Event database management method and system for network event reporting system
원문보기
IPC분류정보
국가/구분
United States(US) Patent
등록
국제특허분류(IPC7판)
G06F-015/173
G06F-015/16
G06F-017/00
출원번호
UP-0910676
(2001-07-20)
등록번호
US-7516208
(2009-07-01)
발명자
/ 주소
Kerrison, Adam Geoffrey
Bennett, Andrew Jonathan
Stewart, Kristian Jon
Banyard, Nicholas S.
출원인 / 주소
International Business Machines Corporation
대리인 / 주소
Ostrow, Seth H.
인용정보
피인용 횟수 :
20인용 특허 :
131
초록▼
Improved and more efficient techniques are described for reducing the amount of work that needs to be performed by a database in a computer network in order to distribute event summary data to a large number of administrator clients. Delays experienced by event data at a database, e.g., due to delay
Improved and more efficient techniques are described for reducing the amount of work that needs to be performed by a database in a computer network in order to distribute event summary data to a large number of administrator clients. Delays experienced by event data at a database, e.g., due to delays in accessing a database, are reduced so that client can be notified of the events as soon as possible. Furthermore, event data obtained from both local and remote networks is efficiently coordinated using replica and union processes. Each monitoring location in the network includes both locally generated events, and a copy of remotely-generated events which are provided and maintained by one or more remote monitoring locations. The monitoring locations update one another with their event data.
대표청구항▼
What is claimed is: 1. A method for providing an improved network monitoring system, the network monitoring system comprising an event database for storing event data representing events occurring on the network, the event data being gathered by a plurality of monitoring devices located at a plural
What is claimed is: 1. A method for providing an improved network monitoring system, the network monitoring system comprising an event database for storing event data representing events occurring on the network, the event data being gathered by a plurality of monitoring devices located at a plurality of different, remote locations on the network, the method comprising: allowing users to insert one or more triggers into the event database, the triggers automatically initiating a programmed response at the detection of an event including gathered event data prior to insertion of the gathered event data into the event database, the event is one of a primitive event, a database event or a temporal event; distributing the event database to a plurality of remote network locations, wherein each remote network location stores a local table containing event data generated at the remote location and one or more replica tables containing event data generated at other remote locations, and wherein a union of the local and replica tables is generated to form a combined event database at the remote location; and using triggers and local and replica table unions during delivery of event data to users of the network monitoring system wherein the local and replica tables update one another when the event data of one of said tables changes. 2. The method of claim 1, comprising providing a notification component for registering similar client requests for event data and substantially contemporaneously delivering requested event data to all clients having similar registered requests. 3. An event database for use in a network monitoring system, the event database storing event data representing events occurring on the network, the event data being gathered by a plurality of monitor devices located at a plurality of different, remote locations on the network, the event database comprising: an automation engine for processing one or more triggers contained in the event database, the triggers automatically initiating a programmed response at the detection of an event including on gathered event data prior to insertion of the gathered event data into the event database, the event is one of a primitive event, a database event or a temporal event; a local table stored at each remote network location containing event data generated at the remote location; one or more replica tables stored at each remote network location containing event data generated at other remote locations, wherein a union of the local and replica tables is generated to form a combined event database at the remote location, and wherein the local and replica tables update one another when the event data of one of said tables changes. 4. A method for handling event data from monitored sites in a computer network, comprising: receiving event data from the sites at a monitoring location; when received at the monitoring location, pre-processing the event data before the event data is inserted into an event database to determine if an event is met as set forth in a trigger; if the trigger event is met, initiating an action relating to the event data, the action being defined in the trigger, the event is one of a primitive event, a database event or a temporal event; inserting the event data into the event database thereby producing central data; and transmitting the central data to each of the monitored sites; wherein each of the monitored sites includes locally-generated event data and a replica of the central data; wherein a union of the locally-generated event data and the central data is formed at each of the monitored sites; and wherein the monitored sites update one another when the event data of one of said monitored sites changes. 