Vmware, Inc.

Emc Corporation

Eran Dvir

Adar Margalit

Hanna Yehuda

Amanuel Ronen Artzi

Hilik Paz

Ju-Lien Lim

Aner Mazursky

An application monitoring infrastructure that enables application configuration changes on multiple machines across multiple OS types to be tracked by identifying data containers that are to be monitored for changes, detecting a change to a monitored data container, and storing data representative of a changed version of the monitored data container responsive to detecting that the monitored container was changed. The data containers that are to be monitored for changes are identified from templates, and a unique template is provisioned for each of the applications.

Tracking changes that affect performance of deployed applications

Techniques are disclosed for automatic remediation of application performance degradations caused by configuration changes. In one embodiment, a learning module keeps track of application configuration changes and subsequent effects on the application's performance. The learning module creates new potential remediation rules based on correlations between such configuration changes and performance degradations or improvements. The learning module affirms such potential rules if the correlation between the configuration changes and degradations or improvements are repeatedly observed, and vice versa. When subsequent performance degradations are observed, a rule engine, which maintains a set of remediation rules, evaluates the rules to identify configuration changes relevant to the observed performance degradation and determines whether the probability that the configuration changes caused the degradation are greater than a threshold for invoking a remediation action, such as rolling back the configuration changes.

Self-learning automated remediation of changes that cause performance degradation of applications

An application monitoring infrastructure enables application configuration changes on multiple machines across multiple OS types to be tracked, and correlated to performance degradation and outages by receiving change event data associated with change events occurring at each computer in the computer system, each change event data including an identifier for the associated change event, a path to a data container that was changed, a time stamp representative of when the data container was changed, an identifier for an application that is affected by the change to the data container, and the time stamp representative of when the monitored data container was changed, determining a time at which correlation is to be carried out and a target application for which correlation is to be carried out, and identifying change events associated with the target application that have time stamps that are within a predetermined proximity to the determined time.

Correlating performance degradation of applications to specific changes made to applications

In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A policy compliance server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violation) according to severity and recurrence, and identifies related rules, network entities and configuration changes, which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration data against the rules to identify breaches. Therefore, the compliance engine identifies breaches (rule violations and vulnerabilities) across the network to be addressed for compliance with the policies in effect in the network.

Growing community of inventors

Tel Aviv, Israel

Eran Dvir