is stored using the received changed data. The one or more cloud storage volumes are updated using the incremental snapshot of the virtual machine. An image of at least one of the cloud storage volumes is caused to be created for standby deployment of another instance of the virtual machine.

INFORMATION PROCESSING APPARATUS, METHOD, AND NON-TRANSITORY RECORDING MEDIUM

An information processing apparatus, a method, and a non-transitory recording medium. The information processing apparatus includes circuitry to acquire an operation log of a target device, generate a first vector of a distributed representation indicating the operation log, and calculate the first vector and a vector of a distributed representation based on another operation log to identify the first vector.

Generating alerts in event management systems

There is disclosed techniques for generating alerts in an event management system which comprises event management device and risk assessment device. In one example, a method comprises the following steps. There is received data in an event management device related to events associated with an asset in a network environment. The received data is filtered in order to provide an input to risk assessment device. The filtered data is forwarded to risk assessment device. A score indicative of risk based on filtered data is determined in risk assessment device. The score is forwarded to event management device and received in event management device. A score chart is generated in the event management device. The score chart includes the score and enables the prioritization of threats based on their respective scores.

Method and apparatus for dynamic configurable logging of activities in a distributed computing system

A system and method for implementing tracking of computing system activities wherein the tracking can be dynamically adjusted. The system provides a multiple level logging system having a first level for detecting message level errors and a second trace level for obtaining trace information and for filtering same to provide more details to be used for implementing corrective action. A set of filters is provide to further refine the data which is provided to a user/system administrator. The system also provides for selective activation of tracking and logging for selected subsystems, as well as the ability to vary the frequency at which the tracking is performed. The frequency of logging can be adjusted upward in response to detection of a error and can then be decreased, or the tracking selectively disabled or entirely stopped upon detection of a stop event.

Data stream processing device with reconfigurable data stream processing resources and data stream processing method

A data stream processing device includes a plurality of data providing units, a plurality of processing units, and control circuitry. The data providing units are configured to output data values received via a plurality of data inputs, respectively. The processing units are configured to generate data outputs based on the data values, respectively. The control circuitry includes a mode selection input and is configured to simultaneously provide data values of different data streams to the data inputs of the data providing units, respectively, in response to the mode selection input receiving a signal indicating a first mode, and simultaneously provide a plurality of successive groups of data values of one of the data streams to the data inputs of the data providing units, respectively, in response to the mode selection input not receiving the signal indicating the first mode.

Influence range specifying method, influence range specifying apparatus, and storage medium

A non-transitory computer-readable storage medium storing a program that causes a computer to execute a process, the process includes determining an information transmission path between two devices with a correlation in use status of resources based on system configuration information and use resource information; generating, for each of a plurality of software, an influence propagation model in which a direction from a first device to a second device is set as an influence propagation direction, when a co-occurrence probability that the second device outputs a message within a certain time after the first device outputs a message through execution of the software is equal to or greater than a threshold, based on a message log; acquiring failure information indicating a failed device; specifying an influenced device reached by tracing the information transmission path from the failed device in an influence propagation direction; and outputting information indicating the influenced device ...

SYSTEM FOR DISTRIBUTED DATA PROCESSING WITH AUTO-RECOVERY

Embodiments enable distributed data processing with automatic caching at multiple system levels by accessing a master queue of data processing work comprising a plurality of data processing jobs stored in a long term memory cache; selecting at least one of the plurality of data processing jobs from the master queue of data processing work; pushing the selected data processing jobs to an interface layer including (i) accessing the selected data processing jobs from the long term memory cache; and (ii) saving the selected data processing jobs in an interface layer cache of data processing work; and pushing at least a portion of the selected data processing jobs to a memory cache of a first user system for minimizing latency in user data processing of the pushed data processing jobs.

Workflow engine for troubleshooting user device issues

A workflow engine may be used to resolve service issues in a more expedient and effective manner. The workflow engine may select a troubleshooting flow to detect problems associated with a user device that uses communication services provided by a wireless telecommunication network. The workflow engine may determine alert notifications that are relevant to the troubleshooting operations. The workflow engine may make such a determination based on information from multiple data sources of the wireless telecommunication network. The workflow engine may further assign priority ratings to the alert notifications. Subsequently, a presentation layout may be assigned to the troubleshooting operations of the troubleshooting flow and the alert notifications by the workflow engine based on the priority ratings. The troubleshooting operation and the alert notifications are then provided for presentation on a computing device according to the presentation layout by the workflow engine.

Methods and apparatus for impact analysis and problem determination

A technique for determining an impact of a condition (e.g., service outage) of at least one subject component in a computing environment comprises the following steps/operations. First, one or more components in the computing environment which depend on the at least one subject component (e.g., dependents) are identified. Identification comprises traversing at least a portion of a model representative of an existence of one or more relationships associated with at least a portion of components of the computing environment and which is capable of accounting for a full lifecycle (e.g., including deployment, installation and runtime) associated with at least one component of the computing environment. Then, one or more procedures are performed in accordance with the one or more identified components to determine a condition status associated with each of the one or more identified components. By way of example, the inventive techniques may be applied to a distributed computing environment.

Distributed montoring in a telecommunications system

A telecommunication system and method are disclosed. The telecommunication network is comprised of a plurality of peer communication devices coupled to a control system. Each of the communication devices collects performance data on its own performance and transfers the performance data to the control system. The control system, in response to receiving the performance data, processes the performance data from the communication devices to generate a performance file that indicates the performance of each of the communication devices. The control system transfers the performance file to each of the communication devices. Responsive to receiving the performance file, each of the communication devices processes the performance file to compare its performance to the performance of the other peer communication devices. Each of the communication devices may process the performance file to improve its performance.

Diagnostic image

Diagnostic information can be stored and then collected into a large diagnostic image file upon an event, such as a prefailure condition. The diagnostic image can be compressed for emailing to a second site to allow the determination of problems with server software at the server software site.

Method for communicating a software-generated pulse waveform between two servers in a network

A method of monitoring a status condition of a first server with a second server in a server network, and also providing synchronization and messaging between the two servers, the method including: transmitting a software-generated pulse waveform from the first server to a device coupled to the first server, wherein the software-generated pulse waveform is comprises a first command corresponding to a logic level low and a second command corresponding to a logic level high; setting said device to a first state during logic level lows of said pulse waveform and to a second state during logic level highs of said pulse waveform; receiving the software-generated pulse waveform with the second server by determining when said device is in the first state and when it is in the second state; and determining when said device no longer changes from the first state to the second state. In order to provide synchronization and messaging, said pulse waveform is frequency modulated in order to communicate ...

System and method for performing remote tracking and reporting of computing system performance, usage, and security data

A computing systems data reporting system is comprised of a processing component and a reporting component. The processing component includes a configuration file and a system analysis and aggregation executable program module. The system analysis and aggregation executable module utilizes the input and output directory information from the configuration file to collect performance, usage and security data from sources such as those described above. The reporting component comprises an XML output memory component for storing aggregated data received from the executable module of the processing component. As XML data is passed to the reporting component, the XML data is transformed for publication via an Internet-based web page such that the data is viewable by interested users on a near real-time basis.

SYSTEM AND METHOD OF VISUALIZING HISTORICAL EVENT CORRELATIONS IN A DATA CENTER

Systems, methods, architectures and/or apparatus providing a visualization tool wherein an initial or simplified correlation tree includes a path between two hierarchically related objects; namely, a root cause object and an object representing an entity associated with an event of interest caused by the root cause entity, wherein the correlation tree may be incrementally increased in size and complexity in response to user input, such as via a graphical user interface, such that the user attention is focused on the specific entities and their relationships to thereby enable a user to quickly understand the various failure relationships.

Systems and methods for fault recovery in multi-tier applications

A computer-implemented method for fault recovery in multi-tier applications may include: 1) identifying a plurality of clusters, 2) identifying a multi-tier application that includes a plurality of components, each cluster within the plurality of clusters hosting a component, 3) identifying a fault of a first component within the plurality of components on a first cluster within the plurality of clusters, the fault requiring a first recovery action, 4) identifying at least one dependency relationship involving the first component and a second component within the plurality of components on a second cluster within the plurality of clusters, 5) determining, based on the fault and the dependency relationship, that the second component requires a second recovery action to ensure that the multi-tier application operates correctly, and 6) performing the second recovery action on the second component. Various other methods, systems, and computer-readable media are also disclosed.

Methods and apparatus to detect transport faults in media presentation systems

Example methods and apparatus to detect transport faults in media presentation systems are disclosed. An example method comprises decoding a media stream to form audio data and pixel data, computing a first value representative of the media stream using pixel data associated with a first set of the video frames, computing a second value representative of the media stream using pixel data associated with a second set of the video frames, computing a third value representative of first speech in a first segment of the audio data, computing a fourth value representative of second speech in a second segment of the audio data, determining a fifth value representative of a likelihood that a transport failure has affected the media stream, the fifth value determined using the first, second, third and fourth values, and comparing the fifth value to a threshold to determine whether to generate a transport failure alert.

NETWORKED DATA SYSTEM FOR DATA TRANSMISSION REMEDIATION

Systems, apparatuses, and methods for remediating the transmission of data from a sending computing device to a receiving computing device. An administrative computing device may determine data that has been transmitted and a predicted transmission path taken by the transmitted data. The administrative computing device may include or be communicatively coupled with a machine learning model. The administrative computing device may receive, from one or more computing devices involved in transmitting the transmitted data, status data corresponding to the transmitted data. The status data may include, for example, timestamps associated with the data, hash values of the data, processing information associated with the data, or the like. Based on the status data, the administrative computing device may cause one or more computing devices to take remedial actions.

Duration of alerts and scanning of large data stores

Described are techniques used in monitoring the performance, security and health of a system used in an industrial application. Agents included in the industrial network report data to an appliance or server. The appliance stores the data and determines when an alarm condition has occurred. Notifications are sent upon detecting an alarm condition. The alarm thresholds may be user defined. A threat thermostat controller determines a threat level used to control the connectivity of a network used in the industrial application.

Method and apparatus for maintaining replica sets

Provided are systems and methods for managing asynchronous replication in a distributed database environment, wherein a cluster of nodes are assigned roles for processing database requests. In one embodiment, the system provides a node with a primary role to process write operations against its database, generate an operation log reflecting the processed operations, and permit asynchronous replication of the operations to at least one secondary node. In another embodiment, the primary node is the only node configured to accept write operations. Both primary and secondary nodes can process read operations. Although in some settings read requests can be restricted to secondary nodes or the primary node. In one embodiment, the systems and methods provide for automatic failover of the primary node role, can include a consensus election protocol for identifying the next primary node. Further, the systems and methods can be configured to automatically reintegrate a failed primary node.

Scenarios based fault injection

A system determines a topology of a distributed system and determines, based on the topology, one or more injection points in the distributed system to inject failure scenarios. Each failure scenario including one or more faults and parameters for each of the faults. The system prioritizes the failure scenarios and injects a failure scenario from the prioritized failure scenarios into the distributed system via the one or more injection points. The system determines whether the injected failure scenario causes a response of the distributed system to fall below a predetermined level. The system determines resiliency of the distributed system to one or more faults in the injected failure scenario based on whether the injected failure scenario causes the response of the distributed system to fall below the predetermined level.

Optimized Network File System Client for Read-Only Exports/Mounts

A mechanism is provided in a data processing system comprising at least one processor and a memory comprising instructions which, when executed by the at least one processor, causes the at least one processor to implement a network protocol based file system client for read-only exports. The file system client receives a mount request to mount an export at a file system server. The file system client stores an access type of the mounted export. Responsive to the file system client receiving from a user a modification request to perform a modification on an object in the mounted export, the file system client sends an attribute check request to the file system server. Responsive to the file system client receiving a first read-only file system error from the file system server, the file system client sets a read-only file system error flag. Responsive to the file system client receiving a subsequent modification request to perform a modification on an object in the mounted export, the file ...

Interactive, constraint-network prognostics and diagnostics to control errors and conflicts (IPDN)

Methods for interactively preventing and detecting conflicts and errors (CEs) through prognostics and diagnostics. Centralized and Decentralized Conflict and Error Prevention and Detection (CEPD) Logic is developed for prognostics and diagnostics over three types of real-world constraint networks: random networks (RN), scale-free networks (SFN), and Bose-Einstein condensation networks (BECN). A method is provided for selecting an appropriate CEPD algorithm from a plurality of algorithms having either centralized or decentralized CEPD logic, based on analysis of the characteristics of the CEPD algorithms and the characteristics of the constraint network.

Computer System and Method for Recommending an Operating Mode of an Asset

Disclosed herein are systems, devices, and methods related to assets and asset operating conditions. In particular, examples involve determining health metrics that estimate the operating health of an asset or a part thereof, determining recommended operating modes for assets, analyzing health metrics to determine variables that are associated with high health metrics, and modifying the handling of operating conditions that normally result in triggering of abnormal-condition indicators, among other examples.

COLLABORATIVE COLLECTION OF DIAGNOSTICS DATA OF SOFTWARE PROGRAMS

A computing environment includes multiple software programs running on multiple endpoint computing machines. Each software program has associated diagnostics data. Each endpoint machine is running a diagnostics agent. The diagnostics agents are in communication with each other. A monitoring server interacting with the multiple software programs detects a malfunctioning associated with a software program running on a target endpoint, and submits a request to collect the diagnostics data of the malfunctioning software program. This collecting request is submitted to a service software program different from the malfunctioning program. The service software program may be running on a service endpoint different from the target endpoint. The requested diagnostics data is retrieved by the service software program from a diagnostics agent running on the target endpoint. The monitoring server then receives the requested diagnostics data from the service software program.

Distributed dynamic system configuration

Reliably making configuration changes to distributed systems, including receiving commands for multiple configuration changes, subdividing configuration changes into separate tasks, and performing those tasks at each node. A configuration element receives sets of configuration change commands, acknowledging them so the user need not wait before issuing additional commands. Tasks are determined, each including consistent changes to system configuration, and each including single-device tasklets. Each particular tasklet might be assigned to a particular single device, or to any single device in the system. Next tasks are performed when tasklets are complete. If tasklets are not timely performed due to nodes which are relatively unresponsive, those nodes are marked failed. When a failed node returns to responsiveness, it marks itself recovering. When a recovering node catches up, it marks itself operational. Updates by failed or recovering nodes are skipped while synchronizing with operational ...

Method, system, and apparatus for debugging networking malfunctions within network nodes

The disclosed computer-implemented method for debugging network nodes may include (1) detecting a computing event that is indicative of a networking malfunction within a network node, (2) determining, based at least in part on the computing event, one or more potential causes of the networking malfunction, (3) identifying one or more debugging templates that each define debugging steps that, when performed by a computing system, enable the computing system to determine whether the networking malfunction resulted from any of the potential causes, (4) performing a set of debugging steps defined by one of the debugging templates that corresponds to one of the potential causes, and then (5) determining, based at least in part on the set of debugging steps defined by the debugging template, that the networking malfunction resulted from the potential cause. Various other methods, systems, and apparatuses are also disclosed.

Method and apparatus for managing faults in storage system having job management function

A computer system identifies jobs affected by a fault which occurs in any device or mechanism in a storage system to control the execution of such jobs. The computer system includes a DBMS server device, a virtualization switch device, and storage device. Each of these devices holds part of data mapping information on a data mapping path from a particular DB table accessed by a job, through a logical volume for storing the table, to physical disk units for distributively storing data on the volume. The management server device acquires the part of data mapping information from each device, and integrates the data mapping information on a job-by-job basis. When any device or mechanism fails on the data mapping path, the management server device identifies jobs affected by the fault with reference to the data mapping information. The management server device also controls the execution of these jobs.

