← Back to Patent Explorer
US5528516A Expired / Lapsed US ⏱️ 0.0 years remaining

Apparatus and method for event correlation and problem reporting

Assignee: VMware LLC
•
Filing: 1994-05-25
•
Granted: 1996-06-18
•
Expires: 2014-05-25
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract An apparatus and method is provided for efficiently determining the source of problems in a complex system based on observable events. The problem identification process is split into two separate activities of (1) generating efficient codes for problem identification and (2) decoding the problems at runtime. Various embodiments of the invention contemplate creating a causality matrix which relates observable symptoms to likely problems in the system, reducing the causality matrix into a minimal codebook by eliminating redundant or unnecessary information, monitoring the observable symptoms, and decoding problems by comparing the observable symptoms against the minimal codebook using various best-fit approaches. The minimal codebook also identifies those observable symptoms for which the greatest benefit will be gained if they were monitored as compared to others. By defining a distance measure between symptoms and codes in the codebook, the invention can tolerate a loss of symptoms or spurious symptoms without failure. Changing the radius of the codebook allows the ambiguity of problem identification to be adjusted easily. The invention also allows probabilistic and temporal correlations to be monitored.

Inventors

  • 👤 Yechiam Yemini
  • 👤 Shaula Yemini
  • 👤 Shmuel Kliger

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-29 23:41
CPC Classifications
G; G06; G06F; G06F11/00; G06F11/22; G06F11/2257; G06F11/2273; G06F11/30; G06F11/34; G06F11/3466; G06F2201/00; G06F2201/86

Claims Analysis

Total Claims: 89
Claim 1
Independent Claim 139 words
A method for detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) providing a computer-accessible codebook comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; (3) determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values through the use of a computer, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and (4) generating a report comprising said one selected likely problem from said codebook.
Claim 2
Independent Claim 139 words
A method for detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) providing a computer-accessible codebook comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; (3) determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values through the use of a computer, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and (4) generating a report comprising said one selected likely problem from said codebook.
Claim 3
Dependent Claim 30 words
The method of claim 1, wherein step (3) comprises the step of determining a Hamming distance between each of said plurality of groups and said plurality of symptom data values.
Claim 4
Dependent Claim 39 words
The method of claim 1, wherein step (3) comprises the step of adding individual mismatch measures across a plurality of pairs, each pair comprising one of the plurality of symptom data values and one of the plurality of values.
Claim 5
Dependent Claim 36 words
The method of claim 3, wherein step (3) comprises the step of using a mismatch measure which gives a different weight to absence of a symptom data value than to presence of a symptom data value.
Claim 6
Dependent Claim 33 words
The method of claim 3, wherein step (3) comprises the step of outputting as likely problems all likely problems in said codebook which fall within a predetermined tolerance from a best fit match.
Claim 7
Dependent Claim 35 words
The method of claim 1, wherein step (1) comprises the step of specifying each of said values as a probability, said probability reflecting a likelihood that a corresponding symptom was caused by a corresponding problem.
Claim 8
Dependent Claim 49 words
The method of claim 6, wherein step (1) comprises the step of specifying each of said values as a pair of data, said pair comprising a first datum designating said probability and a second datum designating a temporal indicator corresponding to a time frame within which said probability holds.
Claim 9
Dependent Claim 20 words
The method of claim 6, wherein step (1) comprises the step of specifying each said probability as a discrete value.
Claim 10
Dependent Claim 37 words
The method of claim 1, wherein said system comprises a network of computer nodes, and wherein step (2) comprises the step of receiving messages from said computer nodes, said messages comprising said plurality of symptom data values.
Claim 11
Dependent Claim 37 words
The method of claim 1, wherein said system comprises a telecommunication network, and wherein step (2) comprises the step of receiving signals from equipment in said telecommunication network, said signals comprising said plurality of symptom data values.
Claim 12
Dependent Claim 35 words
The method of claim 1, wherein said system comprises a computer having peripherals, and wherein step (2) comprises the step of receiving signals from said peripherals, said signals comprising said plurality of symptom data values.
Claim 13
Dependent Claim 35 words
The method of claim 1, wherein said system comprises a plurality of satellites, and wherein step (2) comprises the step of receiving signals from said satellites, said signals comprising said plurality of symptom data values.
Claim 14
Dependent Claim 36 words
The method of claim 1, wherein said system comprises a human patient, and wherein step (2) comprises the step of receiving signals from sensors coupled to said human patient, said signals comprising said symptom data values.
