Computer Associates Think, Inc.

Digital Equipment Corporation

Ca, Inc.

Compaq Information Technologies Group, L.p.

Mark W Sylor

Lawrence A Stabile

Richard L Rosenbaum

Mark J Seger

Leonard G Fehskens

Sheryl F Namoglu

Stanley I Goldfarb

Kenneth W Chapman

Robert C Schuchard

Linsey B O'Brien

G Paul Koning

Gordon Andrew Booman

Jeffrey R Harrow

Colin Strutt

Bradley S Carey

Albert Briner

Jill F Callander

Matthew Eric Baddeley

Matthew J Guertin

Dennis O Rogers

Benjamin M England

Thomas Allen LaRosa

David L Aronson

Danny L Smith

Timothy M Dixon

Jeremiah David Small

Kevin M Jackson

David William Russo

Ruth E Kohls

Philip John Trasatti

Steven K Wong

Arundahati G Sankar

Kathy J Nelson

Christine C Chan-Lizardo

James L Lemmon, Jr

Allan B Moore

William C Adams, Jr

Robert R Ross

Peter H Burgess

Will C Lauer

Jay B Wolf

Anil V Navkal

Robert Alan Lindberg

Florent Mali

Patricia Anne Mulligan

John Oliver Boutotte

Jaimin D Patel

George Iglesias

Gerard R Plouffe

Wilson T MacDonald

Krishnan Seetharaman

Gary Fernandez

David L Shepard

Ken Kane

Pierre Perret

Kathy Jo Nelson

Robert R N Ross

Ruth E J Kohls

Karen Whitehead

Gary Pratt

Richard Buttiglieri

Daniel R Seligman

Pat Mulligan

Daniel L Seligman

A computer-implemented method for detecting alarm conditions, the method involving receiving at a first time a trigger notification describing a monitored occurrence on a network; setting a redundancy window to begin at the first time and to end at an expiration time; designating a first alarm condition to represent the trigger notification; receiving a second notification at a second time after the first time, the second notification describing the monitored occurrence; and determining whether a second alarm condition exists by testing whether the second time is within the redundancy window.

Network fault manager

The network fault manager described herein may include one or more processors configured to detect alarms. For example, the one or more processors may periodically sample rates at which similar events that relate to occurrences on a network arrive, compare the periodically sampled rates to a first threshold, and determine whether a preexisting alarm exists. In response to a number of the periodically sampled rates that exceeded the first threshold within a preceding time window exceeding a second threshold and the preexisting alarm not existing, the one or more processors may assert a first alarm. Otherwise, if the number of periodically sampled rates that exceeded the first threshold within the preceding time window exceeds the second threshold but the preexisting alarm does exist, the one or more processors may maintain the preexisting alarm for a predetermined time period.

The network fault manager described herein may generate an alarm data table having various columns and rows respectively corresponding to different alarm data fields and different alarms. The alarm data table may be associated with a primary key that includes a subset of the different data fields in the multiple columns to uniquely represent the different alarms in the multiple rows. In response to removing one or more of the different alarm data fields in the subset from the primary key, the primary key may non-uniquely represent the different alarms in a plurality of the multiple rows. Thus, the alarm data table may be collapsed to combine the different alarms non-uniquely represented in the plurality of the multiple rows into one combined row uniquely representing the different alarms, whereby the collapsed alarm data table may replace the plurality of the multiple rows with the combined row.

Network fault manager for maintaining alarm conditions

Apparatus and methods for automatically processing and displaying information for managing equipment or services in a network. The information is automatically inserted into a hierarchical data structure, which can then presented in a ticker display for viewing by a user. The information concerning the network equipment or services may also be used to determine the users affected by particular network failures.

Methods and apparatus for information processing and display for network management

A method of monitoring an element in a computer network including monitoring a preselected variable relating to that element; defining a threshold for the monitored preselected variable; establishing a sliding window in time; repeatedly generating a time above threshold value, the time above threshold value being a measure of an amount of time during which the monitored variable exceeded the threshold during the sliding window of time; detecting when the time above threshold value exceeds a condition window value; and in response to detecting when the time above threshold value exceeds the condition window, generating an alarm.