METHOD AND APPARATUS FOR GENERATION OF A TIME-BASED ONE-TIME PASSWORD FOR SESSION ENCRYPTION OF SENSOR DATA GATHERED IN LOW-PERFORMANCE AND IOT ENVIRONMENTS

A system for a time-based one-time password security system operating at a provisioning server may comprise transmitting one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor and a remotely connected internet of things sensor hub. The system may also comprise executing code instructions to associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor, associate the internet of things sensor hub with a second client key in the table, and associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. Further the first remotely generated random-string numbers may identify a first preset function for generation of a first session key used in encrypting and decrypting sensor data records.

AUTOMATIC DATA HEALING BY I/O

Provided is a method for correcting untrusted data and avoiding logical device swapping for at least one logical subsystem of at least one computer system. A processor may monitor a primary storage for one or more errors that indicate untrusted data on the primary storage. An error indicating that a data set on the primary storage is an untrusted data set may be identified. In response to the error being identified, a corresponding uncompromised version of the data set may be read from a secondary storage. The corresponding uncompromised version of the data set may be written over the untrusted data set on the primary storage.

Technique for Processing Fault Event of IT System

According to an exemplary embodiment of the present disclosure, disclosed is a computer program stored in a computer readable storage medium including encoded commands. When the computer program is executed by one or more processors of the computer system, the computer program allows the one or more processors to perform operations for generating a potential event related to an abnormal situation of an IT system. The operations include: an operation of collecting performance information data obtained by measuring values of performance indicators of a host which is a monitoring target in the IT system during a predetermined period; an operation of generating a first window with a predetermined size to be applied to the performance information data; an operation of determining a first statistical representative value of the performance information data included in the first window; an operation of generating a second window to be applied to the performance information data in which the second ...

Management device, management method, and medium storing management program

A management device includes a node information storing unit which stores, for each of plural operation devices, an device state representing whether the operation device is in a working state or in a non-working state, the device state associated with an identifier of the operation device, a fault state acquiring unit which acquires a value representing whether or not a fault exists from each of the operation devices that are in the non-working state, and an instruction unit which sends, when a number of the operation devices is smaller than a predetermined value, a work instruction to the operation device from which the value representing that no fault exists is acquired and which is in the non-working state, among the plural operation devices which make a transition to the working state when receiving the work instruction while in the non-working state.

Client in distributed computing system that monitors request time and operation time in order to detect performance problems and automatically issue alerts

A client device sends a request to a server via a network and times a request time duration while waiting for results to be received. The client further times an operation time duration substantially corresponding to a period of time that the client device is performing an operation that causes the client device to make the request. After receiving the results from the server, a processor of the client is operable to dynamically calculate a client processing time threshold at least according to a type of the operation and historic time durations for one or more previous operations performed by the client device. The processor further subtracts the request time duration from the operation time duration to thereby calculate a client processing time duration, and transmits one or more alert messages to a network operation center when the client processing time duration is greater than the client processing time threshold.

System and method for handling a failure reporting conversation

The invention is a software module configured for handling failure information from a large base of clients. The invention is configured for a four-stage network conversation between a client and a server. In the first stage, the module collects failure information and creates a string address. The string address is sent to the server, where the string address is compared to predefined string addresses. In the second stage, the client creates a record query with the failure information for the server. The record query is sent to the server and compared to predefined failure records. In the third stage, the client transfers additional failure information to the server, and the server acknowledges information transfer. In the fourth stage, the client sends a confirmation message to the server. When necessary, a predefined string address corresponding to the particular failure information is created on the server for subsequent reference by a stage one network conversation.

Instance host configuration

Methods and apparatus for instance host configuration are disclosed. A system includes a plurality of instance hosts configurable for resource instances of a network-accessible service, and control servers to manage remote configuration of the instance hosts. In response to an instance configuration request from a client, a selected control server transmits, to a selected instance host, a sequence of one or more commands. The selected instance host instantiates a remote command executor. The remote command executor initiates configuration operations corresponding to the command sequence, and terminates. The selected control server provides a response to the instance configuration request, based at least in part on results of the operations initiated by the executor.

OPERATION MANAGEMENT DEVICE, OPERATION MANAGEMENT METHOD, AND OPERATION MANAGEMENT PROGRAM

An operation management device includes: an information collection module which collects, from a managed device, first and second performance information showing a time series change in the performance information; a correlation model generation module which derives a correlation function between the first and second performance information and creates a correlation model based on the correlation function; a correlation change analysis module which judges whether or not the current first and second performance information acquired by the information collection module satisfy the relation shown by the conversion function between the first and second performance information of the correlation model within a specific error range; and a failure period extraction module which, when the first and second performance information does not satisfy the relation shown by the conversion function of the correlation model , extracts a period of that state as a failure period.

USING A CONCENTRATION RISK OF A COMPUTING RESOURCE TO DEFINE AFFINITY AND ANTI-AFFINITY WORKLOADS

In certain embodiments, a system comprises processing circuitry and memory comprising logic. The processing circuitry is operable to execute the logic whereby the system is operable to monitor a pool of shared computing resources, determine a concentration risk associated with a first computing resource in the pool, and perform an action if the concentration risk exceeds a threshold. Each computing resource within the pool of shared computing resources is capable of being allocated dynamically in order to support one or more applications. The concentration risk is based on an extent to which the one or more applications have upstream or downstream dependencies on the first computing resource. The action comprises communicating a notification to a system operator and/or initiating a remediation step configured to reduce the concentration risk associated with the first computing resource.

Intelligently responding to hardware failures so as to optimize system performance

A method, system and computer program product for intelligently responding to hardware failures so as to optimize system performance. An administrative server monitors the utilization of the hardware as well as the software components running on the hardware to assess a context of the software components running on the hardware. Upon detecting a hardware failure, the administrative server analyzes the hardware failure to determine the type of hardware failure and analyzes the properties of the workload running on the failed hardware. The administrative server then responds to the detected hardware failure based on various factors, including the type of the hardware failure, the properties of the workload running on the failed hardware and the context of the software running on the failed hardware. In this manner, by taking into consideration such factors in responding to the detected hardware failure, a more intelligent response is provided that optimizes system performance.

PREDICTING SERVICE ISSUES BY DETECTING ANOMALIES IN EVENT SIGNAL

Service issues predicted by detecting anomalies in an event signal is provided. An application such as a signal analysis application receives an event signal for analysis. The event signal includes events captured during a time period. The event signal is processed to generate a trend line. The trend line includes a best fit line transposed across averages of number of events of each data point across the time period. The number of events of an end data point may be compared to an upper confidence score and a lower confidence score associated with the end data point on the trend line. In response to detecting the number of events of the end data point exceed the upper confidence score, a notification is transmitted to a stakeholder associated with the event signal. The notification may describe a symptom associated with the number of events on the end data point.

APPARATUS AND METHOD FOR A NETWORKED POWER MANAGEMENT SYSTEM FOR SECURITY AND LIFE SAFETY APPLICATIONS

An apparatus includes a data manager and interface logic with a plurality of interface ports including at least one network interface port. The data manager and interface logic is operative to obtain digital and analog data, via the plurality of interface ports, from a plurality of digital and analog device types, where the data includes device operating parameters and alert condition notifications related to device faults or potential device failure. The data manager and interface logic is also operative to write and email a report conforming to a plurality of configurable report settings in response to occurrence of a device alert condition or a specified reporting interval, obtain updates to the device operating parameters from a remote device over the at least one network interface port, and provide the updates to corresponding devices over the plurality of interface ports.

METHOD TO INTELLIGENTLY MONITOR, DETECT AND DISPLAY SIMULTANEOUS INDEPENDENT VIDEOS ON A DISPLAY

Methods, systems, and computer readable media are implemented by a decoder associated with a STB to facilitate intelligent monitoring, detecting and displaying simultaneous independent videos on a display. A request is initiated to display a PiP window that presents a second content stream simultaneously with a first content stream. The request includes information as to input parameters and video input characteristics for each of the first and second content streams. Currently available resources, including memory and bandwidth, are monitored and upon initiation of the PiP window request a query is executed to determine if the available resources are sufficient. If yes, allocation of available resources is carried out to simultaneously display the first and second content streams. If no, an adjustment operation is carried out that modifies at least one input parameter or video input characteristic to simultaneously display content streams in optimal formats. User preferences may be considered ...

Intelligent listening system for agile delivery of cloud services

A support data generation system detects an indication of a problem within a flighted infrastructure. Based on the detected indication, a feature undergoing implementation within the flighted infrastructure is identified. The identification occurs automatically after the indication is detected. An alert comprises the detected indication and the identified feature is generated and output on a user interface.

Detecting and analyzing performance anomalies of client-server based applications

An approach is provided for detecting and analyzing an anomaly in application performance in a client-server connection via a network. A request time and an Internet Protocol (IP) address of the client are determined. Based on the request time and the IP address, log entries relevant to the request are selected. A response code, a round trip latency time (RTT) of the response, and an indication of whether the connection timed out are determined. Based on the status code, the RTT, and the indication of whether connection timed out, the anomaly is detected. Based on temporal and textual analyzes of log entries associated with the anomaly and an environment analysis that determines activity of the client, server, and network, candidate root causes of a failure that resulted in the anomaly are determined.

PARTIAL REROUTE OF TRAFFIC ONTO A BACKUP TUNNEL USING PREDICTIVE ROUTING

In one embodiment, a device predicts a failure of a first tunnel in a software-defined wide area network (SD-WAN). The device determines that no backup tunnel for the first tunnel exists in the SD-WAN that can satisfy one or more service level agreements (SLAs) of traffic on the first tunnel, were the traffic rerouted from the first tunnel onto that tunnel. The device predicts, using a machine learning model, that a backup tunnel for the first tunnel exists in the SD-WAN that can satisfy an SLA of a subset of the traffic on the first tunnel, in response to determining that no backup tunnel exists in the SD-WAN that can satisfy the one or more SLAs of the traffic on the first tunnel. The device proactively reroutes the subset of the traffic on the first tunnel onto the backup tunnel, in advance of the predicted failure of the first tunnel.

System and method for maintaining the health of a machine

Systems and methods for maintaining the health of a client machine are provided. One or more trigger specifications, each having pre-defined threshold values representative of desired parameters for optimal operation, may be associated with the client machine. Trigger specifications may be monitored, in real-time or according to a schedule, to ascertain a health status of the client machine. When a threshold value of a trigger specification is exceeded, a health-risk event may be detected on the client machine and a plug-in associated with the trigger specification may be deployed to resolve the detected health-risk event.

USING MIRROR PATH STATISTICS IN RECALLING EXTENTS TO A PRIMARY STORAGE SYSTEM AND A SECONDARY STORAGE SYSTEM FROM A THIRD STORAGE SYSTEM

Provided are a computer program product, system, and method for using mirror path statistics in recalling extents to a primary storage system and a secondary storage system from a third storage system, A recall request is received to recall extents from the third storage that were migrated from the primary storage or the secondary storage to the third storage. A determination is made as to whether mirror paths used to migrate extents from the primary storage to the secondary storage exceed a degradation criteria. Commands are sent to cause the recall extents to be recalled from the third storage to both the primary storage and the secondary storage in response to determining that the mirror paths exceed the degradation criteria.

FAULT ANALYSIS METHOD, FAULT ANALYSIS SYSTEM, AND STORAGE MEDIUM

... [Object] Proposed are a fault analysis method, a fault analysis system and a storage medium which improve the availability of a computer system. [Solution] Monitoring data is continuously acquired from a monitoring target system comprising one or more computers, and behavioral models which are obtained by modeling the behavior of the monitoring target system are created at regular or irregular intervals based on the acquired monitoring data, the respective differences between two consecutively created behavioral models are calculated and, based on the calculation result, a period in which the behavior of the monitoring target system has changed is estimated, and a user is notified of the period in which the behavior of the monitoring target system is estimated to have changed.

Method and apparatus for managing data of operation system

A server for an operation system includes a monitor to monitor a status of another server, a first storage to retain a first network configuration information, a second storage to copy the first network configuration information when an abnormality is detected in the another server, a third storage to retain a first update history information including update information of a network configuration information obtained from a client in the operation system, and an operation configuration manager to update the first network configuration information and a second network configuration information retained in the another server when the another server recovers from the abnormality. The operation configuration manager is configured to update the first network configuration information and the second network configuration information based on the first update history information and a second update history information retained in the another server.

Tenant rescue for software change processes in multi-tenant architectures

A multi-tenant system can be switched to a downtime state to implement a transition from a current state to a target state of a core software platform. During a second phase of the transition an error associated with tenant-specific content of a first customer tenant of the plurality of customer tenants of the multi-tenant system can be identified. The second phase can be suspended for the first customer tenant while continuing the second phase for a remainder of the plurality of customer tenants for which an error has not been identified. After a scheduled duration of the downtime state, the multi-tenant system can be reactivated such that the multi-tenant system includes the remainder of the plurality of customer tenants with the transition implemented and the first customer tenant either with the transition implemented if the error has been corrected or without the transition implemented if the error has not been corrected.

Communication device

A communication device includes a receiving unit, a first determining unit, and a sending unit. The receiving unit is configured to receive, from a terminal device, a plurality of input values corresponding to a plurality of setting items. The first determining unit, when the plurality of setting items includes a plurality of related items that are related to each other, is configured to determine whether input values, among the plurality of input values, corresponding to the plurality of related items are compatible. The sending unit is configured to send error data indicating an error screen toward the terminal device when the input values corresponding to the plurality of related items are incompatible, the error screen showing that at least one input value among the plurality of input values has an error.

Method and system for performing root cause analysis

A root cause analysis engine uses event survival times and gradual deletion of events to improve analysis accuracy and reduce the number of required calculations. Certainty factors of relevant rules are recalculated every time notification of an event is received. The calculation results are held in a rule memory in the analysis engine. Each event has a survival time, and when the time has expired, that event is deleted from the rule memory. Events held in the rule memory can be deleted without affecting other events held in the rule memory. The analysis engine can then re-calculate the certainty factor of each rule by only performing the re-calculation with respect to affected rules that are related with the deleted event. The calculation cost can be reduced because analysis engine processes events incrementally or decrementally.

Web service information processing method and web service compositing method and appartus using the same

Disclosed is a method and apparatus for realizing an effective service adaptation in consideration of delay factors possibly generated in combining (or compositing) already existing Web services in constituting a composite Web service. A failure or delay in executing a Web service is predicted in consideration of features (or factors) of QoS of Web services constituting a composite Web service, and a substitute Web service is executed or a speculative execution is performed to thus stably and quickly constitute a composite Web service.

System and method for root cause analysis

Systems and methods for determining the root cause of an event in a data center are presented. The system includes a data center management device coupled to a network and configured to receive an indication of the event from a physical infrastructure device via the network, determine a first generic cause model for the event by accessing an event cause model data store, determine a first event profile by adapting the first generic cause model to the data center using data center profile information stored in a data center profile data store and display a first probability that a potential cause defined by the first event profile is the root cause.

Methods, Systems, and Products for Data Backup

Methods, systems and computer program products automatically back-up data. Communication is established among a first device, a second device, and a network-based storage device. Key words associated with uniform resource locators are identified and stored in the network-based storage device. When corruption is detected of the data stored in the first device, the key words are automatically retrieved from the network-based storage device and listed in a user interface displayed at the second device.

Re-establishing push notification channels via user identifiers

Embodiments enable recovery of push notification channels via session information associated with user identifiers. A proxy service creates session information describing push notification channels (e.g., subscriptions) for a user and associates the session information with a user identifier. The session information is stored in a cloud service or other storage area separate from the proxy service. After failure of a user computing device or the proxy service, the session information is obtained via the user identifiers and the push notification channels are re-created with the session information. In some embodiments, the proxy service enables delivery of the same notification to multiple computing devices associated with the user identifier.