Claim 15
Dependent Claim 26 words
The method of claim 1, wherein step (3) comprises the step of determining said mismatch measure by looking up a predetermined measure from a pre-computed table.
Claim 16
Dependent Claim 77 words
The method of claim 1, further comprising the step of, prior to step (1), providing a causality matrix comprising a larger set of values than said codebook, said larger set of values also corresponding to mappings between said plurality of symptom data values and said plurality of likely problems corresponding thereto; and wherein step (1) comprises the step of generating said codebook by reducing said larger set of values contained in said causality matrix into said codebook.
Claim 17
Dependent Claim 21 words
The method of claim 15, wherein step (1) comprises the step of eliminating redundant rows and columns from said causality matrix.
Claim 18
Dependent Claim 36 words
The method of claim 15, wherein step (1) comprises the step of reducing the number of rows in said causality matrix in accordance with a desired degree of distinction between groups of said plurality of symptoms.
Claim 19
Dependent Claim 102 words
The method of claim 1, further comprising the step of, prior to step (1), providing a causality graph comprising a plurality of nodes each corresponding to an event, a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes and corresponding to a causal relation between two or more of said events, wherein certain of said nodes are marked as problem nodes and others are marked as symptom nodes; and wherein step (1) comprises the step of generating said codebook by traversing said directed edges leading from problem nodes to symptom nodes.
Claim 20
Dependent Claim 51 words
The method of claim 18, wherein step (1) comprises the steps of: eliminating from said causality graph redundant symptom nodes that may be reached via directed edges from the same set of problem nodes; and eliminating indistinguishable problem nodes that lead via directed edges to the same set of symptom nodes.
Claim 21
Dependent Claim 34 words
The method of claim 18, wherein step (1) comprises the step of eliminating from said causality graph symptom nodes in accordance with a desired degree of distinction between groups of said plurality of symptoms.
Claim 22
Dependent Claim 38 words
The method according to claim 1, wherein step (1) comprises the step of providing a computer-accessible codebook comprising a matrix of values which has been reduced from a causality matrix by eliminating redundant information from the causality matrix.
Claim 23
Independent Claim 172 words
A method for detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) generating a causality matrix comprising a first matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) reducing said causality matrix into a codebook comprising a second matrix of values fewer in number than said first matrix of values by eliminating duplicative sets of values from said first matrix of values; (3) monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; (4) determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values through the use of a computer, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and (5) reporting said one selected likely problem from said codebook.
Claim 24
Independent Claim 172 words
A method for detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) generating a causality matrix comprising a first matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) reducing said causality matrix into a codebook comprising a second matrix of values fewer in number than said first matrix of values by eliminating duplicative sets of values from said first matrix of values; (3) monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; (4) determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values through the use of a computer, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and (5) reporting said one selected likely problem from said codebook.
Claim 25
Dependent Claim 21 words
The method of claim 22, wherein step (2) comprises the step of eliminating redundant rows and columns from said first matrix.
Claim 26
Dependent Claim 80 words
The method of claim 22, further comprising the step of selecting a desired degree of distinction between each of said groups of said plurality of symptoms, each group corresponding to a different likely problem, and wherein step (2) comprises the step of deleting values from said first matrix which do not satisfy said desired level, said deletions made on the basis of comparisons between one or more of said values from said first matrix with said desired degree of distinction.
Claim 27
Dependent Claim 30 words
The method of claim 24, wherein said comparisons are made with respect to a Hamming distance determined with respect to one or more of said values from said first matrix.
Claim 28
Dependent Claim 37 words
The method of claim 24, further comprising the step of specifying each of said values in said first matrix as a probability, said probability reflecting a likelihood that a corresponding symptom was caused by a corresponding problem.
Claim 29
Dependent Claim 23 words
The method of claim 26, wherein said specifying step comprises the step of specifying each of said values as a discrete probability value.
Claim 30
Dependent Claim 34 words
The method of claim 24, further comprising the step of making said comparisons by using a mismatch measure which gives a different weight to absence of a symptom than to presence of a symptom.
Claim 31
Independent Claim 157 words
A method of generating a codebook for use in a process of detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) preparing a causality matrix comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) making said causality matrix well-formed by deleting redundant sets of values from said matrix of values; (3) selecting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; (4) generating, through the use of a computer, an optimal codebook from said well-formed causality matrix by selecting minimal groups of symptoms from said well-formed causality matrix such that selected groups of symptoms corresponding to any two likely problems satisfy the desired degree of distinction; and (5) storing said optimal codebook in a computer storage device.
