Dynatrace Corporation

Borland Software Corporation

Micro Focus Lcc

Other

Ernst Ambichl

Helmut Spiegl

Bernd Greifeneder

Otmar Ertl

Herwig Moser

Gunter Schwarzbauer

Andreas Lehofer

Gunther Schwarzbauer

Dietmar Strasser

Charles C Young

Shashi Velur

Randal Lee Guck

Thomas Koeckerbauer

Ronald D Sauers

Gernot Reisinger

Michael Kopp

Raymond Chase

Richard Charles Gronback

Rafal Mlotowski

Paul Anastas

Simon Schatka

Alexander Francoeur

Rafał Młotowski

Alexander Sommer

Jianbo Tang

Jason Wu

A system and method for real-time discovery and monitoring of multidimensional topology models describing structural aspects of applications and of computing infrastructure used to execute those applications is disclosed. Different types of agents are deployed to the monitored application execution infrastructure dedicated to capture specific topological aspects of the monitored system. Virtualization agents detect and monitor the virtualization structure of virtualized hardware used in the execution infrastructure, operating system agents deployed to individual operating systems monitor resource utilization, performance and communication of processes executed by the operating system and transaction agents deployed to processes participating in the execution of transactions, providing end-to-end transaction trace and monitoring data describing individual transaction executions. The monitoring and tracing data of the deployed agents contains correlation data that allows to create a topology model of the monitored system that integrates transaction execution, process execution and communication and virtualization related aspects.

Method and system for real-time modeling of communication, virtualization and transaction execution related topological aspects of monitored software applications and hardware entities

A system and method is disclosed for the combined analysis of transaction execution monitoring data and a topology model created from infrastructure monitoring data of computing systems involved in the execution of the monitored transactions. Monitored communication activities of transactions are analyzed to identify intermediate processing nodes between sender and receiver side and to enrich transaction monitoring data with data describing those intermediate processing nodes. The topology model may also be improved by the combined analysis, as functionality and services provided by elements of the topology model may be derived by the involvement of those elements in the execution of monitored transactions. The result of the combined analysis is used by an automated anomaly detection and causality estimation system. The combined analysis may also reveal entities of a monitored environment that are used by transaction executions but which are not monitored.

Method and system for real-time correlation of disparate sources of topological information to create a unified topological model of a distributed information system

A system and method for the distributed analysis of high frequency transaction trace data to constantly categorize incoming transaction data, identify relevant transaction categories, create per-category statistical reference and current data and perform statistical tests to identify transaction categories showing overall statistically relevant performance anomalies. The relevant transaction category detection considers both the relative transaction frequency of categories compared to the overall transaction frequency and the temporal stability of a transaction category over an observation duration. The statistical data generated for the anomaly tests contains next to data describing the overall performance of transactions of a category also data describing the transaction execution context, like the number of concurrently executed transactions or transaction load during an observation period. Anomaly tests consider current and reference execution context data in addition to statistic performance data to determine if detected statistical performance anomalies should be reported.

Method and system for real-time and scalable anomaly detection and classification of multi-dimensional multivariate high-frequency transaction data in a distributed environment

A system and method is disclosed for the automated identification of causal relationships between a selected set of trigger events and observed abnormal conditions in a monitored computer system. On the detection of a trigger event, a focused, recursive search for recorded abnormalities in reported measurement data, topological changes or transaction load is started to identify operating conditions that explain the trigger event. The system also receives topology data from deployed agents which is used to create and maintain a topological model of the monitored system. The topological model is used to restrict the search for causal explanations of the trigger event to elements of that have a connection or interact with the element on which the trigger event occurred. This assures that only monitoring data of elements is considered that are potentially involved in the causal chain of events that led to the trigger event.

Method and system for automatic real-time causality analysis of end user impacting system anomalies using causality rules and topological understanding of the system to effectively filter relevant monitoring data

A system and method is presented that installs an agent on a computer system that monitors the start of processes by the computer system and that identifies the start of processes that perform container management activities, like starting and stopping container environments. On start of a container manager process, the agent starts a container manager agent that establishes a monitoring connection to the container manager process. The container manager agent monitors activities performed by the container manager process to detect the start of new container environments by the container manager process. On detection of a container start, the container manager agent manipulates the container configuration in a way that a process type specific in-process agent is automatically injected into processes started inside the container.

Method and system for automated agent injection in container environments

A system and method is disclosed that analyzes a set of historic transaction traces to identify an optimized set of transaction clusters with the highest transaction frequency. The transaction clusters are defined according to multiple parameters describing the execution context of the analyzed transactions. The transaction clusters are described by coordinates in a multidimensional, hierarchical classification space. Descriptive statistical data is extracted from historic transactions corresponding to previously identified transaction clusters and stored as reference data. Transaction trace data from currently executed transactions is analyzed to find a best matching historic transaction cluster. The current transaction traces are grouped according to their corresponding historic transaction cluster. Statistical data is extracted from those groups of current transaction trace and statistical test are performed that compare current and historic data on a per historic transaction cluster basis to identify deviations in performance and functional behavior of current and historic transactions.

Method and system for real-time, load-driven multidimensional and hierarchical classification of monitored transaction executions for visualization and analysis tasks like statistical anomaly detection

A computer-implemented system is provided that enables synthetic testing of web applications using monitoring agents instrumented in web content. A playback engine is configured to receive a test script for testing a given web page and initiates loading of the given web page by a web browser. A monitoring agent has a tag embedded into a document object model of the given web page and is a script defined in accordance with the scripting language. During playback of the test script by the playback agent, the monitoring agent determines a performance metric for the given web page. A wait agent has a tag embedded into the markup language of the given web page. During building of the document object model for the given web page, operates to inject the tag for the monitoring agent into the document object model for the given web page.

Synthetic testing of web applications using instrumented monitoring agents

Techniques for open application lifecycle management frameworks are described, including using a framework hosted on one or more computers and having one or more services to integrate the one or more services with one or more applications using one or more providers, each of the one or more providers is adapted to at least one of the one or more applications, registering one or more repositories associated with the one or more applications using a location service module, receiving an input creating a project context associated with a project, data associated with the input being stored in a data structure associated with the project, the data structure being stored in a repository associated with the framework, generating a link, after registering the one or more repositories, between one or more element containers associated with the project, the link and the one or more element containers being stored in the repository, and configuring the framework to detect another input indicating interaction with an artifact, other data associated with the interaction being mapped between the one or more repositories and the repository using a domain model.

Open application lifecycle management framework

Growing community of inventors

Altenberg, Austria

Ernst Ambichl