Fault detection and recovery as a service

The monitoring by a monitoring node of a process performed by a monitored node is often devised as a tightly coupled interaction, but such coupling may reduce the re-use of monitoring resources and processes and increase the administrative complexity of the monitoring scenario. Instead, fault detection and recovery may be designed as a non-proprietary service, wherein a set of monitored nodes, together performing a set of processes, may register for monitoring by a set of monitoring nodes. In the event of a failure of a process, or of an entire monitored node, the monitoring nodes may collaborate to initiate a restart of the processes on the same or a substitute monitored node (possibly in the state last reported by the respective processes). Additionally, failure of a monitoring node may be detected, and all monitored nodes assigned to the failed monitoring node may be reassigned to a substitute monitoring node.

Proactive failure handling in database services

Embodiments are directed to predicting the health of a computer node using health report data and to proactively handling failures in database services. In an embodiment, a computer system monitors various health indicators for multiple nodes in a database cluster. The computer system accesses stored health indicators that provide a health history for the database cluster nodes. The computer system then generates a health status based on the monitored health factors and the health history. The generated health status indicates the likelihood that the node will be healthy within a specified future time period. The computer system then leverages the generated health status to handle current or predicted failures. The computer system also presents the generated health status to a user or other entity.

Method and system for monitoring a monitoring-target process

A method and system for monitoring a monitoring-target process. A monitored server computer starts a monitoring-target process. After starting the monitoring-target process, the computer ascertains a current operating state of the monitoring-target process which includes utilizing a monitoring condition record included in a monitoring-condition registry. The monitoring-condition registry is a file or database stored in a data storage device in the computer. The monitoring condition record includes monitoring conditions controlling implementation of the monitoring-target process. The monitoring condition record includes a process label that uniquely identifies the monitoring-target process. After ascertaining the current operating state, the computer stops the monitoring-target process.

User interface for managing monitoring profiles

A graphical user interface for a virtualized computing environment that includes a plurality of host computers, each having one or more virtual machines running therein, where the virtualized computing environment is configured with one or more monitoring profiles for monitoring a status of objects included in the virtualized computing environment, where the graphical user interface includes a first section and a second section. The first section organizes the one or more monitoring profiles, where each monitoring profile includes one or more rules and each rule corresponds to an action that is performed if the rule is violated. The second section organizes a first set of rules associated with a selected monitoring profile and corresponding actions associated with each rule in the first set of rules.

Real-Time Diagnostics Pipeline for Large Scale Services

Real-time diagnostics may be provided. A plurality of data feeds may be aggregated from at least one of a plurality of nodes. Upon determining that at least one element of at least one of the data feeds meets a trigger condition, an action associated with the trigger condition may be executed.

Monitoring Service in a Distributed Platform

Techniques for enabling monitoring across one or more domains are provided. The techniques include identifying information technology resources across one or more domains, collecting information technology dependency information relating to the information technology resources identified across one or more domains, collecting monitoring data from the information technology resources identified across one or more domains, and using the dependency information to aggregate the monitoring data into one or more pre-determined metrics.

Administering Incident Pools For Event And Alert Analysis

Administering incident pools including receiving, by an incident analyzer from an incident queue, a plurality of incidents from one or more components of the distributed processing system; assigning, by the incident analyzer, each received incident to a pool of incidents; assigning, by the incident analyzer, to each incident a particular combined minimum time for inclusion in one or more pools, each particular combined minimum time corresponding to a particular incident; in response to the pool closing, determining, by the incident analyzer, for each incident in the pool whether the incident has met its combined minimum time for inclusion in one or more pools; and if the incident has been in the pool for its combined minimum time, including, by the incident analyzer, the incident in the closed pool; and if the incident has not been in the pool for its combined minimum time, including the incident in a next pool.

Method of Reporting Execution Result for SACMO and Related Communication Device

A method of reporting a result of execution of a workflow of a software and application control management object (SACMO) management object tree for a SACMO client in a service system is disclosed. The method comprises determining a node of the SACMO management object tree according to the result of the execution of the workflow; generating a message comprising an address of the node of the SACMO management object tree; and transmitting the message to a SACMO server of the service system, for reporting the result to the SACMO server.

Trace capture of successfully completed transactions for trace debugging of failed transactions

Embodiments of the present invention provide a method, system and computer program product for trace capture of successfully completed transactions for trace debugging of failed transactions. In an embodiment of the invention, a method for trace capture of successfully completed transactions for trace debugging of failed transactions is provided. The method includes storing entries in a log with information pertaining to successfully completed transactions in a transaction processing system executing in memory of a host server, detecting a failed transaction in the transaction processing system, generating a trace for the failed transaction, and providing with the generated trace an entry from the log with information pertaining to a successful completion of the failed transaction.

System and method for optimized event monitoring in a management environment

In accordance with the present disclosure, a system and method for optimizing event monitoring in a management environment is disclosed. The system may include a management system, an agent system, an intermediate management module and an event generation engine. The intermediate management module may create a device object in the management system corresponding to the agent system. The event generation engine may convert a transmission from the agent system into a pre-determined event structure and inject the event structure into the device object. The intermediate management module may then generate an alert in response to the injection of the event structure.

Method for processing data of a control unit in a data communication device

A method for processing data of a control unit in a data communication device, which has a first memory area and a second memory area, and is connected to the control unit through an interface. Data from the control unit is transmitted to the data communication device through the interface. A value is stored identically in the first memory area and in the second memory area. The data communication device tests whether a first trigger is present, and if present, storage in the first memory area is discontinued, or the trigger class of the first trigger is tested and storage in the first memory area is discontinued only in the presence of a predefined trigger class. Subsequently, values of the data are read out from the first memory area, whereby values arriving chronologically after the first trigger are stored in the second memory area by the data communication device.

Flexible event data content management for relevant event and alert analysis within a distributed processing system

Flexible event data content management for relevant event and alert analysis within a distributed processing system includes receiving, by an interface connector, a raw event from a component of the distributed processing system; analyzing custom data within the raw event to determine a location to store the custom data, the custom data in a first data format; storing extended data within the raw event in a common event data format, the extended data indicating the location of the custom data; receiving, by an event analyzer, the event; and determining whether there are custom customer rules that need the custom data; and if there are such custom customer rules, retrieving the custom data based on the extended data from the event; and applying the custom customer rules to the extended data; if there are no such custom customer rules, applying the base rules to a base portion of the event.

Server cluster and control mechanism thereof

A server cluster including a network switch and multiple server nodes is provided. The network switch is connected to an external network. Each server node performs an operation system and respectively includes a network port, a network chip and a south bridge chip. The network port is connected to the network switch via a cable. The network chip outputs a power-off signal according to a received power-off packet after the network switch is started. The south bridge chip outputs a shutdown signal to shut down the server node according to the power-off signal when the server node is turned on and the operation system is working normally.

Selected Alert Delivery In A Distributed Processing System

Methods, apparatuses, and computer program products for selected alert delivery in a distributed processing system are provided. Embodiments include receiving a plurality of events from one or more event producing components of the distributed processing system; creating, by an incident analyzer, in dependence upon the events a truth space representing events that make one or more conditional event processing rules true, the truth space including a set of truth points, each truth point including a set of events and a set of event locations; creating, by the incident analyzer, in dependence upon the truth space one or more alerts; and sending, by the incident analyzer, the alerts to at least one component of the distributed processing system.

Capturing telemetry data by dynamic language engine

At least one embodiment described herein relates to the selective capturing of script code stacks associated with exceptions thrown by script code. For unhandled exceptions, the script engine 1) captures the script code stack in a host-accessible manner in which a host that hosts the script engine may access the captured script code stack, 2) completes unwinding of the script stack, and 3) reports the captured script code stack to a host that hosts the script engine. For at least one of the handled exceptions thrown by the script code for which the script code itself handles the exception, the script code stack is not captured in the host-accessible manner. Also, the call stack property of an error object is populated at throw time, rather than creation time.

Relevant alert delivery in a distributed processing system

Methods, systems and products are provided relevant alert delivery including assigning by an event analyzer each received event to an events pool; determining by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool whether to suppress one or more of the events; identifying by the event analyzer in dependence upon event analysis rules and the events assigned to the events pool one or more alerts; sending by the event analyzer to an alert analyzer all the alerts identified by the event analyzer; assigning by the alert analyzer the identified alerts to an alerts pool; determining by the alert analyzer in dependence upon alert analysis rules and the alerts in the alert pool whether to suppress any alerts; and transmitting the unsuppressed alerts to one or more components of the distributed processing system.

Method of fencing in a cluster system

A method of fencing in a cluster system including network devices and a management network device is disclosed. Each network device may run an application program and comprises a fence device. A first network device receives a fence operation command from the management network device. The fence operation command contains information of a target network device and information of a target application. The first network device may determine a fence device on the first network device that corresponds to the fence operation command and activates the determined fence device such that the fence device performs a fence operation on the target application program according to the fence operation command.

CLIENT SELECTABLE SERVER-SIDE ERROR RESOLUTION

An illustrative embodiment of a computer-implemented process for client selectable server-side data error resolutions receives a request from a client to perform an action on a server, identifies a data error during performance of the action of the request and generates a response including an error description and a resolution subset for the identified error. The computer-implemented process further sends a response to the client, receives a selected resolution returned from the client, and responsive to a determination the selected resolution associated with the token returned executes on the server, executes the selected resolution, associated with the token returned, on the server to correct the data error. 1. A computer-implemented process for client selectable server-side data error resolutions , the computer-implemented process comprising:receiving a request from a client to perform an action on a server;identifying a data error during performance of the action of the request;generating a resolution subset of one or more resolutions for the error from a set of candidate resolutions;generating a token for each of the one or more resolutions in the resolution subset for the error;generating a response including an error description and the resolution subset for the identified error, sending the response to the client;receiving a token for the selected resolution from the client;determining whether the selected resolution associated with the token returned executes on the server; andresponsive to a determination the selected resolution associated with the token returned executes on the server, executing the selected resolution, associated with the token returned, on the server to correct the data error.2. The computer-implemented process of wherein identifying a data error during performance of the action of the request further comprises:identifying the data error related to data associated with the action of the request, wherein identification includes ...

FAULT TOLERANCE FOR COMPLEX DISTRIBUTED COMPUTING OPERATIONS

A method for enabling a distributed computing system to tolerate system faults during the execution of a client process. The method includes instantiating an execution environment relating to the client process; executing instructions within the execution environment, the instructions causing the execution environment to issue further instructions to the distributing computing system, the further instructions relating to actions to be performed with respect to data stored on the distributed computing system. An object interface proxy receives the further instructions and monitors the received to determine if the execution environment is in a desired save-state condition; and, if so, save a current state of the execution environment in a data store. 1. A method for enabling fault tolerance in a distributed computing system executing a client process , the method comprising:(a) instantiating an execution environment relating to said client process;(b) executing instructions within said execution environment, said instructions causing said execution environment to issue further instructions to said distributed computing system, said further instructions relating to actions to be performed with respect to data stored on said distributed computing system; and(c) receiving said further instructions by an object interface proxy, wherein at least one of said further instructions is a save-state instruction, which causes said object interface proxy to save a current state of said execution environment in a data store.2. The method of claim 1 , wherein said object interface proxy functions as an application programming interface for said distributed computing system.3. The method of claim 1 , further comprising the steps of:(d) determining a fault has occurred with said client process;(e) instantiating a new execution environment relating to said client process;(f) receiving a restore-state instruction by an object interface proxy indicating said client process has ...

Assigning States to Cloud Resources

Methods and systems for management of cloud computing resources are described herein. A management server for a cloud of physical computing resources may assign states to individual physical computing resources or groups of physical computing resources. The states may include a disabled state, in which only administrator access to the resources is permitted; an enabled state, in which user access to the resources is permitted; a restricted state, in which some, but not all user requests to the resources are permitted; and an unmanaged state, in which no communications between the resources and the management server are permitted.

Systems and methods for supporting inline delegation of middle-tier transaction logs to database

Systems and methods are provided for supporting transaction recovery based on inline delegation of transaction logs to a database. The system can retrieve transaction recovery information of a transaction from a persistence store, wherein the transaction recovery information is persisted on a resource manager that is associated with the persistence store during a prepare phase. Furthermore, the system can retrieve one or more in-doubt transactions from one or more participating resource managers of the transaction. Then, the system can determine whether to commit or roll back the one or more in-doubt transactions by matching the one or more in-doubt transactions to the transaction recovery information.

CHANGE MESSAGE BROADCAST ERROR DETECTION

A hardware device detects change messages broadcast within a system. The system includes the hardware device, one or more controller devices, one or more expander devices, and one or more target devices interconnected among one another. The hardware device determines whether the change messages were broadcast within the system every first period of time or less for at least a second period of time, the first period of time less than the second period of time. In response to determining that the change messages were broadcast within the system every first period of time or less for at least the second period of time, the hardware devices signals that an error has been detected. 1. A method comprising:detecting, by a hardware device within a system, a plurality of change messages broadcast within the system, the system comprising the hardware device, one or more controller devices, one or more expander devices, and one or more target devices interconnected among one another;determining, by the hardware device, whether the change messages were broadcast within the system every first period of time or less for at least a second period of time, the first period of time less than the second period of time;in response to determining that the change messages were broadcast within the system every first period of time or less for at least the second period of time, signaling by the hardware device that an error has been detected.2. The method of claim 1 , wherein each change message indicates that a change in a membership of the system has occurred claim 1 , such that one of the controller devices claim 1 , the expander devices claim 1 , and the target devices has been electrically connected or disconnected within the system.3. The method of claim 1 , wherein each target device includes one or more storage devices claim 1 ,wherein the hardware device is a switch device,wherein each target device is directly connected to one of the controller devices, to one of the expander ...

CLOUD SYSTEM AND METHOD FOR MONITORING AND HANDLING ABNORMAL STATES OF PHYSICAL MACHINE IN THE CLOUD SYSTEM

A cloud system and a method for monitoring and handling abnormal states of physical machines in the cloud system are disclosed. Each physical machine of the cloud system respectively executes a daemon program for monitoring operation states of the physical machine and providing the operation states to a management terminal in the cloud system. When the management terminal determines that any physical machine is having abnormal operation states, the management terminal provides a control instruction to the cabinet of the physical machine having abnormal operation states. The physical machine having abnormal operation states is compulsorily ejected from the cabinet. Thus, it is convenient to the administrator when replacing the physical machine having abnormal operation states onsite by shortening the time looking for the faulted physical machine. 1. A method for monitoring and handling abnormal states of physical machines in a cloud system , used among at least one management terminal and a plurality of physical machines , wherein the plurality of physical machines respectively disposed in a plurality of cabinets in a computing data center , the method for monitoring and handling abnormal states of physical machines in a cloud system including:a) retrieving an abnormal message indicating at least one the physical machine having abnormal operation states by the management terminal;b) generating a control instruction according to the abnormal message, and transmitting the control instruction to the cabinet having the physical machine by the management terminal;c) receiving the control instruction at the cabinet, and ejecting the corresponding physical machine from the cabinet according to the control instruction.2. The method for monitoring and handling abnormal states of physical machines in a cloud system of claim 1 , wherein the cabinet is respectively installed with a light emitting component on the assigned location of each physical machine claim 1 , and the ...

Node death detection by querying

Systems, methods, and other embodiments associated with detecting a node death in a clustered distributed system are described. In one embodiment, a method includes transmitting a ping message to a peer node in the network. If a reply to the ping message is not received from the peer node, a query is sent to table of port identifiers that lists ports in the cluster. In one embodiment, the query includes a port identifier associated with the peer node. The peer node is declared as inactive/dead when the query fails to locate a match in the table for the port identifier. When the query locates a match in the table for the port identifier, another ping message is periodically transmitted to the peer node.