Claim 32
Independent Claim 157 words
A method of generating a codebook for use in a process of detecting problems in a system which generates a plurality of symptoms, the method comprising the steps of: (1) preparing a causality matrix comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; (2) making said causality matrix well-formed by deleting redundant sets of values from said matrix of values; (3) selecting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; (4) generating, through the use of a computer, an optimal codebook from said well-formed causality matrix by selecting minimal groups of symptoms from said well-formed causality matrix such that selected groups of symptoms corresponding to any two likely problems satisfy the desired degree of distinction; and (5) storing said optimal codebook in a computer storage device.
Claim 33
Dependent Claim 31 words
The method of claim 29, wherein step (1) comprises the step of preparing a formal specification of an event model which defines relationships between events in said system and causes thereof.
Claim 34
Dependent Claim 26 words
The method of claim 30, wherein said preparing step comprises the step of inputting to a compiler compilable statements which use probabilities to define said relationships.
Claim 35
Dependent Claim 43 words
The method of claim 31, further comprising the steps of: compiling said compilable statements into methods and data structures; and using said methods and data structures to generate said causality matrix by determining a causality closure of problems contained in a configuration specification.
Claim 36
Dependent Claim 71 words
The method of claim 29, wherein step (1) comprises the steps of: (a) logging events occurring in said system over a period of time to a computer storage device; (b) analyzing said logged events for statistical correlations; (c) filtering said analyzed events based on a correlation threshold and producing a filtered set of data comprising symptoms and likely problems; and (d) generating said causality matrix using said filtered set of data.
Claim 37
Dependent Claim 12 words
An optimal codebook generated in accordance with the method of claim 29.
Claim 38
Independent Claim 170 words
A method of generating a codebook for use in a process of detecting problems in a system which generates a plurality of symptoms, the method comprising steps of: (1) preparing a causality graph comprising a plurality of nodes each corresponding to a problem or a symptom, and a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes, and corresponding to a causal relation between two or more of said plurality of nodes; (2) making said causality graph well-formed by deleting redundant nodes; (3) selecting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; (4) generating, through the use of a computer, an optimal codebook from said well-formed causality graph by selecting a minimal set of symptom nodes such that the minimal set of symptom nodes caused by any two problem nodes satisfy the desired degree of distinction; and (5) storing said optimal codebook in a computer storage device.
Claim 39
Independent Claim 170 words
A method of generating a codebook for use in a process of detecting problems in a system which generates a plurality of symptoms, the method comprising steps of: (1) preparing a causality graph comprising a plurality of nodes each corresponding to a problem or a symptom, and a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes, and corresponding to a causal relation between two or more of said plurality of nodes; (2) making said causality graph well-formed by deleting redundant nodes; (3) selecting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; (4) generating, through the use of a computer, an optimal codebook from said well-formed causality graph by selecting a minimal set of symptom nodes such that the minimal set of symptom nodes caused by any two problem nodes satisfy the desired degree of distinction; and (5) storing said optimal codebook in a computer storage device.
Claim 40
Dependent Claim 36 words
The method of claim 35, wherein step (1) comprises the step of inputting a formal specification of an event model into a computer, said formal specification defining relationships between events in said system and causes thereof.
Claim 41
Dependent Claim 27 words
The method of claim 36, wherein step (1) comprises the step of inputting compilable statements into a compiler, said compilable statements comprising probabilities to define said relationships.
Claim 42
Dependent Claim 42 words
The method of claim 36, further comprising the steps of: compiling said formal specification into methods and data structures; and using said methods and data structures to generate said causality graph by determining a causality closure of problems in a configuration specification.
Claim 43
Dependent Claim 12 words
An optimal codebook generated in accordance with the method of claim 35.
Claim 44
Dependent Claim 133 words
Apparatus for detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: a storage device for storing a codebook comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; monitoring means for monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; means for determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and generating means for generating a report comprising said one selected likely problem.
Claim 45
Dependent Claim 133 words
Apparatus for detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: a storage device for storing a codebook comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; monitoring means for monitoring a plurality of symptom data values representing said plurality of symptoms generated by said system over time; means for determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and generating means for generating a report comprising said one selected likely problem.