5. The method of claim 4, wherein pre-processing the event data comprises determining whether the event data comprises a duplication of other event data in the event database or received at the monitoring location. 6. The method of claim 5, wherein initiating the action comprises denying storage of the event data in the event database if it comprises a duplication of other event data. 7. The method of claim 4, wherein if the event data does not meet the event, it is temporarily stored outside the data store. 8. The method of claim 4, wherein for event data received at the monitoring location, a query is executed, and an event is evaluated, which, if true, causes the execution of the action. 9. The method of claim 8, wherein the action comprises at least one of a sequence of Structured Query Language (SQL) statements and an external script. 10. The method of claim 4, wherein the trigger has a coupling mode that indicates when the action should be executed. 11. The method of claim 4, wherein the trigger allows an administrator of the network to connect events, conditions and actions. 12. The method of claim 4, wherein the event data comprises a primitive event. 13. The method of claim 4, wherein the event data comprises a database event. 14. The method of claim 4, wherein the event data comprises a temporal event. 15. The method of claim 4, wherein the trigger comprises a database trigger. 16. The method of claim 4, wherein the trigger comprises a temporal trigger. 17. The method of claim 16, wherein the temporal trigger signals an event at a determined frequency from a specified start time until a specified end time. 18. The method of claim 4, wherein initiating an action comprises communicating a message in accordance with the event data to at least one customer location that has subscribed to receive the event data, and storing the event data in a data store at the monitoring location. 19. The method of claim 18, wherein the pre-processing occurs, at least in part, during a period when the data store is inaccessible. 20. The method of claim 18, wherein the message communicated in accordance with the event data is included in the union of at least event data of a local network and event data of a remote network. 21. The method of claim 20, wherein the union comprises a union of event data tables. 22. The method of claim 4, wherein the monitoring locations update one another with their event data. 23. The method of claim 4, wherein at least one monitoring location is enabled to take ownership of a replica of remotely-generated event data to make modifications thereto without instructions from the remote monitoring location associated therewith. 24. A system for handling event data from monitored sites in a computer network, comprising: means for receiving event data from the sites at a monitoring location; means for pre-processing the event data, when received at the monitoring location, to determine if a condition is met for setting a trigger; means for communicating a message, if the trigger is set, in accordance with the event data to at least one customer location that has subscribed to receive the event data, and storing the event data in a data store at the monitoring location, the trigger being in response to a primitive event, a database event or a temporal event; means for inserting the event data into the event database thereby producing central data; and means for transmitting the central data to each of the monitored sites; wherein each of the monitored sites includes locally-generated event data and a replica of the central data; wherein a union of the locally-generated event data and the central data is formed at each of the monitored sites; and wherein the monitored sites update one another when the event data of one of said monitored sites changes.
연구과제 타임라인
LOADING...
LOADING...
LOADING...
LOADING...
LOADING...
이 특허에 인용된 특허 (131)
Levin Michael (Arlington MA) Hyde Benjamin A. (Arlington MA) David Mark H. (Brookline MA), Access restrictions as a means of configuring a user interface and making an application secure.
Dev Roger H. (Hudson NH) Steinberg Gabriel (Watertown MA) Kam John B. (Concord MA) Comer Stewart A. (Hollis NH), Apparatus for distributing data processing across a plurality of loci of control.
Budde David L. (Portland OR) Carson David G. (Hillsboro OR) Cornish Anthony L. (Essex OR GB2) Johnson David B. (Portland OR) Peterson Craig B. (Portland OR), Apparatus for recovery from failures in a multiprocessing system.
Budde David L. (Portland OR) Carson David G. (Hillsboro OR) Cornish Anthony L. (Essex OR GB2) Johnson David B. (Portland OR) Peterson Craig B. (Portland OR), Apparatus for redundant operation of modules in a multiprocessing system.
Budde David L. (Portland OR) Carson David G. (Hillsboro OR) Cornish Anthony L. (Essex OR GB2) Hosler Brad W. (Portland OR) Johnson David B. (Portland OR) Peterson Craig B. (Portland OR), Apparatus of fault-handling in a multiprocessing system.
Edelman Fredric M., Computer assisted and/or implemented process and architecture for customer account creation, maintenance and administration for an investment and/or retirement program.
Matthews Wallace ; Vaishnavi Vick, Configurations tracking system using transition manager to evaluate votes to determine possible connections between port.