Automated trouble ticket generation

Control over servers and partitions within a computer network may be automated to improve response to disaster events within the computer network. For example, a monitoring server may be configured to automatically monitor servers through remote communications sessions. A disaster event may be detected based on information received from the partitions and servers within the network. When a disaster event or events leading to a disaster event are detected, a trouble ticket may be generated. The trouble ticket may also generate an alert displayed to an administrator through a customized hierarchical graphical display. When the administrator is not logged in, messages may be generated to alert the administrator to the problem. The administrator may then log in remotely and respond to the alert.

Tenant Rescue for Software Change Processes in Multi-Tenant Architectures

A multi-tenant system can be switched to a downtime state to implement a transition from a current state to a target state of a core software platform. During a second phase of the transition an error associated with tenant-specific content of a first customer tenant of the plurality of customer tenants of the multi-tenant system can be identified. The second phase can be suspended for the first customer tenant while continuing the second phase for a remainder of the plurality of customer tenants for which an error has not been identified. After a scheduled duration of the downtime state, the multi-tenant system can be reactivated such that the multi-tenant system incldues the remainder of the plurality of customer tenants with the transition implemented and the first customer tenant either with the transition implemented if the error has been corrected or without the transition implemented if the error has not been corrected. 1. A computer program product comprising a non-transitory machine-readable medium storing instructions that , when executed by at least one processor , cause the at least one processor to perform operations comprising:identifying an error during a second phase of a transition of a core software platform of a multi-tenant computing system from a current state to a target state, the multi-tenant computing system providing access to a plurality of customer tenants comprising an organization-specific business configuration of the core software platform, the organization-specific business configuration for each tenant of the plurality of tenants comprising core software platform content relating to the operation of the core software platform that is common to all of the plurality of customer tenants and tenant-specific content that relates to the organization-specific business configuration and that is available to only that customer tenant, the error being associated with first tenant-specific content of a first customer tenant of the plurality of ...

Detecting anomalies in real-time in multiple time series data with automated thresholding

An approach is provided for detecting an anomaly in a processing environment. The approach includes using a processor to obtain a series of values collected within a processing interval of the processor in the processing environment. The processor normalizes this first series of values to obtain a first series of normalized values. A second series of normalized values is generated by applying a predictive filter to the first series of normalized values. A comparison score is generated from the normalized values by comparing the first series of normalized values and the second series of normalized values. The approach then determines whether the comparison score represents an anomaly relative to at least one other comparison score derived from values collected within the processing interval.

Method and system for automatically detecting and resolving infrastructure faults in cloud infrastructure

Systems and methods are provided for any party in a cloud ecosystem (cloud providers of such resources, the intermediate management software for such resources, and the end user of such resources) to detect and resolve faulty resources synchronously or asynchronously, before said faults adversely affect the users' workloads. The system requests a service or set of one or more resources within a cloud, automatically checking the infrastructure for various faults that would cause it to be non-functional, including pre-defined and user-defined checks, and resolving them before including the infrastructure in the working service cluster of resources. The system presents an API to the user that returns only functional, production-quality resources that are not in a faulty state. An API that tests and resolves bad infrastructure can be registered during the request or a preceding/subsequent API call, removing the need for the end-user to deal with various types of infrastructure faults.

Systems and methods for control reliability operations

In one embodiment, a system includes a data collection system configured to collect a data from a control system. The system further includes a configuration management system configured to manage a hardware configuration and a software configuration for the control system based on the data. The system additionally includes a rule engine configured to use the data as input and to output a health assessment by using a rule database, and a report generator configured to provide a health assessment for the control system.

CLUSTERED FILESYSTEMS FOR MIX OF TRUSTED AND UNTRUSTED NODES

A cluster of computer system nodes share direct read/write access to storage devices via a storage area network using a cluster filesystem. At least one trusted metadata server assigns a mandatory access control label as an extended attribute of each filesystem object regardless of whether required by a client node accessing the filesystem object. The mandatory access control label indicates the sensitivity and integrity of the filesystem object and is used by the trusted metadata server(s) to control access to the filesystem object by all client nodes. 1. A method for recovery of a failed node , the method comprising:interrupting threads processing messages from a failed node that are waiting for tokens to be returned;sending interrupts to one or more threads that are processing messages from the failed node and that are waiting for the token state to stabilize;sending interrupts to one or more threads that are attempting to lend tokens and that are waiting for the token state to stabilize; andsending interrupts to one or more threads forced offline because of an error and that are waiting for the token state to stabilize.2. The method of claim 1 , further comprising:determining, by the threads which have sent interrupts and that are waiting for the token state to stabilize, whether the threads are allowed to wait before being interrupted.3. The method of claim 2 , further comprising:waking one or more sleeping threads;checking the token state of the awoken threads;comparing the token state of each of the awoken threads to a previous state of the awoken thread;determining, for each respective woken thread, if the state of each respective awoken thread has changed from a previous state; andsetting each respective awoken thread having a state that has not changed in a sleep state.4. The method of claim 3 , further comprising:returning partial results to token functions for each of the respective awoken threads with an early state.5. The method of claim 4 , further ...

Method for Transmitting Messages in a Redundantly Operable Industrial Communication Network and Communication Device for the Redundantly Operable Industrial Communication Network

A method for transmitting messages in a redundantly operable communication network includes a first subnetwork with a tree topology and a second subnetwork, wherein messages are transmitted in the first subnetwork in accordance with a spanning tree protocol, communication devices associated with network nodes of the first subnetwork interchange messages containing topology information with one another in order to form a tree topology, messages are transmitted in the second subnetwork in accordance with a parallel or ring redundancy protocol, and a virtual network node which is connected to all network nodes of the second subnetwork via a respective virtual connection which is uninterruptable by an error is configured as the root network node of the first subnetwork. 1. A method for transmitting messages in a redundantly operable industrial communication network , comprising:transmitting messages in a first subnetwork having a tree topology in accordance with a spanning tree protocol, communication devices associated with network nodes of the first subnetwork interchanging messages containing topology information with one another to form a tree topology, a root network node being determined as a basic element of the tree topology by the communication devices associated with the network nodes of the first subnetwork based on the interchanged topology information, and loop-free connections being set up from the root network node to remaining network nodes of the first subnetwork;transmitting messages in a second subnetwork in accordance with a parallel or ring redundancy protocol;coupling the first and second subnetworks to one another via a plurality of communication devices;configuring a virtual network node, which is connected to all network nodes of the second subnetwork via a respective virtual connection which cannot be interrupted by an error, as a root network node of the first subnetwork;configuring topology information for the first subnetwork, which ...

DATA RECOVERY FOR FAILED MEMORY DEVICE OF MEMORY DEVICE ARRAY

Some aspects of the disclosure relate to a data storage system that includes multiple memory device storage devices. If a memory device of a memory device array fails within a first data storage device, some portions of the lost or corrupted data from the failed memory device are recovered by reading them from a second data storage device. Other portions of the lost or corrupted data from the failed memory device are recovered from parity information in the first data storage device. 1. A method for recovering lost data in a data storage system , comprising:identifying a metadata unit comprising a logical address referencing one or more instances of a data block;responsive to identifying failure of a memory device resulting in a data loss of the data block, analyzing the logical address to determine an arrangement of a first copied instance of the data block within a data storage system;selectively retrieving a first portion of the data block, according to the arrangement, by reading the first copied instance of the data block from a second storage device within the data storage system;selectively recovering a second portion of the data block from parity information in a first data storage device comprising an original instance of the data block; andrecovering the data block based upon the first portion and the second portion.2. The method of claim 1 , the logical address referencing the original instance of the data block within the first storage device.3. The method of claim 1 , the logical address referencing the first copied instance of the data block within the second data storage device.4. The method of claim 1 , the metadata unit comprising a consistency point count corresponding to a checkpoint number at which an instance of the data block was written.5. The method of claim 1 , the metadata unit comprising a generation ID identifying a physical block associated with an instance of the data block.6. The method of claim 1 , the identifying comprising: ...

Flexray network runtime error detection and containment

A FlexRay network guardian including: a resetting leading coldstart node (RLCN) detector configured to detect a RLCN failure; a deaf coldstart node (DCN) detector configured to detect a DCN failure; a babbling idiot (BI) detector configured to detect a BI failure; and a FlexRay network decoder configured to output a signal regarding the status of the FlexRay network to the RLCN detector, DCN detector, and BI detector, wherein the RLCN detector, DCN detector, and BI detector are configured to send an indication of a failure to a containment module.

Ticket consolidation for multi-tiered applications

Consolidating problem tickets for a multi-tiered application may comprise identifying a plurality of correlated virtual machines that are running one or more application components of the multi-tiered application. Problem reports may be identified that are generated by one or more of the plurality of correlated virtual machines and caused by a failure of a same single component of the multi-tiered application. The identified problem reports may be consolidated into a single ticket and placed into a ticket handling system.

Systems and Methods for Automated Memory and Thread Execution Anomaly Detection in a Computer Network

Systems and methods are provided for detecting an anomaly in a computer that is part of a population of networked computers. Snapshots are received from a plurality of computers within the population of computers, where individual snapshots include a state of assets and runtime processes of a respective computer. An asset normalization model is generated from the snapshots and serves as a baseline model for detecting an anomaly in the state of assets and runtime processes of a respective computer. A snapshot from at least one of the computers is compared to the asset normalization model in order to determine whether an anomaly is present in a state of static assets and runtime processes of the at least one of the computers.

Management system for managing computer system comprising multiple monitoring-target devices

A management system manages a computer system including multiple monitoring-target devices. A storage device of the management system stores a general rule, general plan information, unresolved information, and configuration information. A control device of the management system creates multiple expanded rules based on the general rule and the configuration information, and if an event related to any of the multiple monitoring-target devices has occurred, identifies, based on the multiple expanded rules, a first conclusion event constituting a candidate for the cause of the occurred event, creates, based on the general plan information, one or more expanded plans, which are recovery plans that can be implemented if the first conclusion event is a cause, identifies an unresolved event based on the unresolved information, identifies a risk site based on the identified unresolved event, and displays data showing the first conclusion event, expanded plan, and risk site.

Managing Incident Reports

The present disclosure describes methods, systems, and computer program products for managing incident reports can include receiving alert messages from multiple tenants and aggregating the alert messages into a reduced, correlated incident reports. For example, the method includes receiving, from a number of tenants, alert reports that represent at least one system alert incident associated with the tenants. The alert reports can be collected and analyzed for duplicate reports. The analysis for duplicate reports can include identifying a number of duplicate alert reports and correlating each identified duplicate alert reports into a correlated incident report. The correlated incident report can be aggregated into a summarized incident report for processing.

Remediating events using behaviors

Remediating events of components using behaviors via an administrator system and an administrator client. The administrator system receives an event from a component of an information technology (IT) environment. A behavior is determined at least partly from the event. The behavior is determined to be an anomalous behavior at least partly from a group of previously received events. A coefficient is calculated, via a calculation, for the anomalous behavior at least partly from a weight. The administrator system sends a description of the anomalous behavior and a group of options to the administrator client. The description is at least partly based on the calculation. The administrator system receives a severity indication from the administrator client. The weight, the calculation, and the description are updated based on the severity indication.

AUTOMATED NODE FENCING INTEGRATED WITHIN A QUORUM SERVICE OF A CLUSTER INFRASTRUCTURE

A quorum service detects liveness failures of at least two failed nodes in a domain of a cluster infrastructure layer of a cluster environment within a limited time frame and adds the at least two failed nodes to a list of nodes set to pending to be fenced by a group leader node. The quorum service determines whether the at least two failed nodes include the group leader node. The quorum service, responsive to the at least two failed nodes not including the group leader node, triggers the group leader node to trigger at least one fencing operation to fence the at least two failed nodes in the list of nodes. The quorum service, responsive to the at least two failed nodes including the group leader node, sets a new node as the group leader node and triggers the new node set as the group leader node to trigger the at least one fencing operation to fence the at least two failed nodes in the list of nodes. 1. A method for managing quorum services in a cluster infrastructure for reliable failover of shared resources , comprising:responsive to detecting, using a processor, by a quorum service, a plurality of liveness failures of at least two failed nodes from among a plurality of nodes in a domain of a cluster infrastructure layer of a cluster environment within a limited time frame, adding the at least two failed nodes to a list of nodes set to pending to be fenced by a group leader node from among the plurality of nodes;determining, by the quorum service, whether the at least two failed nodes include the group leader node;responsive to the at least two failed nodes not including the group leader node, triggering, by the quorum service, the group leader node to trigger at least one fencing operation to fence the at least two failed nodes in the list of nodes; andresponsive to the at least two failed nodes including the group leader node, setting a new node as the group leader node and triggering, by the quorum service, the new node set as the group leader node to trigger ...

Agent communication bulletin board

A data communication system comprising a first plurality of software entities, each having a respective entity identifier and a respective plurality of characteristics, and a data repository, wherein a first software entity of the first plurality of software entities instigates establishment of a first collection of data at the data repository, the first collection of data having at least one collection identifier selected from the plurality of characteristics of the first software entity, each of a second plurality of the first plurality of software entities having a respective set of the respective plurality of characteristics that matches the at least one collection identifier instigates addition of the entity identifier of the respective software entity to the first collection of data, at least one of the second plurality of software entities instigates addition of data to the first collection of data, and at least one other of the second plurality of software entities obtains a portion of the data from the first collection of data.

INFORMATION PROCESSING SYSTEM, SERVER DEVICE, INFORMATION PROCESSING METHOD, AND COMPUTER PROGRAM PRODUCT

An information processing system includes a first determining unit, a second determining unit, and a processing unit. The first determining unit determines a result indicating a second fixed state for data when a first condition is satisfied, the first condition indicating that t2 or more results of a first recommended state or a first fixed state are selected for the same data. The second determining unit determines the result indicating the first fixed state for the data when a second condition is satisfied, the second condition indicating that ti or more results indicating the second fixed state are selected for the same data. The second determining unit also determines the result indicating the first recommended state for the data when a third condition is satisfied, the third condition indicating that (b+1) or more results indicating the second fixed state are selected for the same data. 1Byzantine. An information processing system including n or more server devices (n is an integer satisfying n>2f+3b where f is an integer of 0 or larger and indicates a maximum permissible number of node faults , and b is an integer of 1 or larger and indicates a maximum permissible number of faults) , the information processing system comprising:a receiving unit configured to receive a selection result selected for data, the selection result indicating any one of a first fixed state, a first recommended state, and a second fixed state;a first determining unit configured to perform first determination processing for determining the selection result indicating the second fixed state for the data when a first condition is satisfied, the first condition indicating that t2 or more selection results indicating the first recommended state or the first fixed state are selected for the same data (t2 is an integer satisfying (n+b)/2 Подробнее

SYSTEM FOR PROJECT MANAGEMENT FROM NON-FUNCTION EVALUATION, METHOD FOR PROJECT MANAGEMENT FROM NON-FUNCTION EVALUATION, AND PROGRAM FOR PROJECT MANAGEMENT FROM NON-FUNCTION EVALUATION

Provided is a progress management technique for a project, the technique also covering a non-functional requirement of the project. A parameter required for evaluating the non-functional requirement is adjusted according to the progress of the project, and calculation is made, using the adjusted parameter, on to which extent the non-functional requirement may finally differ from a target value. 1. A project management system comprising:a storage unit configured to store information of error that may be generated between a non-functional evaluation value of a system in an unfinished stage and a non-functional requirement of the finished system, as evaluation error information with respect to each degree of progress of the project;a system model acquisition unit configured to acquire a system model of the system;a non-functional requirement acquisition unit configured to acquire the non-functional requirement of the system;a progress input unit configured to input the degree of progress of the project;a non-functional evaluation parameter input unit configured to input a non-functional evaluation parameter of the system corresponding to the degree of progress input;a non-functional evaluation parameter adjustment unit configured to adjust the input non-functional evaluation parameter with the stored evaluation error information corresponding to the input degree of progress; anda non-functional evaluation unit configured to evaluate a non-functional factor of the system at the input degree of progress based on the adjusted non-functional evaluation parameter, the acquired system model and the acquired non-functional requirement.2. The project management system according to claim 1 , whereinthe non-functional evaluation unit further configured to evaluate the non-functional factor of the system at the input degree of progress using the unadjusted non-functional evaluation parameter and the acquired system model and the non-functional requirement, and outputs a plurality ...

