Verizon Laboratories Inc.

Altusys Corp.

Gabriel Jakobson

Mark Weissman

Lundy M Lewis

John F Buford

Leonhard Brenner

Carol Lafond

Girish Pathak

Method and apparatus for situation-based management of natural and artificial systems using event correlation and a situation manager. Input is provided from multiple sources in the form of a collection of events. A first level of processing performs event correlation over the collection of events and infers new events and new qualities of events. A second level of processing manages situations based on the collection of events, where situations are recognized, maintained, and given a degree of confidence. Situations are periodically updated based on incoming events. The assertion of a situation may call for information from external sources, provide information for external sources, and provide control instructions to external sources. Given a current situation, past, and possible future situations are inferred. Additionally, a method and apparatus for bi-directional communication between the event correlator and situation manager.

Method and apparatus for situation-based management

Method and apparatus for context-sensitive event correlation with external control in situation-based management

A method and system are disclosed for efficiently correlating network events within a data processing system and then transmitting messages to various network entities in response to an occurrence of a particular network event. According to the present invention, a network mediation service receives raw message streams from one or more external networks and passes the streams in real-time to the event notification service. The event notification service then passes the message to the message parsing service for processing. After the message has been parsed by the message parsing service, it is passed back to the event notification service which passes the message along an event channel to the network management service. The message is also passed to the event correlation service for event correlation. A knowledge-based database of message classes that define how to interpret the message text are used by the event correlation service to match correlation rule conditions to the observed events. After event correlation service processes the parsed event, it is passed to the network management service for resolution.

Method and computer system for correlating network event messages

System and method for providing a global real-time advanced correlation environment architecture

A method and system are disclosed for efficiently correlating events within a data processing system and then transmitting messages to various network entities in response to an occurrence of a particular network event. According to the present invention, a network mediation service receives raw message streams from one or more external data sources and passes the streams in real-time to the event notification service. The event notification service then passes the message to the message parsing service for processing. After the message has been parsed by the message parsing service, it is passed back to the event notification service which passes the message along an event channel to the network management service. The message is also passed to the event correlation service for event correlation. A knowledge-based database of message classes that define how to interpret the message text are used by the event correlation service to match correlation rule conditions to the observed events. After event correlation service processes the parsed event, it is passed to the network management service for resolution.

System and method for providing an internet-based correlation service

Systems and methods consistent with the present invention perform message parsing in a distributed component-based network management system using a parsing knowledge structure called a Message Class Grammar (MCG) containing the set of all potential pre-calculated parsing sequences for an active network element. The MCG may be customized to the messages of different active network elements. A universal parsing procedure (UPP) may be used to traverse the hierarchy structure of the MCG. Tracing the MCG hierarchy from the root node along class-subclass arcs until a terminal node is reached determines the parsing sequence for a particular message. The MCG may be developed with a text editor or with a graphical user interface that enables a non-programmer to edit the parser structure.

Growing community of inventors

Brookline, MA, United States of America

Gabriel Jakobson