Lyon, David L.; Huettner, Robert E.; Holsinger, Jerry L.; Falkenstein, Don I.; Piracha, Imtiaz; Ching, Dennis T., Enhanced communications network testing and control system.
Daniel, Arthur A.; McKelvey, Mark A.; Modry, John A.; Roubal, Eric G.; Sandstrom, Andrew E.; Wildt, Patrick M., Event handling mechanism having a process and an action association process.
Winokur Alex (Haifa ILX) Shiloach Joseph (Kirat Tiv\on ILX) Ribak Amnon (Misgav TX ILX) Huang Yuangene (Austin TX), Expert based system and method for managing error events in a local area network.
Clark Mark E. (San Jose CA) Greever Richard G. (Sunnyvale CA) Schmier Larry J. (Santa Rosa CA) Wong Jerome D. (Sunnyvale CA), Expert system for processing errors in a multiplex communications system.
Hershey Paul C. (Manassas VA) Barker Kenneth J. (Cary NC) Lingafelt ; Sr. Charles S. (Durham NC) Waclawsky John G. (Frederick MD), Information collection architecture and method for a data communications network.
Itoh Shigeyuki (Kawasaki JPX) Aizawa Iwao (Yokohama JPX), Information transmission/reception system for transmitting information to requesters, where it is recorded, in response.
Ross Ken (Santa Cruz CA) Margozzi Michael (San Jose CA) White Kevin (Los Gatos CA) First Carl (San Jose CA), Method and apparatus for analyzing networks.
Daniel Arthur A. (Rochester MN) Irvin David R. (Raleigh NC) Moore Robert E. (Durham NC), Method and apparatus for communication network alert record identification.
Lewis Lundy ; Malik Rajiv ; Sycamore Steve ; Thebaut Suzanne ; Scott Walter ; Rustici Eric ; Kaikini Prasan, Method and apparatus for defining and enforcing policies for configuration management in communications networks.
Lewis Lundy ; Malik Rajiv ; Sycamore Steve ; Thebaut Suzanne ; Scott Walter ; Rustici Eric ; Kaikini Prasan, Method and apparatus for defining and enforcing policies for configuration management in communications networks.
Aggarwal Ajay (Somersworth NH) Scott Walter (Salem NH) Rustici Eric (Londonderry NH) Bucciero David (Nashua NH) Haskins Andrew (Lee NH) Matthews Wallace (Exeter NH), Method and apparatus for determining a communications path between two nodes in an Internet Protocol (IP) network.
Glackemeyer Richard E. (Harvard MA) Petty Robert C. (Princeton MA) Page Calvin F. (Brookline NH), Method and apparatus for isolating faults in a digital logic circuit.
Kleewein James Charles ; Lin Eileen Tien ; Maheshwari Hemant, Method and apparatus for optimizing a merge-join operation across heterogeneous databases.
Poliquin Lynn R. (Goffstown NH) Arrowsmith Russell (Merrimack NH) Lewis Lundy (Mason NH) Tracy William (Chelmsford MA), Method and apparatus for policy-based alarm notification in a distributed network management environment.
Bill McKinnon ; Tim Newhouse ; Eric Rustici, Method and apparatus for representing objects as visually discernable entities based on spatial definition and perspective.
Yanacek Judith A. ; Clements Bruce G. ; Len Theodore C., Method and apparatus to establish a tap-point in a switched network using self-configuring switches having distributed c.
Dobbins Kurt ; Andlauer Phil ; Oliver Chris ; Parker Tom ; Grimes Andy ; Nutbrown Bruce ; Hullette Dan ; Dev Roger ; Jeffords Jason, Method of transmitting data packets in a packet switched communications network.
Bouloutas Anastasios T. (Athens NY GRX) Calo Seraphin B. (Peekskill NY) Finkel Allan J. (New City NY), Methods and systems for alarm correlation and fault localization in communication networks.
Dobbins Kurt (Bedford NH) Andlauer Phil (Londonderry NH) Oliver Chris (Rochester NH) Parker Tom (Merrimack NH) Grimes Andy (Cape Neddick ME) Nutbrown Bruce (Campton NH) Hullette Dan (Wilton NH) Dev R, Network having secure fast packet switching and guaranteed quality of service.