METHOD AND COMPUTER SYSTEM TO ALLOCATE ACTUAL MEMORY AREA FROM STORAGE POOL TO VIRTUAL VOLUME

An exemplary event analysis method generates a topology, indicating a correlation between management objects corresponding to a correlation between events defined in selected event propagation model, from configuration management information. It generates, from the selected event propagation model and the topology, a causality indicating a correlation between the causal event identifying an identifier of the management object and the type of the event, and the derivative event sequentially taking place from the causal event. It, in generating the causality, identifies the type of the management object where the derivative event takes place and the type of the event, without identifying the identifier of the management object where the derivative event takes place, when the topology for identifying the identifier of the derivative event is ungeneratable. It performs an event analysis by comparing the generated causality and the event actually taking place at the management target apparatuses. 1. A management system arranged to mange a plurality of management target apparatuses and including a computation resource and a storage resource ,wherein the storage resource includes configuration management information arranged to store configuration information related to a plurality of management objects including the plurality of management target apparatuses and a plurality of components arranged at the plurality of management target apparatuses, andwherein the storage resource includes event propagation model management information arranged to store an event propagation model indicating, using a type of the management object and a type of an event, a correlation between a causal event and a derivative event taking place in a sequential manner from the causal event,wherein the computation resource selects the event propagation model from the event propagation model management information,wherein the computation resource generates a topology, indicating a correlation ...

Electronic device and remote control system

A computer includes an SMS module that communicates with a management server apparatus via a network, a display that displays predetermined information, and a CPU that controls an operation of the display. When the SMS module receives a control command from the management server apparatus via the network, the CPU executes processing corresponding to the control command. Furthermore, the CPU transmits a notification signal including information, which indicates a state of execution of the control program, to the management server apparatus via the network. Furthermore, the CPU displays, on the display, a state indicator including information which indicates a state of execution of the control program when the notification signal cannot be transmitted to the management server apparatus via the network.

TROUBLESHOOTING METHOD BASED ON NETWORK FUNCTION VIRTUALIZATION, AND DEVICE

A troubleshooting method based on network function virtualization is provided, where the troubleshooting method may include: obtaining, by a first function management entity, fault information of a function entity; triggering, by the first function management entity, fault correlation processing according to the fault information, and formulating a troubleshooting policy according to a result of the fault correlation processing; and if the troubleshooting policy is formulated when troubleshooting time arrives, processing, by the first function management entity, a fault according to the troubleshooting policy; or if the troubleshooting policy is not formulated, processing, by the first function management entity, a fault according to a preset troubleshooting policy, where the preset troubleshooting policy is a policy formulated for a fault generated due to a reason of the function entity, so as to ensure that a service is not interrupted in a troubleshooting process, so that user experience is improved. 1. A troubleshooting method based on network function virtualization , comprising:obtaining, by a first function management entity, fault information of a function entity;triggering, by the first function management entity, fault correlation processing according to the fault information, and formulating a troubleshooting policy according to a result of the fault correlation processing; andif the troubleshooting policy is formulated when troubleshooting time arrives, processing, by the first function management entity, a fault according to the troubleshooting policy; or if the troubleshooting policy is not formulated, processing, by the first function management entity, a fault according to a preset troubleshooting policy, wherein the preset troubleshooting policy is a policy formulated for a fault generated due to a reason of the function entity.2. The method according to claim 1 , wherein:the triggering fault correlation processing and formulating a troubleshooting ...

FAILURE NOTIFICATIONS IN MULTI-NODE CLUSTERS

Examples include a system comprising a non-volatile memory, a cluster management interface, and a multi-node cluster. In some examples, the cluster management interface may monitor a system critical alert to determine if the system critical alert has been triggered. Based on the determination that it has been triggered, the cluster management interface may multicast a system failure notification. The multi-node cluster of the system has multiple nodes, each node connected to the non-volatile memory and having a processor and a processor cache. Each node of the multi-node cluster may determine if the system failure notification has been received and based on the determination that it has been received, each node may freeze execution of all processes on the process and flush the processor cache to the non-volatile memory. 1. A system comprising:a non-volatile memory;a cluster management interface to monitor a system critical alert to determine if the system critical alert has been triggered and based on a determination that the system critical alert has been triggered, multicast a system failure notification;a multi-node cluster having multiple nodes, wherein each node of the multi-node cluster is connected to the non-volatile memory and includes a processor and a processor cache and wherein each node determines if the system failure notification has been received from the cluster management interface and based on the determination that the system failure notification has been received, freezes execution of all processes on the processor.2. The system of claim 1 , wherein each node of the multi-node cluster further:based on the determination that the system failure notification has been received, flushes the processor cache to the non-volatile memory.determines if the node is in failure; and multicasts an outgoing node failure notification to each node of the multi-node cluster,', 'freezes all processes on the node, and', 'flushes the processor cache to the non- ...

DATA PROCESSING

Provided are a data processing method and an apparatus thereof. The method includes: when data writing is to be performed for a target Trunk Group (TKG), determining whether the target TKG is available (S); when the target TKG is available, performing data writing for the target TKG (S); and, when the target TKG is unavailable, repairing the target TKG, and performing data writing for the repaired target TKG (S). 1. A data processing method , comprising:when data writing is to be performed for a target Trunk Group (TKG), determining whether the target TKG is available, wherein in an initial state, one TKG comprises N Trunks for storing raw data and M Trunks for storing check data, any M Trunks in the N+M Trunks belong to at least K storage nodes, where N≥M, N>1, and 0≤K≤M;when the target TKG is available, performing data writing for the target TKG; andwhen the target TKG is unavailable, repairing the target TKG, and performing data writing for the repaired target TKG.2. The method according to claim 1 , wherein repairing the target TKG comprises:determining whether a first repair scheme by which the target TKG is repaired to have N+M available Trunks with any M Trunks belonging to the at least K storage nodes exists according to available Trunk resources; andwhen the first repair scheme exists, repairing the target TKG according to the first repair scheme.3. The method according to claim 2 , wherein repairing the target TKG further comprises:when the first repair scheme does not exist and K>0, letting K=K−1 and repeating the above determining block until it is determined that the first repair scheme exists or K=0; andwhen K=0, determining whether a second repair scheme by which the target TKG is repaired to have N+M available Trunks exists according to the available Trunk resources;when the second repair scheme exists, repairing the target TKG according to the second repair scheme; andwhen the second repair scheme does not exist and M>0, letting M=M−1, and ...

Application aware input/output fencing

Disclosed herein are methods, systems, and processes to perform application aware input/output (I/O) fencing operations. Performing such an application aware I/O fencing operation includes installing an identifier that identifies an instance of an application with a node on which the instance of the application is executing, on coordination points. A weight assigned to the instance of the application is determined, and the instance of the application is terminated based on the weight.

FAILURE DETECTION VIA IMPLICIT LEASES IN DISTRIBUTED COMPUTING SYSTEMS

Failure detection techniques in distributed computing systems are disclosed herein. In one embodiment, a method includes receiving an arbitration request from a first node in a computing system having a plurality of nodes interconnected by a computer network. Each of the nodes has a logic relationship with another node in the computing system. The arbitration request indicates that the first node is unable to establish a lease with a second node for a predetermined threshold period. The second node is logically related to the first node according to the logic relationship and is a default monitor for the first node for the lease. The method also includes in response to receiving the arbitration request from the first node, providing a neutral arbitration result to the first node, and allowing the first node to continue to operate without causing the second node to terminate itself. 1. A computing device , comprising:a processor; and receiving an arbitration request from a first node in a computing system having a plurality of nodes interconnected by a computer network, each of the nodes having a logic relationship with another node in the computing system, the arbitration request indicating that the first node is unable to establish a lease with a second node for a predetermined threshold period, wherein the second node is logically related to the first node according to the logic relationship and is a default monitor for the first node for the lease; and', 'in response to receiving the arbitration request from the first node, providing a neutral arbitration result to the first node within an arbitration timeout period, the neutral arbitration result allowing the first node to continue to operate without causing the second node to terminate itself., 'a memory containing instructions executable by the processor to cause the processor to perform a process including2. The computing device of wherein:the arbitration request is a first arbitration request; receiving a ...

CREATING ROBUSTNESS SCORES FOR SELECTED PORTIONS OF A COMPUTING INFRASTRUCTURE

A system for generating a robustness score for hardware components, nodes, and clusters of nodes in a computing infrastructure is provided. The system includes a memory and at least one processing device coupled to the memory. The processing device is to obtain first telemetry data associated with a selected portion of a computing infrastructure, and the selected portion includes a first node and a first hardware component. The processing device is further to obtain first metadata associated with the selected portion, input one or more telemetry inputs corresponding to the first telemetry data into a machine learning model, input one or more metadata inputs corresponding to the first metadata into the machine learning model, and generate, from the machine learning model, a first robustness score for the first hardware component representing a health state of the first hardware component. 1. One or more machine readable storage media comprising instructions stored thereon , the instructions when executed by a machine , cause the machine to:obtain first telemetry data associated with a selected portion of a computing infrastructure, the selected portion including a first node and a first hardware component;obtain first metadata associated with the selected portion;input one or more telemetry inputs corresponding to the first telemetry data into a machine learning model;input one or more metadata inputs corresponding to the first metadata into the machine learning model; andgenerate, from the machine learning model, a first robustness score for the first hardware component representing a health state of the first hardware component.2. The one or more machine readable storage media of claim 1 , wherein a first telemetry data input and a first metadata input are associated with the first hardware component.3. The one or more machine readable storage media of claim 1 , wherein a second telemetry data input and a second metadata input are associated with the first node.4. ...

REMOTE DEBUG FOR SCALED COMPUTING ENVIRONMENTS

Techniques and apparatus for remotely accessing debugging resources of a target system are described. A target system including physical compute resources, such as, processors and a chipset can be coupled to a controller remotely accessible over a network. The controller can be arranged to facilitate remote access to debug resources of the physical compute resources. The controller can be coupled to debug pin, such as, those of a debug port and arranged to assert control signals on the pins to access debug resources. The controller can also be arranged to exchange information elements with a remote debug host to include indication of debug operations and/or debug results. 1. An apparatus , comprising:a processor comprising a debug circuit; and receive, over a network, an information element including an indication of a debug operation; and', 'send a control signal to the debug circuit of the processor including an indication to implement the debug operation., 'a management controller coupled to the debug circuit of the processor, the management controller comprising logic, at least a portion of which is implemented in hardware, the logic to2. The apparatus of claim 1 , the management controller comprising logic to:receive a control signal from the debug circuit including an indication of a debug result; andsend, via the network, an information element including an indication of the debug result.3. The apparatus of claim 1 , the management controller comprising a baseboard management controller (BMC).4. The apparatus of claim 1 , comprising a chipset comprising a debug circuit claim 1 , the management controller coupled to the debug circuit of the chipset and comprising logic to:send a control signal to the debug circuit of the chipset including an indication to implement the debug operation;receive a control signal from the debug circuit of the chipset including an indication of a debug result; andsend, via the network, an information element including an indication ...

DRIVE-BASED STORAGE SCRUBBING

Apparatuses, systems and methods are disclosed herein that generally relate to distributed storage, such as for big data, distributed databases, large datasets, artificial intelligence, genomics, or any other data processing environment using that host large data sets or utilize big data hosts using local storage or storage remotely located over a network. More particularly since large scale data requires many storage devices, scrubbing storage for reliability and accuracy requires communication bandwidth and processor resources. Discussed are various ways to use known storage structure, such as LBA, to offload scrubbing overhead to storage by having storage engage in autonomous self-validation. Storage may scrub itself and identify stored data failing data integrity validation, or identify unreadable storage locations, and report errors to a distributed storage system that may reverse-lookup the affected storage location to identify, for example, a data block at that location needing correction. 1. A nonvolatile memory (NVM) communicatively coupled to a distributed storage service (DSS) , the DSS having a scrubber to validate data stored by the DSS on the nonvolatile memory , comprising:a first background task to review NVM operation to identify a first potential error; anda second background task operable to read a block of data from the NVM having a first portion containing data and a second portion containing validation information for the data, determine a reference validation for the data, and compare the reference validation to the second portion to identify a second potential error;wherein the first and second potential errors are selectively reported to the scrubber.2. The NVM of claim 1 , wherein the NVM has a format having a known validation function claim 1 , and wherein the determine the reference validation for the data is based at least in part on applying the validation function to the data of the first portion.3. The NVM of claim 1 , wherein the NVM ...

METHOD AND SYSTEM FOR HANDLING ONE OR MORE ISSUES IN A COMPUTING ENVIRONMENT

Disclosed herein is method and system for handling issues in a computing environment. An issue template is generated by mapping problem statements of the issues with system log information of the computing environment. Critical features in the issue templates are determined based on natural language analysis of the issue templates and predetermined parameters associated with the issues. Further, one or more clusters of issues are created based on semantic similarity analysis of the critical features, and finally, a correlation map of various clusters is created to dynamically identify issue resolution scripts required for handling the issues. The present method facilitates automated mapping of an issue to corresponding problem statements and action scripts, thereby eliminating manual intervention associated with classifying and handling of the issues in the computing environment. 1103100. A method for handling one or more issues () in a computing environment () , the method comprising:{'b': 101', '104', '103, 'identifying, by an issue handling system (), a problem statement () associated with the one or more issues () from one or more tickets;'}{'b': 101', '107', '103', '106', '100, 'extracting, by the issue handling system (), system log information (), related to the one or more issues (), from a system logger () associated with the computing environment ();'}{'b': 101', '109', '104', '103', '107, 'generating, by the issue handling system (), one or more issue templates () by mapping the problem statement () of each of the one or more issues () with corresponding system log information ();'}{'b': 101', '110', '109', '211, 'determining, by the issue handling system (), one or more critical features () in each of the one or more issue templates () based on one or more Natural Language Processing (NLP) components and predetermined issue parameters ();'}{'b': 101', '114', '110', '112', '103, 'creating, by the issue handling system (), one or more clusters of issues () ...

AUTO-TUNE ANOMALY DETECTION

Techniques for auto-tuning anomaly detection are provided. In one technique, training data is stored that comprises training instances, each of which comprises a severity-duration pair and a label that indicates whether the severity-duration pair represents an anomaly. A model is trained based on a first subset of the training data. A second subset of the training data is identified where each training instance includes a positive label that indicates that that training instance represents an anomaly. Based on the second subset of the training data, the model generates multiple scores, each of which corresponds to a different training instance. A minimum score is identified that ensures a particular recall rate of the model. In response to receiving a particular severity-duration pair, the model generates a particular score for the particular severity-duration pair. A notification of an anomaly is generated if the particular score is greater than the minimum score. 1. A method comprising:storing training data that comprises a plurality of training instances, each of which comprises a severity-duration pair and a label that indicates whether the severity-duration pair represents an anomaly;using one or more machine learning techniques to train a model based on a first subset of the training data;identifying a second subset of the training data, wherein each training instance in the second subset includes a positive label that indicates that said each training instance represents an anomaly;based on the second subset of the training data, generating, using the model, a plurality of scores, wherein each score corresponds to a different training instance in the second subset;identifying a minimum score of the plurality of scores that ensures a particular recall rate relative to training instances in the second subset;in response to receiving a particular severity-duration pair, using the model to generate a particular score for the particular severity-duration pair; ...

