International Business Machines Corporation

John D Postoyko

Chris Appleton

Jonathan Ian Settle

Anthony T Brew

A plurality of first event instances of a first event and a plurality of second event instances of a second event are received based on the first event occurring and the second event occurring. Each event instance has an event identifier and a timestamp. A first event type of the plurality of first event instances and a second event type of the plurality of second event instances are identified. A time period of overlap between the first event and the second event are determined by detecting regular intervals between the plurality of first event instances, as compared to each other, and the plurality of second event instances, as compared to each other. A relationship between the first event and the second event are scored based on the time period of overlap. The first event and the second event are grouped based on the scored relationship.

Event analysis in network management event streams

Systems and methods for handling electronic messages are provided. One method includes monitoring a message and recipients of the message, detecting a reference in the monitored message to an entity, obtaining an access control list for the detected entity, the access control list defining permitted access to the entity, identifying a recipient of the message who is not permitted to access the entity, and performing a predefined action in response to the identification of the non-permitted recipient. The predefined action includes one or more specific actions such as identifying an administrator for the access control list, generating a reporting message, and transmitting the reporting message to the administrator. The predefined action additionally or alternatively includes preventing the transmission of the message to the non-permitted recipient and/or providing an alert to the author of the message. One system includes a processor and memory storing code for performing the above method.

Systems and methods for handling electronic messages

A method, a system, and a computer program product associated with a network management system are disclosed. The method includes storing event data associated with a system event in a network as an event item at a database. The method also includes processing the event item at a control system of a collection server when a fast track flag is identified in the stored event item of the database. Processing the event item by the control system includes generating processing data to send a first notification associated with the event item to a first client. The first notification includes an identifier enabling the first client to obtain the stored event data from the database. Processing the event item by the control system also includes purging the processing data from the control system after sending the first notification.

Network management system accelerated event desktop client

This invention relates to a network management system accelerated event desktop client. This invention also relates to a method and computer program product for controlling an accelerated event desktop client in a network management system. The network management system comprises: a probe for intercepting a system event from a monitored system and creating an event item or modifying an event item associated with the system event; a collection database server collecting, in database of event items, a new event item or modification to an existing event item; a first client and a second client; a notifying means for notifying the first client of the new event item or event item modification; and first client notifying means for notifying the second client of the new event or event item modification. Additionally the second client can retrieve event item data, corresponding to the event notification received from the first client, from the database where the event item is collected.

Growing community of inventors

Hemel Hempstead, United Kingdom

John D Postoyko