Dev Roger H. (Durham NH) Emery Dale H. (Berwick ME) Rustici Eric S. (Londonderry NH) Scott Walter P. (Salem NH) Wiggin Dwayne S. (Rochester NH), Network management system using interconnected hierarchies to represent different network dimensions in multiple display.
Dev Roger H. (Durham NH) Emery Dale H. (Berwick ME) Rustici Eric S. (Londonderry NH) Brown Howard M. (Rochester NH) Wiggin Dwayne S. (Rochester NH) Gray Eric W. (Manchester NH) Scott Walter P. (Salem, Network management system using model-based intelligence.
Roger H. Dev ; Dale H. Emery ; Eric S. Rustici ; Howard M. Brown ; Dwayne S. Wiggin ; Eric W. Gray ; Walter P. Scott, Network management system using model-based intelligence.
Dev Roger H. (Durham NH) Gray Eric W. (Manchester NH) Rustici Eric S. (Londonderry NH) Scott Walter P. (Salem NH), Network management system using multifunction icons for information display.
Dev Roger H. (Durham NH) Brown Howard M. (Brighton MA) Rustici Eric S. (Londonderry NH), Network management system using status suppression to isolate network faults.
Staas ; Jr. Philip C. (Phoenixville PA) Knee Rob (Lansdale PA) Schilling Roy (Norristown PA) Murray Robert E. (Malvern PA), Object oriented control of real-time processing.
Walter Chris J. (Columbia MD) Kieckhafer Roger M. (Ellicott City MD) Finn Alan M. (Amston CT), Operations controller for a fault tolerant multiple node processing system.
Suzanne Thebaut ; Walter Scott ; Eric Rustici ; Prasan Kaikini ; Lundy Lewis ; Rajiv Malik ; Steve Sycamore ; Roger Dev ; Oliver Ibe ; Ajay Aggarwal ; Todd Wohlers, Policy management and conflict resolution in computer networks.
Thebaut Suzanne ; Scott Walter ; Rustici Eric ; Kaikini Prasan ; Lewis Lundy ; Malik Rajiv ; Sycamore Steve ; Dev Roger ; Ibe Oliver ; Aggarwal Ajay ; Wohlers Todd, Policy management and conflict resolution in computer networks.
Jeffords Jason ; Dev Roger, Replicated resource management system for managing resources in a distributed application and maintaining a relativistic view of state.
Jeffords Jason ; Dev Roger, Replicated resource management system for managing resources in a distributed application and maintaining a relativistic view of state.
Gillies Graeme Sinclair,GBX ; Gosden Jeffery John,GBX ; Jafari-Langroudi Sardar,GBX ; Sutton Kevin John,GBX, Replication tracking method and apparatus for a distributed data processing system.
Lawson Todd C. ; Cave Warren D. ; Schmidt Dean L., System and method for global event notification and delivery in a distributed computing environment.
Gaurang S. Kalyanpur ; Chad Daniel Harper ; Grant Michael Brehm ; Chunchun Jonina Chan, System and method for monitoring service quality in a communications network.
Puranik Vineeta ; Datta Utpal ; Barlow Rachael, System for determining network connection availability between source and destination devices for specified time period.
Bonnell David N. (Houston TX) Tatarinov Kirill L. (Bellaire TX) Picard Martin W. (Bellaire TX), System for monitoring and managing computer resources and applications across a distributed computing environment using.
Deborah L. Caswell ; Srinivas Ramanathan ; James D. Hunter ; Scott S. Neal ; Frederick A. Sieker ; Mark D. Smith, Template-driven approach for generating models on network services.
Dev Roger (Durham NH) Kaikini Prasan (Cambridge MA) Jeffords Jason (Dover NH) Matthews Wallace (North Hampstead NH), Use of multipoint connection services to establish call-tapping points in a switched network.
Dev Roger ; Kaikini Prasan ; Jeffords Jason ; Matthews Wallace, Use of multipoint connection services to establish call-tapping points in a switched network.
Greenberg, Steven M.; Larsson, Jeffrey E.; Fischer, Kevin J., Method and system for remotely controlling the reporting of events occurring within a computer system.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.