Proactive customer support system

In various example embodiments, a system and method for a proactive customer support system are provided. In some example embodiments, outgoing communications from an application server to a client device are monitored for error messages, outgoing error messages are detected, an error type for an error message is determined, an issue ticket including the error message and the error type is generated, and instructions are transmitted that cause a customer service device to display the issue ticket. In some example embodiments, the system additionally assigns a priority score and ranks open error tickets based on their respective error messages. In some example embodiments, the system provides a help message to the client device based on the error message, receives an information request from the client device, determines a reply message based on the information request, and transmits instructions to the client device to display the reply message.

Application aware input/output fencing

Disclosed herein are methods, systems, and processes to perform application aware input/output (I/O) fencing operations. A determination is made that an instance of an application is executing on a node that is part of a cluster. In response to the determination that the instance of the application is executing on the node, an identifier that associates the instance of the application and the node on which the instance of the application is executing is generated for the instance of the application. The identifier is installed on one or more coordination points.

PREDICTING COMPUTER NETWORK EQUIPMENT FAILURE

A network monitor may receive network log events and identify: a first set of network devices that have reported a target network log event, a second set of network devices that have not reported the target network log event, a first set of network log events reported by the first set of network devices, and a second set of network log events reported by the second set of network devices. The network monitor may determine which network log events are legitimate, and filter the legitimate network log events from the first set of network log events or the second set of network log events to produce a group of suspicious network log events that may be correlated with the target network log event. The network monitor may predict future suspicious network log events that may be correlated with the target network log event in order to predict equipment failures. 1. A computer-implemented method comprising:producing a first group of suspicious network log events that may be correlated with a target network log event, wherein the first group of suspicious network log events corresponds to a first product family;identifying a second group of suspicious network log events that may be correlated with the target network log event, wherein the second group of suspicious network log events corresponds to a second product family; andanalyzing the first group of suspicious network log events and the second group of suspicious network log events to identify a pattern relating to the target network log event across the first product family and the second product family.2. The method of claim 1 , wherein analyzing the first group of suspicious network log events and the second group of suspicious network log events includes:analyzing network log events of the first group of suspicious network log events and the second group of suspicious network log events that occurred within a first amount of time before the target network log event or a second amount of time after the target ...

Dynamically creating a contact address to customer support based on information associated with a computing device

In some examples, a computing device may determine that an issue (e.g., crash, restart etc.) occurred, gather context data (e.g., logs, device profile, etc.) associated with the issue, and generate a contact address to technical support based on the context data. The computing device may upload the context data to a location accessible to a server. After a user of the computing device initiates a communication to technical support using the contact address, the server may automatically route the call, based on the contact address, to a particular technician that has experience addressing the issue. The server may retrieve the context data and use machine learning to determine recommendations to address the issue. The machine learning may prioritize the recommendations and provide the context data and the prioritized recommendations to enable the particular technician to quickly resolve the issue.

INSIDER ATTACK RESISTANT SYSTEM AND METHOD FOR CLOUD SERVICES INTEGRITY CHECKING

An insider attack resistant system for providing cloud services integrity checking is disclosed. In particular, the system utilizes an automated integrity checking script and virtual machines to check the integrity of a service. The system may utilize the integrity checking script and virtual machines to execute a set of operations associated with the service so as to check the integrity of the service. When executing the set of operations, the system may only have access to the minimum level of access to peripherals that is required for each operation in the set of operations to be executed. After each operation is executed, the system may log each result for each operation, and analyze each result to determine if a failure exists for any of the operations. If a failure exists, the system may determine that a change in an expected system behavior associated with the service has occurred. 1. A system , comprising:a memory that stores instructions; and executing, during a first mode, a set of operations associated with a service to check an integrity of the service, wherein the set of operations are executed based on a minimum level of access to a peripheral that is required for at least one operation in the set of operations to be executed, wherein the minimum level of access is established by suspending access to a network port;', 'executing, when the system is in a second mode, the set of operations associated with the service based on a full level of access to the peripheral; and', 'determining whether a failure of the at least one operation in the set of operations has occurred., 'a processor that executes the instructions to perform operations, the operations comprising2. The system of claim 1 , wherein the operations further comprise determining claim 1 , if the failure of the at least one operation in the set of operations has occurred claim 1 , that a change in a system behavior associated with the service has occurred.3. The system of claim 2 , wherein the ...

Intelligent diagnostic system and method of use

A diagnostic system may utilize telemetry from a monitored system to infer information about the operation of various components systems within the monitored system. In embodiments, inferences may be drawn from a comparison of various component systems using a system of implication and exoneration. Exoneration is utilized to isolate faulty components from functioning components by comparing information between the systems, which may run in parallel. A dynamic grouping algorithm may eventually isolate faulty components and suggest the root cause as well as multiple distinct faults.

COMMUNICATION SYSTEM AND COMMUNICATION METHOD

A communication system includes a plurality of communication devices that transmits shared data in turn through wireless communication. Each of the communication devices includes a shared memory, a transmission processor, a reception processor, and a data comparator. The shared memory is capable of storing shared data for each of the communication devices. The transmission processor transmits the shared data of the communication device stored in the shared memory to a second communication device as another communication device. The reception processor monitors data as the shared data received by the second communication device from the communication device and transferred to a third communication device as another communication device other than the second communication device, and receives the data as monitored data. The data comparator compares the received monitored data with the data previously transmitted to the second communication device. 1. A communication system comprising: a shared memory that is capable of storing shared data for each of the communication devices;', 'a transmission processor that transmits the shared data of the communication device stored in the shared memory to a second communication device as another communication device;', 'a reception processor that monitors data as the shared data received by the second communication device from the communication device and transferred to a third communication device as another communication device other than the second communication device, and that receives the data as monitored data; and', 'a data comparator that compares the received monitored data with the data previously transmitted to the second communication device., 'a plurality of communication devices that transmits shared data in turn through wireless communication, each of the communication devices comprising2. The communication system according to claim 1 , wherein the data comparator compares the received monitored data with the ...

SYSTEMS AND METHODS FOR PROVIDING ERROR CORRECTION AND MANAGEMENT IN A MOBILE-BASED CROWDSOURCING PLATFORM

The present invention provides systems and methods for providing error correction and management in a mobile-based crowdsourcing platform, specifically a platform providing geolocation services. More specifically, the system of the present invention includes a plurality of remote mobile devices configured to communicate and exchange data with a cloud-based service, such as a crowdsourcing platform. The crowdsourcing platform generally provides a geolocation service based on the crowdsourcing, or polling, of users of the mobile devices so as to determine location and movement of the users within a specific environment. The system is further configured to automatically render a floor plan or layout of a location based on the user data. The system is further configured to recognize and recalibrate data errors during the collection and aggregation of the crowd-sourced data. 1. A system for providing error correction and management in a mobile-based crowdsourcing platform , the system comprising:a mobile device for user input and interaction; and receive user data from the mobile device, the user data associated with at least one of a location of the user and movement of the user within an environment over a period of time;', 'generate a layout of the environment based on the user data;', 'prompt a user of the mobile device for user input confirming at least one of the location of the user and movement of the user within the environment;', 'correlate the user input with the user data;', 'identify any discrepancies between the user input and the user data based on the correlation; and', 'revise the layout of the environment based on identified discrepancies., 'a server configured to communicate with and exchange data with the mobile device, the server comprising a processor coupled to a memory containing instructions executable by the processor to cause the server to2. The system of claim 1 , wherein the mobile device is selected from the group consisting of a tablet ...

CYBER SECURED AIRGAP REMOTE MONITORING AND DIAGNOSTICS INFRASTRUCTURE

A system and method for remotely monitoring and diagnosing a device is disclosed. Data related to the device is obtained at a first network. The obtained data is encrypted to generate an encrypted code at the first network. A copy of the encrypted code is obtained at a second network that is separated from the first network via a non-network medium such as an air gap. The copy of the encrypted code is decoded to obtain the data related to the device at the second network. The data is used at the second network to monitor and diagnose the device at the second network. 1. A method of remotely monitoring and diagnosing a device , comprising:obtaining data from the device at a first network;encrypting the data to generate an encrypted code at the first network;obtaining a copy of the encrypted code at a second network separated from the first network via a non-network medium;decoding the copy of the encrypted code to obtain a copy of the data at the second network; andmonitoring and diagnosing the device at the second network using the copy of the data.2. The method of claim 1 , further comprising displaying the encrypted code as a visual signal at a visual interface of the first network and reading the visual signal from the visual interface via an optical scanner of the second network.3. The method of claim 2 , wherein the visual signal is a QR code.4. The method of claim 1 , further comprising generating an audio signal relating to the encrypted code at an audio transmitter of the first network and receiving the audio signal at an audio receiver of the second network.5. The method of claim 1 , wherein the first network is a private network.6. The method of claim 1 , further comprising generating the encrypted code dynamically at a selected refresh rate.7. The method of claim 1 , further comprising obtaining the copy of the data using at least one of: (i) a device having a continuous network connection to the second network; (ii) a device having a non-continuous ...

ANNOTATION OF NETWORK ACTIVITY THROUGH DIFFERENT PHASES OF EXECUTION

The subject technology provides a drillable time-series heat map, which combines information of separate network element (e.g., switch, router, server or storage) and relates them together through impact zones to correlate network wide events and the potential impact on the other units in the network. The subject technology also brings together the network and its components, the distributed application(s) and a heat map controller to proactively communicate with one another to disseminate information such as failures, timeouts, new jobs, etc. For an individual job (e.g., for a distributed application), the subject technology may monitor consumption of resources during different phases of execution to provide individual job profile data that could be presented as a drillable heat map. The heat map, in this regard, nay include resource utilization heat metrics of resources such as CPU, Input/Output (I/O), memory, etc., in the heat map or graphs and presented along with network activity. 1. A system , comprising:at least one processor; and receive information for a job to be processed by a distributed application, the job being submitted from a user or other application and having at least two phases of execution for completion of the job;', 'identify a set of network elements to monitor during processing of the job, the set of network elements corresponding to nodes that are involved in at least a first phase of the job;', 'monitor, over a period of time, the set of network elements during processing of the job for the at least two phases of execution;', 'detect a failure during at least one phase of execution in at least one network element; and', 'generate job profile data indicating at least the failure., 'memory including instructions that, when executed by the at least one processor, cause the system to2. The system of claim 1 , wherein the instructions further cause the at least one processor to:indicate, in a graphical representation, the failure in the at ...

LOG OUTPUT CONTROL DEVICE, METHOD, AND COMPUTER-READABLE RECORDING MEDIUM

Provided is a log output control device that dynamically controls the log output location in a program that is requested by a client using a log history output by the client, irregular operation information that is related to irregular operation of a program that is detected from the log, and log generation information that is related to log output processing that is inserted in a program executed by the client. 1. A log output control device comprising:a log processing unit that dynamically controls a log output location in a program requested by a client, by using a history of a log output by the client, wrong operation information concerning wrong operation of the program detected from the log, and log generation information concerning a log output process inserted in the program executed by the client.2. The log output control device according to claim 1 , wherein the wrong operation information includes identification information of the log of the detected wrong operation claim 1 ,the log generation information includes location information representing a location in the program where the log output process is inserted, and includes identification information of the log corresponding to the inserted log output process, andbased on the wrong operation information and the log generation information, the log processing unit specifies an output location of the log of the detected wrong operation in the program requested by the client, and inserts a log output process at the specified location.3. The log output control device according to claim 1 , wherein the log processing unit obtains user identification information of the client claim 1 , andby using the user identification information of the client, controls an inserting process of the log output process for the program requested by the client.4. The log output control device according to claim 3 , wherein in control of the inserting process of the log output process claim 3 , in accordance with the user ...

Method for sending a plurality of data from a server to a plurality of devices

The invention is a method sending a plurality of data ( 21, 22, 23 ) from a server ( 10 ) to a fleet of devices ( 11, 12, 13 ). The method comprises the following steps: splitting said plurality of data ( 21, 22, 23 ) in a set of disjoint batches ( 31, 32 ), uniquely allocating to each of said disjoint batches a time slot, identifying a selected data belonging to the disjoint batch which is allocated to the current time slot and sending the selected data from the server ( 10 ) to one device of said fleet, if an incident occurs at the server ( 10 ), discarding from the server ( 10 ) the disjoint batch allocated to the time slot during which the incident occurred.

SOFTWARE ANALYTICS PLATFORM

A device may receive information associated with a software program executing on a device, and may generate event records based on the information associated with the software program. The device may identify pattern information associated with the event records, and may perform data analytics on the event records and the pattern information to identify one or more defects associated with the software program and to determine an expected behavior of the software program. The device may generate one or more reports based on the one or more defects associated with the software program and the expected behavior of the software program, and may provide the one or more reports. 1. A device , comprising: receive information associated with a software program executing on another device;', 'generate event records based on the information associated with the software program;', 'identify pattern information associated with the event records;', 'perform data analytics on the event records and the pattern information to identify one or more defects associated with the software program and to determine an expected behavior of the software program;', 'generate one or more reports based on the one or more defects associated with the software program and the expected behavior of the software program; and', 'provide the one or more reports., 'one or more processors to2. The device of claim 1 , where the one or more processors are further to:determine one or more recommendations to address the one or more defects associated with the software program; andprovide information indicating the one or more recommendations in the one or more reports.3. The device of claim 1 , where the one or more processors are further to:determine one or more corrections to address the one or more defects associated with the software program; andcause the other device to implement the one or more corrections in the software program.4. The device of claim 1 , where the one or more processors are further ...

OPTIMIZING APPLICATION AVAILABILITY

An approach to an optimal application configuration. The approach includes a method that includes computing, by at least one computing device, an actual application impact based on an “N” number of failing information technology (IT) infrastructure components within an application architecture. The method includes determining, by the at least one computing device, a factor in likelihood of failure of the “N” number of IT infrastructure components. The method includes determining, by the at least one computing device, a failure profile for the application architecture based on the actual application impact and the factor in likelihood of failure. 1. A method comprising:computing, by at least one computing device, an actual application impact based on an “N” number of failing information technology (IT) infrastructure components within an application architecture; anddetermining, by the at least one computing device, a factor in likelihood of failure of the “N” number of IT infrastructure components,wherein the “N” number of failing IT infrastructure components include application components that include feed servers, web load balanced servers, and application servers,the computing of the actual application impact includes analyzing a vertical application layer and calculating throughput volume in the vertical application layer, andthe calculating the throughput volume in the vertical application layer comprises subtracting a product of a previous layer throughput volume and a current level fail percentage from the previous layer throughput volume.2. The method of claim 1 , wherein the computing of the actual application impact includes analyzing the “N” number of IT infrastructure components across different layers in the application architecture.3. The method of claim 1 , further comprising determining claim 1 , by the at least one computing device claim 1 , a failure profile for the application architecture based on the actual application impact and the factor in ...

SYSTEM AND METHOD

In connection with an error event detected in an image forming apparatus, a fault diagnosis service server diagnoses the error event and obtains a diagnosis result for handling to be performed on the error event detected in the image forming apparatus. In a case where the diagnosis result indicates a plurality of candidates for handling to be performed on the error event, the fault diagnosis service server compares the plurality of candidates for handling to a result estimated by a diagnosis model with respect to the error event. In a case where the plurality of candidates for handling is different from the result estimated by the diagnosis model, the fault diagnosis service obtains partial operation information from a history of the image forming apparatus and executes machine relearning based on the obtained partial operation information with respect to a layer in a latter stage of a plurality of layers included in the diagnosis model, each layer performing a different estimation. 1. A system comprising:a storage unit configured to store a model for estimating an appropriate handling for an error event detected in a network device, the model constructed by machine learning using operation information collected from the network device and histories of handling for the network device;an obtainment unit configured to obtain, in connection with the error event detected in the network device, a diagnosis result of diagnosis in the network device for identifying handling to be performed on the error event;a comparison unit configured to, in a case where the diagnosis result indicates a plurality of candidates for handling to be performed on the error event, compare the plurality of candidates for handling the error event with a result estimated for the error event using the model; andan execution unit configured to, in a case where the plurality of candidates for handling is found by the comparing to be different from the estimated result, obtain partial operation ...