Claim 46
Dependent Claim 30 words
The apparatus of claim 40, wherein said decoding means comprises means for determining a Hamming distance between each of said plurality of groups and said plurality of symptom data values.
Claim 47
Dependent Claim 40 words
The apparatus of claim 40, wherein said means for determining a mismatch measure adds individual mismatch measures across a plurality of pairs, each pair comprising one of the plurality of symptom data values and one of the plurality of values.
Claim 48
Dependent Claim 35 words
The apparatus of claim 42, wherein said best fit match determination uses a mismatch measure which gives a different weight to absence of a symptom data value than to presence of a symptom data value.
Claim 49
Dependent Claim 30 words
The apparatus of claim 42, wherein said decoding means outputs as likely problems all likely problems in said codebook which fall within a predetermined tolerance from a best fit match.
Claim 50
Dependent Claim 26 words
The apparatus of claim 40, wherein each of said values comprises a probability reflecting a likelihood that a corresponding symptom was caused by a corresponding problem.
Claim 51
Dependent Claim 42 words
The apparatus of claim 45, wherein each of said values comprises a pair of data, said pair comprising a first datum designating said probability and a second datum designating a temporal indicator corresponding to a time frame within which said probability holds.
Claim 52
Dependent Claim 17 words
The apparatus of claim 45, wherein each of said probability values is specified as a discrete value.
Claim 53
Dependent Claim 37 words
The apparatus of claim 40, wherein said system comprises a network of computer nodes, and wherein said monitoring means comprises means for receiving messages from said computer nodes, said messages comprising said plurality of symptom data values.
Claim 54
Dependent Claim 36 words
The apparatus of claim 40, wherein said system comprises a telecommunication network, and wherein said monitoring means comprises means for receiving signals from equipment in said network, said signals comprising said plurality of symptom data values.
Claim 55
Dependent Claim 35 words
The apparatus of claim 40, wherein said system comprises a computer having peripherals, and wherein said monitoring means comprises means for receiving signals from said peripherals, said signals comprising said plurality of symptom data values.
Claim 56
Dependent Claim 35 words
The apparatus of claim 40, wherein said system comprises a plurality of satellites, and wherein said monitoring means comprises means for receiving signals from said satellites, said signals comprising said plurality of symptom data values.
Claim 57
Dependent Claim 38 words
The apparatus of claim 40, wherein said system comprises a human patient, and wherein said monitoring means comprises means for receiving signals from sensors coupled to said human patient, said signals comprising said plurality of symptom data values.
Claim 58
Dependent Claim 21 words
The apparatus of claim 40, wherein said mismatch measure is determined by looking up a predetermined measure from a pre-computed table.
Claim 59
Dependent Claim 64 words
The apparatus of claim 40, further comprising: means for storing a causality matrix comprising a larger set of values than said codebook, said values also corresponding to mappings between said symptom data values and said plurality of likely problems corresponding thereto; and means for generating said codebook by reducing said larger set of values contained in said causality matrix into values for said codebook.
Claim 60
Dependent Claim 20 words
The apparatus of claim 54, wherein said codebook is generated by eliminating redundant rows and columns from said causality matrix.
Claim 61
Dependent Claim 35 words
The apparatus of claim 54, wherein said codebook is generated by reducing the number of rows in said causality matrix in accordance with a desired degree of distinction between groups of said plurality of symptoms.
Claim 62
Dependent Claim 96 words
The apparatus of claim 40, further comprising means for storing a causality graph comprising a plurality of nodes each corresponding to an event, and a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes and corresponding to a causal relation between two of said events, wherein certain nodes are marked as problems and certain nodes are marked as symptoms; and wherein said codebook is generated by traversing said directed edges in said causality graph leading from nodes marked as problems to nodes marked as symptoms.
Claim 63
Dependent Claim 51 words
The apparatus of claim 57, wherein said codebook is generated by eliminating from said causality graph redundant symptom nodes that may be reached via directed edges from the same set of problem nodes, and by eliminating indistinguishable problem nodes that lead via directed edges to the same set of symptom nodes.
Claim 64
Dependent Claim 33 words
The apparatus of claim 57, wherein said codebook is generated by eliminating from said causality graph symptom nodes in accordance with a desired degree of distinction between groups of said plurality of symptoms.
Claim 65
Dependent Claim 27 words
The apparatus according to claim 40, wherein the values in the codebook have been reduced from a causality matrix by eliminating redundant information from the causality matrix.