System and method for displaying historical performance of an element on a network

A method of processing data received at a local system in response to polling a remote device, wherein the local system includes a local clock, the method involving: sending a first poll to the remote device; receiving a response from the remote device to the first poll, the response to the first poll containing data and a time stamp indicating when the remote device responded to the first poll; for the data received in response to the first poll, computing a first time by using both a time that was derived from the local clock for a previous poll of the remote device and also the time stamp contained in the response to the first poll; comparing the computed first time to information that the local system stored in connection with the first poll, wherein the information that the local system stored in connection with the first poll was derived from the local clock; and determining how to process the data received in response to the first poll based on comparing the computed first time to the information that the local system stored in connection with the first poll.

Time skew correction in data time stamping

LiveException system

The invention features a method and apparatus for displaying the status of networked resources, including rendering in a fishbone layout a hierarchy that includes a plurality of resource profiles and a plurality of dependency relationships among resource profiles in the plurality of resource profiles, where the resource profiles represent networked resources. The invention also features a method and apparatus for displaying the status of networked resources, to include rendering fishbone layouts in a snowflake layout. Each fishbone layout features a hierarchy with resource profiles and dependency relationships among the resource profiles. The resource profiles represent networked resources. Hierarchies in the snowflake layout share a common root.

Interactive hierarchical status display

A computer-based method of formatting rules for monitoring application responsiveness, the method including defining a collection of resources, each such resource being a source of application events; and defining a first transaction as a timeframe for measuring application responsiveness. The first transaction includes a pattern of application events from resources in the collection of resources, the pattern being defined as a block of constructs, wherein each construct in the block of constructs is selected from a group of construct syntaxes consisting of an event construct syntax, a choice construct syntax, a sequence construct syntax, and a last construct syntax. The the event construct syntax specifies a category of application events for the pattern to accept; the choice construct syntax specifies an option set of constructs from the group of construct syntaxes, any one of which is acceptable to the pattern; the sequence construct syntax specifies a sequence of constructs from the group of construct syntaxes, for the pattern to accept sequentially; and the last construct syntax specifies a final set of constructs from the group of construct syntaxes, such that the final set of constructs must be satisfied for the pattern to be matched.

Application response monitor

A system for managing an assemblage of entities. The entities interface within the assemblage for control of primary information handling functions and further interface with the system to permit the carrying out of management functions. The system includes management modules adapted to carry out management functions by independently interpreting and executing commands and a kernel including a table of dispatch pointers for directing the commands to the respective modules in which they are to be interpreted and executed. In addition, the system includes storage containing domain information defining groups of entities, where the kernel may issue a command to a group by issuing individual commands to appropriate modules.

Entity management system

A system for managing an assemblage of entities. The entities interface within the assemblage for control of primary information handling functions and further interface with the system to permit the carrying out of management functions. The system includes management modules adapted to carry out management functions by independently interpreting and executing commands, a kernel including a table of dispatch pointers for directing the commands to the respective modules in which they are to be interpreted and executed, and an enroller for enrolling new modules into the system by adding further pointers to the table. In addition, the system includes: a module adapted to independently interpret and execute selected management-related commands; stored records relating to accessed management information, each record indicating an associated time; an information manager, responsive to commands having a time schedule, for retrieving information from the records or accessing information from the entities, including a scheduler for issuing subsidiary accesses or retrievals at possibly multiple times according to the schedule; storage containing domain information defining groups of entities, where the kernel may issue a commands to a group by issuing individual commands to appropriate modules; a common command syntax including fields for identifying the entity and the operation to be performed; a module that stores rules identifying alarm conditions, including a generator for generating rules and an alarm detector for detecting an alarm condition in response to the rules; a module adapted to carry out self-management functions by interpreting and executing commands.

Extensible entity management system including a dispatching kernel and

Extensible entity management system including rule-based alarms

Growing community of inventors

Nashua, NH, United States of America

Mark W Sylor