ELECTRONIC CHECKLIST

A method, computer program product, and a system where a processor(s) obtains data comprising issues and respective issue resolution plans for the issues experienced in a distributed computing system. The processor(s) cognitively analyzes the data to identify components of the distributed computing system for status evaluation and generates a script to perform a health check on the components and to automatically resolve performance issues of the components identified during the health check. The processor(s) executes the script, where for each component, the processor(s) determined if a status of the component indicates a performance issue and if not, update the data utilized in the cognitive analysis. If yes, the processor(s) attempts to resolve the status and updates the data with the results. 1. A computer-implemented method , comprising:obtaining, by one or more processors, data comprising issues and respective issue resolution plans for the issues experienced in a distributed computing system;cognitively analyzing, by the one or more processors, the data to identify components of the distributed computing system for status evaluation, wherein the identifying is based on recognizing patterns in the data through the cognitive analysis;based on identifying the components, generating, by the one or more processors, based on the cognitive analysis and on the data, a script to perform a health check on the components and to automatically resolve performance issues of the components identified during the health check; determining, by the one or more processors, by performing a health check on the component, if a status of the component indicates a performance issue;', 'based on determining that the status of the component does not indicate a performance issue, updating, by the one or more processors, a certain portion of the data utilized in the cognitive analysis, wherein the portion is relevant to one or more of the status, the procedures, or the component;', ...

ENABLING SYMPTOM VERIFICATION

Systems, products and methods for enabling symptom verification. Verifying a symptom may include eliminating repeated symptom definitions or eliminating symptoms having low accuracy. A computer system enables verification of a symptom including a rule for detecting a set of events related to a given problem. The computer system includes a symptom database which stores the symptom, a specimen database which stores a specimen including a set of events detected according to a rule of a certain symptom, and an analysis unit which analyzes the specimen stored in the specimen database using a new symptom in order to determine whether to add the new symptom to the symptom database. The present disclosure also includes a method and a computer program for enabling verification of a symptom including a rule for detecting a set of events related to a given problem. 1. A self-managing computer system for managing rules of symptoms , the computer system comprising: a symptom database which stores existing symptoms, each of the existing symptoms having a symptom definition; and', 'a specimen database which stores existing specimens, wherein the existing specimens include a first existing specimen and a second existing specimen, wherein the first existing specimen is a subset of the second existing specimen, and wherein the existing second specimen corresponds to one of the existing symptoms stored in the symptom database; and, 'computer storage storing'} analyzing the existing second specimen using the new symptom to determine whether the existing second specimen overlaps with the new symptom according to the rule of the new symptom, including determining whether the existing second specimen includes a set of events detected according to the rule of the new symptom to determine whether to add the new symptom to the symptom database; and', 'when the existing second specimen overlaps with the new symptom, presenting a notification of the accuracy of the new symptom., 'an analysis ...

METHOD AND APPARATUS FOR GENERATION OF A TIME-BASED ONE-TIME PASSWORD FOR SESSION ENCRYPTION OF SENSOR DATA GATHERED IN LOW-PERFORMANCE AND IOT ENVIRONMENTS

A system for a time-based one-time password security system operating at a provisioning server may comprise transmitting one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor and a remotely connected internet of things sensor hub. The system may also comprise executing code instructions to associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor, associate the internet of things sensor hub with a second client key in the table, and associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. Further the first remotely generated random-string numbers may identify a first preset function for generation of a first session key used in encrypting and decrypting sensor data records. 1. An information handling system of an internet of things sensor comprising: receive one or more first remotely generated random-string numbers for generation of a first time limited, one-time use password generated by a one-time password algorithm;', 'wherein the first remotely generated random-string numbers are also transmitted to an internet of things sensor hub in communication with the internet of things sensor; and', 'transmit a first encrypted sensor data record to the internet of things sensor hub;, 'a network interface adapter to generate the first time limited, one-time use password using the received one or more first remotely generated random-string numbers;', 'generate a first session key by mapping the first time limited, one-time use password to data of a fixed size according to a first preset function;', 'gather sensor data and store the sensor data in a sensor data record in a memory; and', 'generate the first encrypted sensor data record for transmission to the internet of things sensor hub by ...

ADAPTIVE PRIVATE NETWORK WITH DYNAMIC CONDUIT PROCESS

Systems and techniques, including special messages and state machines, are described that configures an intermediate site to dynamically trigger creation of and removal of a dynamic conduit between two sites based on usage that is tracked at the sites. The intermediate site providing WAN-to-WAN forwarding between the two sites, monitors throughput statistics on each local WAN link (LWL) associated with the two sites. If traffic between the two sites passes a configured first threshold or if LWL usage passes a configured second threshold, the intermediate site sends a message to the two sites to set up a dynamic conduit directly coupling the two sites. Busy lists are used to keep track of eligible site pairs. Once a dynamic conduit is set up between two sites, a grow technique tests the dynamic conduit increasing communication flows between the two sites each configured sampling period before putting the conduit in normal use. 1. A method for growing communication capacity in a dynamically created conduit between two sites , the method comprising:changing a two hop communication pattern between a site A, an intermediate site, and a site B to a dynamic conduit with a one hop communication pattern between the site A and the site B without use of the intermediate site;initiating a grow state on the dynamic conduit by setting an initial flow limit and transferring bulk data flows, originally communicated through the intermediate site, directly across the dynamic conduit between site A and site B;increasing the flow limit by a pre-specified amount each sampling cycle upon a determination that the bulk data flows transferred with minimum errors during each sampling cycle; andchanging from the grow state to a client use state after a flow upper limit has been reached.2. The method of claim 1 , wherein the sampling cycle is user set to be greater than a round trip message transfer time between the site A and the site B.3. The method of further comprising:increasing the flow ...

APPARATUS AND METHOD OF LEVERAGING SEMI-SUPERVISED MACHINE LEARNING PRINCIPALS TO PERFORM ROOT CAUSE ANALYSIS AND DERIVATION FOR REMEDIATION OF ISSUES IN A COMPUTER ENVIRONMENT

Embodiments of the innovation relate to a host device having a memory and a processor, the host device configured to determine an anomaly associated with an attribute of a computer environment resource of the computer infrastructure. The host device is configured to correlate an object associated with the attribute of the detected anomaly with a related object of the computer infrastructure. The host device is configured to determine a root cause probability for each object of the correlated objects, the root cause probability identifying a probability of the correlated object functioning as a cause of the detected anomaly. The host device is configured to output an identification of a root object associated with the anomaly based upon the identified root cause probability. 1. In a host device , a method for performing an anomaly analysis of a computer environment , comprising:determining, by the host device, an anomaly associated with an attribute of a computer environment resource of the computer infrastructure;correlating, by the host device, an object associated with the attribute of the detected anomaly with a related object of the computer infrastructure;determining, by the host device, a root cause probability for each object of the correlated objects, the root cause probability identifying a probability of the correlated object functioning as a cause of the detected anomaly; andoutputting, by the host device, an identification of a root object associated with the anomaly based upon the identified root cause probability.2. The method of claim 1 , wherein detecting the anomaly associated with the attribute of the computer infrastructure resource comprises:applying, by host device, a classification function to a set of data elements related to the attribute of the computer infrastructure resources of the computer infrastructure to define at least one group of data elements of the set of data elements; andidentifying, by host device, a data element of the set of ...

INTEREST RETURN CONTROL MESSAGE

One embodiment provides a system that facilitates processing of error-condition information associated with a content-centric network (CCN) message transmitted over a network. During operation, the system receives, by a first node, a packet that corresponds to a CCN message, where a name for the CCN message is a hierarchically structured variable length identifier (HSVLI) which comprises contiguous name components ordered from a most general level to a most specific level. Responsive to determining that the CCN message triggers an error condition, the system generates an interest return message by pre-pending a data structure to the CCN message, where the data structure indicates the error condition. The system transmits the interest return message to a second node. 1. A computer-implemented method for forwarding packets , the method comprising:receiving, by a first node, a packet that corresponds to a content-centric network (CCN) message, wherein a name for the CCN message is a hierarchically structured variable length identifier (HSVLI) which comprises contiguous name components ordered from a most general level to a most specific level;responsive to determining that the CCN message triggers an error condition, generating an interest return message by pre-pending a data structure to the CCN message, wherein the data structure indicates the error condition; andtransmitting the interest return message to a second node,thereby facilitating processing of error-condition information associated with a CCN message transmitted over a network.2. The method of claim 1 , wherein the CCN message is an interest message.3. The method of claim 2 , further comprising:receiving, by the second node, the interest return message;determining whether a pending interest table (PIT) contains an entry corresponding to the interest message received as part of the interest return message; and removing the corresponding entry from the PIT; and', 'forwarding the interest return message on a ...

SYSTEMS AND METHODS FOR PREDICTING AND DISPLAYING SITE SAFETY METRICS

Systems and methods for predicting and displaying site safety metrics are provided. Some methods can include assigning respective risk index values to each of a plurality of devices, storing the respective risk index values in a memory device, identifying respective faults of each the plurality of devices in fault, retrieving, from the memory device, the respective risk index values of each of the plurality of devices in fault, prioritizing the respective faults of each of the plurality of devices in fault based on the respective risk index values of the plurality of devices in fault, and transmitting a notification message indicative of the prioritized respective faults. 1. A method comprising:assigning respective risk index values to each of a plurality of devices;storing the respective risk index values in a memory device;identifying respective faults of each the plurality of devices in fault;retrieving, from the memory device, the respective risk index values of each of the plurality of devices in fault;prioritizing the respective faults of each of the plurality of devices in fault based on the respective risk index values of the plurality of devices in fault; andtransmitting a notification message indicative of the prioritized respective faults.2. The method of wherein assigning the respective risk index values to each of the plurality of devices includes identifying respective locations of each the plurality of devices claim 1 , and assigning the respective risk index values to each of the plurality of devices based on the respective locations.3. The method of wherein assigning the respective risk index values to each of the plurality of devices includes identifying respective values of assets protected by each of the plurality of devices.4. The method of wherein assigning the respective risk index values to each of the plurality of devices includes receiving user input claim 1 , and assigning at least one of the respective risk index values based on the ...

DATA PROCESSING VALIDATION

A data processing stage is described which has a communications interface arranged to receive a plurality of input data chunks. Each input data chunk has a pointer to a validation record, where the validation records are stored at a memory accessible to the data processing stage. A processor of the data processing stage is configured to create an output validation record at the memory, and to link the output validation record to the validation records of the input chunks. The processor is configured to compute an output chunk from the input chunks in a manner which ignores data of the input chunks identified as invalid through inspection of the output validation record. 1. A data processing stage comprising:a communications interface arranged to receive a plurality of input data chunks, each having a pointer to a validation record, the validation records stored at a memory accessible to the data processing stage; anda processor configured to create an initially empty output validation record at the memory, and to link the output validation record to the validation records of the input chunks;the processor configured to compute an output chunk from the input chunks and to either drop the output chunk or emit the output chunk dependent on inspection of the output validation record and validation records linked to the output validation record.2. The data processing stage of wherein the processor is configured to send a message to a validation process comprising a pointer to the output validation record.3. The data processing stage of wherein the processor is configured to compute the output chunk in parallel with a validation process operating to fill the output validation record and the validation records of the input data chunks.4. The data processing stage of wherein the processor is configured to compute the output chunk without waiting for validation of the input chunks to complete.5. The data processing stage of wherein the processor is configured to link the ...

Generic Network Trace with Distributed Parallel Processing and Smart Caching

A method and system of distributed parallel processing. There are a plurality of distributed parallel processing units (DPPUs). Each DPPU is configured to receive data related to a condition of the network. The type of data received by each DPPU is disparate for each DPPU. Each DPPU analyzes its data. Upon determining that a predetermined condition is met or a predetermined threshold is exceeded, the disparate data is transformed into a common format using an appropriate driver of the configuration module. The common format data is sent to a storage device of a first DPPU of the plurality of DPPUs.

ANOMALY REMEDIATION USING DEVICE ANALYTICS

Examples described herein generally relate to device analytics. Specifically, the present disclosure provides telemetry-based analytics to identify and remediate top end-user impacting issues. For example, a device may detect an anomaly associated with an application program at the computing device based on a detection parameter. Further, the device may automatically identify at least one remediation action associated with the detected anomaly. The device may also determine whether application of the at least one remediation action to the detected anomaly satisfies a remediation threshold. Additionally, the device may transmit the at least one remediation action to the computing device in accordance with a determination that the application of the at least one remediation action to the detected anomaly satisfies the remediation threshold. 1. A method of anomaly remediation of a computing device associated with an organization , comprising:detecting, at a server, an anomaly associated with an application program at the computing device based on a detection parameter;identifying, automatically at the server, at least one remediation action associated with the detected anomaly;determining, at the server, whether application of the at least one remediation action to the detected anomaly satisfies a remediation threshold;in accordance with a determination that the application of the at least one remediation action to the detected anomaly does not satisfy the remediation threshold, forgoing transmission of the at least one remediation action to the computing device; andin accordance with a determination that the application of the at least one remediation action to the detected anomaly satisfies the remediation threshold, transmitting the at least one remediation action to the computing device.2. The method of claim 1 , further comprising:receiving telemetry data including one or more computing device error indications each associated with an anomaly occurrence at a given ...

REMOTELY DEBUGGING AN OPERATING SYSTEM

Remotely debugging a non-responsive operating system (OS) of a computer system. Central processing units (CPUs) in a computer system are bound to receive queues of a network adapter. Interrupts for a CPU is disabled, wherein the CPU is not available to process hardware interrupt requests queued in the bound receive queues. A debugging message including debugging commands is received by the network adapter, wherein the debugging message is stored in a first receive queue of the network adapter bound to a first CPU. If the first CPU is available, the debugging commands in the debugging message stored in the first of the one or more receive queues of the network adapter are identified by a debugger of the computer system. The identified debugging commands are executed by the CPU to debug the non-responsive OS of the computer system. 1. A method comprising:binding each of a plurality of central processing units (CPUs) in a computer system to one or more receive queues of a network adapter, wherein each of the one or more receive queues is configured to queue a hardware interrupt request of the network adapter;disabling interrupts for one or more of the plurality of CPUs, wherein the one or more of the plurality of CPUs are not available to process hardware interrupt requests queued in the one or more bound receive queues, and an operating system (OS) of the computer system becomes non-responsive;receiving, by the network adapter, a debugging message including debugging commands, wherein the debugging message is stored in a first of the one or more receive queues of the network adapter bound to a first of the plurality of CPUs, and wherein the debugging message corresponds to a first hardware interrupt request queued in the first of the one or more receive queues;responsive to determining that the first of the plurality of CPUs is not available to process the first hardware interrupt, receiving, by the network adapter, the debugging message including debugging commands, ...