Claim 66
Dependent Claim 174 words
Apparatus for detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: generating means for generating a causality matrix comprising a first matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; reducing means for reducing said causality matrix into a computer-accessible codebook comprising a second matrix of values fewer in number than said first matrix of values by eliminating duplicative sets of values from said first matrix; monitoring means for monitoring, through the use of a computer, a plurality of symptom data values representing said plurality of symptoms generated by said system over time; means for determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and a report generator for reporting said one selected likely problem.
Claim 67
Dependent Claim 174 words
Apparatus for detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: generating means for generating a causality matrix comprising a first matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; reducing means for reducing said causality matrix into a computer-accessible codebook comprising a second matrix of values fewer in number than said first matrix of values by eliminating duplicative sets of values from said first matrix; monitoring means for monitoring, through the use of a computer, a plurality of symptom data values representing said plurality of symptoms generated by said system over time; means for determining a mismatch measure between each of a plurality of groups of said values in said codebook and said plurality of symptom data values, and selecting one of said plurality of likely problems corresponding to one of said plurality of groups having the smallest mismatch measure; and a report generator for reporting said one selected likely problem.
Claim 68
Dependent Claim 18 words
The apparatus of claim 61, wherein said reducing means eliminates redundant rows and columns from said first matrix.
Claim 69
Dependent Claim 81 words
The apparatus of claim 61, wherein said reducing means comprises means for inputting a desired degree of distinction between each of said groups of said plurality of symptoms, each group corresponding to a different likely problem, and wherein said reducing means deletes values from said first matrix which do not satisfy said desired degree of distinction, said deletions made on the basis of comparisons between one or more of said values from said first matrix with said desired degree of distinction.
Claim 70
Dependent Claim 30 words
The apparatus of claim 63, wherein said comparisons are made with respect to a Hamming distance determined with respect to one or more of said values from said first matrix.
Claim 71
Dependent Claim 30 words
The apparatus of claim 63, wherein each of said values in said first matrix comprises a probability reflecting a likelihood that a corresponding symptom was caused by a corresponding problem.
Claim 72
Dependent Claim 12 words
The apparatus of claim 65, wherein said probabilities comprise a discrete value.
Claim 73
Dependent Claim 24 words
The apparatus of claim 63, wherein said mismatch measure gives a different weight to absence of a symptom than to presence of a symptom.
Claim 74
Dependent Claim 151 words
Apparatus for generating a codebook for use in detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: preparing means for preparing a causality matrix comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; means for making said causality matrix well-formed by deleting redundant sets of values from said matrix of values; inputting means for inputting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; generating means for generating a computer-accessible optimal codebook from said well-formed causality matrix by selecting minimal groups of symptoms from said well-formed causality matrix such that selected groups of symptoms corresponding to any two likely problems satisfy the desired degree of distinction; and a storage device for storing said computer-accessible optimal codebook.
Claim 75
Dependent Claim 151 words
Apparatus for generating a codebook for use in detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: preparing means for preparing a causality matrix comprising a matrix of values each corresponding to a mapping between one of said plurality of symptoms and one of a plurality of likely problems in said system; means for making said causality matrix well-formed by deleting redundant sets of values from said matrix of values; inputting means for inputting a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; generating means for generating a computer-accessible optimal codebook from said well-formed causality matrix by selecting minimal groups of symptoms from said well-formed causality matrix such that selected groups of symptoms corresponding to any two likely problems satisfy the desired degree of distinction; and a storage device for storing said computer-accessible optimal codebook.
Claim 76
Dependent Claim 39 words
The apparatus of claim 68, wherein said preparing means comprises: means for inputting a specification of an event model defining relationships between events in said system and causes thereof; and a compiler for compiling said specification into data structures.
Claim 77
Dependent Claim 17 words
The apparatus of claim 69, wherein said specification comprises statements which define said relationships using probability values.
Claim 78
Dependent Claim 31 words
The apparatus of claim 69, further comprising a matrix generator for transforming said data structures into said causality matrix by determining a causality closure of problems contained in a configuration specification.
Claim 79
Dependent Claim 73 words
The apparatus of claim 68, wherein said preparing means comprises: means for logging events occurring in said system over a period of time to a computer storage device; means for analyzing said logged events for statistical correlations; means for filtering said analyzed events based on a correlation threshold and producing a filtered set of data comprising symptoms and likely problems; and means for generating said causality matrix using said filtered set of data.