DATACENTER PREEMPTIVE MEASURES FOR IMPROVING PROTECTION USING IOT SENSORS

One example method includes receiving information concerning a threat to stored data, correlating the information with a preemptive action which, when taken, prevents harm to the stored data by the threat, implementing the preemptive action before the threat causes harm to the stored data, and taking an action to at least partly return a system associated with the stored data to a pre-threat state. The threat may be a natural disaster, or a human-caused condition, for example. 1. A method , comprising:receiving information concerning a threat to stored data;correlating the information with a preemptive action which, when taken, prevents harm to the stored data by the threat;implementing the preemptive action before the threat causes harm to the stored data; andtaking an action to at least partly return a system associated with the stored data to a pre-threat state.2. The method as recited in claim 1 , wherein the method is performed at a datacenter claim 1 , and the stored data resides at the datacenter.3. The method as recited in claim 1 , wherein the information is generated by claim 1 , and received from claim 1 , one or more sensors configured to monitor and report on an aspect of a physical environment.4. The method as recited in claim 1 , wherein the information is received from a third party monitoring system.5. The method as recited in claim 1 , wherein the preemptive action comprises copying some of the stored data.6. The method as recited in claim 1 , wherein the information is received from one or more Internet of Things (IoT) sensors.7. The method as recited in claim 1 , wherein the harm prevented by the preemptive action comprises one or more of a loss of the stored data claim 1 , theft of the stored data claim 1 , and/or corruption of the stored data.8. The method as recited in claim 1 , wherein the threat comprises a physical threat to the stored data.9. The method as recited in claim 1 , wherein implementation of the preemptive action causes a ...

DISTRIBUTED HEALTH CHECK IN VIRTUALIZED COMPUTING ENVIRONMENTS

Example methods are provided for a host to implement distributed health check in a virtualized computing environment. The method may comprise monitoring health status information associated multiple virtualized computing instances supported by the host, the health status information indicating an availability of each of the multiple virtualized computing instances to handle traffic distributed by the computing system. The method may also comprise: in response to detecting, based on the health status information, a health status change associated with a particular virtualized computing instance from the multiple virtualized computing instances, generating a report message indicating the health status change associated with the particular virtualized computing instance; and sending, to the computing system, the report message to cause the computing system to adjust a traffic distribution to the particular virtualized computing instance. 1. A method for a host to implement distributed health check in a virtualized computing environment that includes the host and a computing system , wherein the method comprises:monitoring health status information associated multiple virtualized computing instances supported by the host, wherein the health status information indicates an availability of each of the multiple virtualized computing instances to handle traffic distributed by the computing system; and generating a report message indicating the health status change associated with the particular virtualized computing instance; and', 'sending, to the computing system, the report message to cause the computing system to adjust a traffic distribution to the particular virtualized computing instance., 'in response to detecting, based on the health status information, a health status change associated with a particular virtualized computing instance from the multiple virtualized computing instances,'}2. The method of claim 1 , wherein monitoring the health status information ...

Reducing Error in Data Compression

Systems and methods are provided for reducing error in data compression and decompression when data is transmitted over low bandwidth communication links, such as satellite links. Embodiments of the present disclosure provide systems and methods for variable block size compression for gridded data, efficiently storing null values in gridded data, and eliminating growth of error in compressed time series data. 1. A method , comprising:receiving, using a data compressor device, data to be compressed, wherein the data comprises a plurality of null values;generating, using the data compressor device, a linear signal based on the null values;generating, using the data compressor device, a null map based on the linear signal; andreplacing, using the data compressor device, the null values in the data with a mean or median of values in a window of values comprising the null values and neighboring non-null values.2. The method of claim 1 , wherein the data comprises a plurality of data sets claim 1 , and wherein generating the linear signal further comprises:generating a linear signal for a first data set in the plurality of data sets based on null values in the first data set.3. The method of claim 2 , further comprising:generating a plurality of (x, y) points corresponding to null values in each data set in the plurality of data sets that is subsequent to the first data set, wherein generating the null map further comprises generating the null map based on the linear signal and the plurality of (x, y) points.4. The method of claim 1 , further comprising:compressing the null map.5. The method of claim 1 , further comprising:compressing the data after the null marker values in the data have been replaced, thereby generating compressed data; andtransmitting the compressed data and the null map to an end user device configured to decompress the compressed data.6. The method of claim 5 , wherein transmitting the compressed data and the null map further comprises:transmitting ...

Reducing Error in Data Compression

Systems and methods are provided for reducing error in data compression and decompression when data is transmitted over low bandwidth communication links, such as satellite links. Embodiments of the present disclosure provide systems and methods for variable block size compression for gridded data, efficiently storing null values in gridded data, and eliminating growth of error in compressed time series data. 1. A method , comprising:receiving, using a data compressor device, data to be compressed;compressing, using a data compressor device, the data into compressed data;decompressing, using a data compressor device, the compressed data into decompressed data; andsubdividing, using a data compressor device, the data in response to a determination that a difference between the data and the decompressed data exceeds a predetermined threshold.2. The method of claim 1 , further comprising:determining that a compression error has occurred for the data in response to the determination that the difference between the data and the decompressed data exceeds the predetermined threshold.3. The method of claim 1 , further comprising:dividing the data into a plurality of original blocks of data.4. The method of claim 3 , further comprising:compressing each of the original blocks of data into a plurality of compressed blocks of data;decompressing each of the compressed blocks of data into a plurality of decompressed blocks of data;for each block of data in the plurality of original blocks of data, determining that a compression error has occurred for a corresponding block of data in the plurality of original blocks of data if a difference between the corresponding block of data and a corresponding decompressed block of data in the plurality of decompressed blocks of data exceeds a predetermined threshold; andsubdividing each block of data in the plurality of original blocks of data that was determined to have a compression error, thereby creating a plurality of subdivided blocks ...

AUDIO-VISUAL DEVICE

Provided is a technology for supporting solution of a fault that has occurred in a system including an audio-visual device. A solution support program storage unit () is configured to store, for each potential fault, a solution support program for supporting a user's job for solving the each fault. At least one of the solution support programs for handling a fault having a plurality of possible causes includes processing for displaying a message for prompting the user to conduct a predetermined job, processing for displaying a question for the user, processing for receiving a user's answer to the question, and processing for displaying a message indicating a solution corresponding to the received answer. Then, a main control unit () determines a fault based on the information acquired through an audio-visual signal input interface unit () and an audio-visual signal output interface unit (), and executes the solution support program for handling the determined fault. 1. An audio-visual device , comprising:an input and output interface for an audio-visual signal;a man-machine interface;solution support program storage means for storing, for each potential fault, a solution support program for supporting a user's job for solving the each potential fault;fault determination means for determining a fault based on information acquired through the input and output interface; andsolution support program execution means for executing the solution support program for handling the fault determined by the fault determination means after reading the solution support program from the solution support program storage means,wherein among the solution support programs stored in the solution support program storage means, the solution support program for handling a fault having a plurality of possible causes comprises:processing for outputting a message for prompting the user to conduct a predetermined job to the man-machine interface;processing for outputting a question for the user ...

IMPACT NOTIFICATION SYSTEM

Methods for notifying, in the event of a power outage, planned maintenance activity, a plurality of stakeholders of an enterprise infrastructure. The enterprise infrastructure may include components and relationships between components. The components may include data centers, data center components, applications, application components, and any other suitable components. The relationships may include relationships between data centers and data center components, relationships between data center components and applications, relationships between applications and application components, relationships between applications and stakeholders. Methods may receive power outage information at an impact notification center. Methods may determine the effect of the power outage on remaining components of the enterprise infrastructure and based on the determination, identify affected components. Methods may notify stakeholders of the power outage, identify service components which might get impacted and perform impact analysis and capacity planning in case of any disaster event where a data center and/or location is impacted. 1. A system for notifying , in the event of a power outage , a plurality of stakeholders of an enterprise infrastructure , the system comprising: each data center comprises a plurality of data center components;', 'each data center component is associated with a plurality of application;', 'each application, included in the plurality of applications is associated with at least one data center component;', 'each application, included in the plurality of applications, is associated with a plurality of users, said plurality of users included in the plurality of stakeholders;', 'each user, included in the plurality of users, is associated with at least one application, included in the plurality of applications;', 'each application, included in the plurality of applications, is associated with a plurality of user interfaces (“UIs”);', 'each application, ...

RAINBOW EVENT DROP DETECTION SYSTEM

In one embodiment, data received from one or more streaming data sources may be monitored by one or more devices. A rate of change in flow of the data received from the one or more streaming data sources may be ascertained. It may be determined whether the rate of change in flow of the data received from the one or more streaming data sources exceeds a threshold rate. Transmission of an alert may be initiated according to a result of determining whether the rate of change in the flow of the data received from the one or more streaming data sources exceeds the threshold rate. 1. A method , comprising:monitoring, by one or more devices, data received from one or more streaming data sources;ascertaining a rate of change in flow of the data received from the one or more streaming data sources;determining whether the rate of change in flow of the data received from the one or more streaming data sources exceeds a threshold rate; andinitiating transmission of an alert according to a result of determining whether the rate of change in the flow of the data received from the one or more streaming data sources exceeds the threshold rate.2. The method as recited in claim 1 , wherein monitoring the data received from the one or more streaming data sources comprises:receiving the data from the one or more streaming data sources over a period of time; andparsing the data received from the one or more streaming data sources over the period of time to ascertain an event count for one or more event types.3. The method as recited in claim 1 , wherein ascertaining a rate of change in flow of the data received from the one or more streaming data sources comprises:periodically obtaining an event count for one or more event types detected in data received from the one or more streaming data sources over a period of time; andascertaining a rate of change in the event count for each of the one or more event types over the period of time.4. The method as recited in claim 3 , wherein the ...

SYSTEM AND METHOD FOR ELECTRONIC DATA SUBMISSION PROCESSING

Electronic submissions, such as those for capital markets, are processed by evaluating the data contained in the electronic submissions against failure conditions. The failure conditions may include a static failure condition and a scalar failure condition. The static failure condition identifies a data element that is to be present or absent for the static failure condition to be met. The scalar failure condition identifies data that is to conform to an inequation for the scalar failure condition to be met. The electronic submission can be approved upon completion of the evaluation when all failure conditions are not met. The electronic submission can be thus approved with no human analyst intervention or review needed. When one or more failure condition is met, the electronic submission requires further analysis. Specific advantageous failure conditions are discussed. Feedback can be employed to increase approvals that trigger no failure conditions. 1. A method of updating a database with data pertaining to capital market transactions or events , the method comprising:a server receiving via a network an electronic submission containing data for a capital market transaction or event requiring one or more of review and approval by a market entity, the data according to a predetermined structure, the server storing the data in a database;evaluating the data contained in the electronic submission against a plurality of failure conditions, the plurality of failure conditions including at least one scalar failure condition, the at least one scalar failure condition identifying data that is to conform to an inequation for the scalar failure condition to be met;processing the electronic submission upon completion of the evaluation when each failure condition of the plurality of failure conditions is not met;upon successfully processing the electronic submission, updating the database to indicate that the submission has been successfully processed; andwhen one or more ...

METHOD AND APPARATUS FOR INTELLIGENT OPERATION MANAGEMENT OF INFRASTRUCTURE

An intelligent operation management apparatus for infrastructure may include a memory and a processor. Herein, the processor may be configured to: collect data by monitoring a resource of an operation target, perform an anomaly detection analysis by various methods of visualization using a graph for the collected data, perform an abnormal prediction analysis for the collected data, and perform pre-maintenance intelligent management based on a result of the anomaly detection analysis and a result of the abnormal prediction analysis. According to an apparatus and method for intelligent operation management of infrastructure, an effect of reducing operation expense and an effect of consecutively providing the quality of service (QoS) may be expected. 1. An intelligent operation management device for infrastructure , the intelligent operation management device comprising:a memory; anda processor,wherein the processor comprises a data collection analytics platform (DCAP) module that is configured to collect data by monitoring a resource of an operation target, to perform an anomaly detection analysis of the collected data by a real-time visualization method, and to perform an abnormal prediction analysis looking for abnormal traffic by applying the collected data.2. The intelligent operation management device of claim 1 , wherein the DCAP module is further configured to express a report for a result of the anomaly detection analysis and a result of the abnormal traffic prediction analysis by means of a graph and natural language that is generated for analysis result interpretation.3. The intelligent operation management device of claim 2 , wherein the analysis result report is configured to perform augmented analytics based on the generated natural language by applying an analytics framework (AF) to the DCAP module.4. The intelligent operation management device of claim 1 , wherein the anomaly detection analysis is configured to determine claim 1 , by applying a data ...

Enriched high fidelity metrics

A system including a data repository storing metrics describing operational behavior of software programs executing in an enterprise system. The system also includes an application programming interface (API) gateway configured to receive the metrics. The system also includes an ingestion layer configured to ingest the metrics to form the ingested metrics. The system also includes a tumbling window processor configured to process the ingested metrics and the events into heat maps, sort the heat maps into the time slices, and populate the time slices with the ingested metrics.

REDUCING SIZE OF DIAGNOSTIC DATA DOWNLOADS

Aspects are related to reducing size of diagnostic data downloads. To reduce the size, format and content are read from a diagnostic data file so that pre-defined priority rules may be applied to the diagnostic data file and/or a subset of the diagnostic data file utilizing the format or the content. Then, a priority level is assigned to the diagnostic data file or the subset based on an ability of that file or that subset to diagnose a failure as determined by the pre-defined priority rules. Next, an ordering of the diagnostic data file and/or the subset into a file stream occurs, followed by a streaming of the file stream to a remote diagnostic system. A notification can be received from the remote diagnostic system to stop the streaming if sufficient diagnostic data to diagnose the failure has been received by the remote diagnostic system. 1. A method for reducing size of diagnostic data downloads , comprising:reading at least one of a format and a content of a diagnostic data file;applying pre-defined priority rules to at least one of the diagnostic data file and a subset of the diagnostic data file utilizing the at least one of the format and the content;assigning a priority level to the diagnostic data file or the subset of the diagnostic data file based on an ability of the diagnostic data file or the subset of the diagnostic data file to diagnose a failure as determined by the pre-defined priority rules;ordering at least one of the diagnostic data file and the subset of the diagnostic data file into a file stream;streaming the file stream to a remote diagnostic system; andreceiving a notification from the remote diagnostic system to stop the streaming if sufficient diagnostic data to diagnose the failure has been received by the remote diagnostic system.2. The method of claim 1 , wherein the assigning of the priority level to the diagnostic data file or the subset of the diagnostic data file includes utilizing multiple levels of granularity based on one or ...

INTEGRATED STATISTICAL LOG DATA MINING FOR MEAN TIME AUTO-RESOLUTION

System and methods for automatically diagnosing and resolving operational issues in a cloud environment are described. A method may include generating, by a diagnosis manager, a plurality of pre-processed files based on a plurality of log files. Each of the plurality of log files contains operational information related to one or more of the plurality of modules operating in the cloud environment. The method may include generating a set of weightage matrices based on a plurality of tokens extracted from the plurality of pre-processed files, and identifying a plurality of clusters based on the set of weightage matrices. The method may further include determining, by a resolution manager coupled with the diagnosis manager, an operational issue for a specific module selected from the plurality of modules and associated with a specific cluster selected from the plurality of clusters, based on the subset of tokens associated with the specific cluster; and performing a predefined action on the specific module based on the operational issue. 1. A method for automatically diagnosing and resolving operational issues in a cloud environment , the method comprising:collecting, by a diagnosis manager, a plurality of log files generated by a plurality of modules operating in the cloud environment, wherein each of the plurality of log files contains operational information related to one or more of the plurality of modules;generating, by the diagnosis manager, a set of weightage matrices based on a plurality of tokens extracted from the plurality of log files;generating, by the diagnosis manager, a plurality of nodes corresponding to the plurality of modules, wherein each of the plurality of nodes is associated with one or more tokens selected from the plurality of tokens;identifying, by the diagnosis manager, a plurality of clusters from the plurality of nodes based on the set of weightage matrices, wherein each of the plurality of clusters includes a subset of nodes selected ...