Claim 80
Dependent Claim 10 words
An optimal codebook generated using the apparatus of claim 68.
Claim 81
Dependent Claim 159 words
Apparatus for generating a codebook for use in detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: preparing means for preparing a causality graph comprising a plurality of nodes each corresponding to a problem or a symptom, and a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes and corresponding to a causal relation between two or more of said plurality of nodes; means for making said causality graph well-formed by deleting redundant nodes; specifying means for specifying a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; generating means for generating, through the use of a computer, an optimal codebook from said well-formed causality graph by selecting a minimal group of symptom nodes such that selected groups satisfy the degree of distinction; and a computer storage device for storing said optimal codebook.
Claim 82
Dependent Claim 159 words
Apparatus for generating a codebook for use in detecting problems in a system which generates a plurality of symptoms, the apparatus comprising: preparing means for preparing a causality graph comprising a plurality of nodes each corresponding to a problem or a symptom, and a plurality of directed edges each pointing from one of the plurality of nodes to another of the plurality of nodes and corresponding to a causal relation between two or more of said plurality of nodes; means for making said causality graph well-formed by deleting redundant nodes; specifying means for specifying a desired degree of distinction between groups of said plurality of symptoms, each group corresponding to a different likely problem; generating means for generating, through the use of a computer, an optimal codebook from said well-formed causality graph by selecting a minimal group of symptom nodes such that selected groups satisfy the degree of distinction; and a computer storage device for storing said optimal codebook.
Claim 83
Dependent Claim 30 words
The apparatus of claim 74, wherein said preparing means comprises means for inputting a specification of an event model which defines relationships between events in said system and causes thereof.
Claim 84
Dependent Claim 18 words
The apparatus of claim 75, wherein said specification comprises compilable statements which use probabilities to define said relationships.
Claim 85
Dependent Claim 46 words
The apparatus of claim 75, wherein said preparing means comprises means for compiling said specification into methods and data structures, and wherein said methods and data structures are used to generate said causality graph by determining a causality closure of problems contained in a configuration specification.
Claim 86
Dependent Claim 73 words
The apparatus of claim 74, wherein said preparing means comprises: means for logging events occurring in said system over a period of time to a computer storage device; means for analyzing said logged events for statistical correlations; means for filtering said analyzed events based on a correlation threshold and producing a filtered set of data comprising symptoms and likely problems; and means for generating said causality graph using said filtered set of data.
Claim 87
Dependent Claim 10 words
An optimal codebook generated using the apparatus of claim 74.
Claim 88
Independent Claim 155 words
A method of preparing a data structure for use in detecting or isolating problems in a system having a plurality of components of various classes, said system generating a plurality of observable events, the method comprising the steps of: (1) preparing compilable statements which define, for each class of component in said system, (a) the relationships the component can participate in with respect to other classes of components; (b) problems associated with the component and events caused therefrom; (c) a causal propagation of the problems and the events to other components along the relationships; (2) preparing a configuration specification which defines component instances in the system, their classes and their relationships to other components; (3) translating, through the use of a computer, the compilable statements and the configuration specification into the data structure by determining a causality closure of the events in the system; and (4) storing the data structure in a computer storage device.
Claim 89
Independent Claim 155 words
A method of preparing a data structure for use in detecting or isolating problems in a system having a plurality of components of various classes, said system generating a plurality of observable events, the method comprising the steps of: (1) preparing compilable statements which define, for each class of component in said system, (a) the relationships the component can participate in with respect to other classes of components; (b) problems associated with the component and events caused therefrom; (c) a causal propagation of the problems and the events to other components along the relationships; (2) preparing a configuration specification which defines component instances in the system, their classes and their relationships to other components; (3) translating, through the use of a computer, the compilable statements and the configuration specification into the data structure by determining a causality closure of the events in the system; and (4) storing the data structure in a computer storage device.

References Cited (Backward Citations)

US4935882A Cited
US4995088A Cited
US5351247A Cited
US5280565A Cited
US5040134A Cited
US5230036A Cited
US5216750A Cited
US5263123A Cited
US5130936A Cited
US5194864A Cited
US5233349A Cited
US5309448A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1999-06-18 1999-12-18 2000-06-18 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2003-06-18 2003-12-18 2004-06-18 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2007-06-18 2007-12-18 2008-06-18 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag