Vmware, Inc.

Nicira, Inc.

Wmware, Inc.

In2h2

Vardan Movsisyan

Nicholas Kushmerick

Steven Flanders

Ashot Nshan Harutyunyan

Arnak Poghosyan

Naira Movses Grigoryan

Harutyun Beybutyan

Mickey Lee Fandrich

Bruce Kent McCormick

Christopher John McCormick

Gagik Manukyan

Matthew McCormick

Gor Ghazaryan

Arman Mkrtchyan

Anna Grigoryan

Hovhannes Bolibekyan

Armen Sahakyan

Gor Ghazarayan

William Harry Nagel

Methods and systems automatically adjusting resources and monitoring configurations of objects of a distributed computing system in response to changes to application programs. Methods search event messages for information indicating a change in execution of an object. The information is used to determine resource allocation rules of infrastructure resources by and a monitoring configuration for the object. Expected impacts on the infrastructure resource are determined from the rules. When an expected impact is greater than an associated impact threshold, use of the infrastructure resources may be adjusted to accommodate the changes. The adjustments include scaling up or down the infrastructure resources. When the object is a virtual object, the virtual object may be migrated from one server computer to another server computer within the distributed computer system. The monitoring configuration is used to adjust tools that monitor the objects of the distributed computing system.

Methods and systems to adjust resources and monitoring configuration of objects in a distributed computing system

The present disclosure is related to devices, systems, and methods for persistent alert notes. An example method can include receiving an alert message via a log management server, wherein the alert message indicates a current alert instance particular to a class of alerts, retrieving, in response to receiving the alert message, a note stored in association with the class of alerts via the log management server, wherein the note includes resolution information corresponding to a previous alert instance particular to the class of alerts, and providing the retrieved note via a user interface of the log management server.

Persistent alert notes

Some embodiments of the invention provide a novel method of managing network nodes that implement a logical multi-node application. The method can comprise obtaining log data describing events relating to a plurality of network nodes and obtaining network flow data describing flow of data between the plurality of network nodes. The method may identify roles performed by the network nodes. The method may detect relationships between the network nodes. The identified roles and the detected relationships are analyzed to identify which of the network nodes implement a logical multi-node application. Implementation data based on the identification of which of the network nodes implement the logical multi-node application can be processed to automatically control management of at least one of the network nodes.

Method and system for managing network nodes that implement a logical multi-node application

The present disclosure is related to devices, systems, and methods for preemptive alerts in a connected environment. An example device can include instructions to receive a log from a first log source, determine whether a pattern of events in the log exceeds an alert threshold of the first log source, wherein the pattern of events is associated with an event source, in response to the pattern of events exceeding the alert threshold, trigger an alert particular to the event source, and in response to the pattern of events exceeding the alert threshold, initiate a sensitivity threshold of a second log source that provides a same functionality as the first log source, wherein the sensitivity threshold is more sensitive than the alert threshold, and wherein the sensitivity threshold is particular to the event source.

Preemptive alerts in a connected environment

The present disclosure is related to devices, systems, and methods for routing requests for an external service, originating from a plurality of cluster nodes, through an outbound request manager. An example method can include receiving a first request for an external service originating from a first cluster node having a first network address, receiving a second request for the external service originating from a second cluster node having a second network address, transmitting the first request with a particular network address to an address associated with the external service, and transmitting the second request with the particular network address to the address associated with the external service.

Outbound request management

Example methods are provided for a host to perform traffic optimization for a multi-node application in a virtualized computing environment. The method may comprise: detecting, from the first virtualized computing instance supported by the host, a packet that includes header information identifying the second virtualized computing instance as a destination; and identifying that the first virtualized computing instance and second virtualized computing instance are configured to perform respective first role and second role to implement the multi-node application. The method may also comprise: based on one or more optimization factors, selecting the third virtualized computing instance that is also configured to perform the second role to replace the second virtualized computing instance; modifying the header information of the packet to identify the third virtualized computing instance as the destination; and sending the packet with modified header information to the third virtualized computing instance.

Traffic optimization for multi-node applications

The present disclosure is related to devices, systems, and methods for user interface customization. An example device can include instructions executable by a processor to receive indications of user actions with respect to an application, wherein the actions are made using a plurality of selectable elements of an interface, determine a user tendency based on the user actions, and provide a customized interface to the user based on the determined user tendency, wherein the customized interface includes at least one customized selectable element.

User interface customization based on user tendencies

Some embodiments of the invention provide a novel method of migrating virtualized computing instances (VCIs) that implement a multi-node application. The method may identify a plurality of VCIs that implement a multi-node application, each of the plurality of VCIs being executed on a respective source host, and may identify a role performed by each VCI of the identified plurality of VCIs. The method may also generate a plurality of batches, each batch of the plurality of batches including a set of the identified plurality of VCIs selected based on the identified role of each of the VCIs, and generate a migration sequence comprising an ordered sequence of the plurality of batches. The method may migrate the identified plurality of VCIs from its respective source host to a respective destination host according to the migration sequence.

Migrating virtualized computing instances that implement a logical multi-node application

The current document is directed to methods and systems that employ user feedback and user-initiated alert-generation-and-distribution-system modifications to provide for flexibility and responsiveness. In a described implementation, participants in a social environment provided by a collaborative alert-generation-and-distribution-system suggest modifications which are automatically or semi-automatically incorporated in an alert-generation-and-distribution-system when the participants agree to the suggested modifications.

Methods and systems that use feedback to distribute and manage alerts

Methods and systems adjust resources and monitoring configuration of a monitoring tool and auxiliary servers of a distributed computing system. Any new virtual object installed in the distributed computing system or change in functionality of an existing virtual object of the distributed computing system is identified. Expected configuration rules and resource allocation rules are determined for the virtual object. The expected configured rules are used to adjust a monitoring configuration of the monitoring tool. The resource allocation rules are used to adjust the infrastructure resources available to the monitoring tool. When the virtual object creates a change in demand for auxiliary services, corresponding auxiliary servers are installed, removed, or changed in the distributed computing system. Resource allocated rules and expected configuration rules are determined for the auxiliary servers and used to adjust the infrastructure resources and monitoring configuration of the monitoring tool. Methods optimize distributions of virtual objects.

Methods and systems to adjust a monitoring tool and auxiliary servers of a distributed computing system

Methods and system described herein are directed to identifying anomalous behaving components of a distributed computing system. Methods and system collect log messages generated by a set of event log source running in the distributed computing system within an observation time window. Frequencies of various types of event messages generated within the observation time window are determined for each of the log sources. A similarity value is calculated for each pair of event sources. The similarity values are used to identify similar clusters of event sources of the distributed computing system for various management purposes. Components of the distributed computing system that are used to host the event source outliers may be identified as potentially having problems or may be an indication of future problems.

Methods and systems to identify anomalous behaving components of a distributed computing system

The present disclosure is related to devices, systems, and methods for taking an action in response to detection of an unsupported language in a log. An example system can include instructions to analyze a log of a log source, detect an unsupported language in the log, and take an action in response to detecting the unsupported language in the log.

Taking an action in response to detecting an unsupported language in a log

Methods and systems are directed to quantifying and prioritizing the impact of problems or changes in a computer system. Resources of a computer system are monitored by management tools. When a change occurs at a resource of a computer system or in log data generated by event sources of the computer system, one or more of the management tools generates an alert. The alert may be an alert that indicates a problem with the computer system resource or the alert may be an alert trigger identified in an event message of the log data. Methods described herein compute an impact factor that serves as a measure of the difference between event messages generated before the alert and event messages generated after the alert. The value of the impact factor associated with an alert may be used to quantitatively prioritize the alert and generate appropriate recommendations for responding to the alert.

Methods and systems to prioritize alerts with quantification of alert impacts

An example method is provided for a computing device to perform access control for a user account. The method may include receiving a request for the user account to access a resource, wherein the resource is accessible via the computing device, and determining a permission set required to access the resource. The method may further include performing a bidirectional search to determine whether the user account is assigned to the permission set, the bidirectional search including a first search and a second search. In response to determination that the user account is included in a nested group membership that assigns the user account to the permission set based on the bidirectional search, the method may include permitting the user account to access the resource using the permission set.

Growing community of inventors

Yerevan, Armenia

Vardan Movsisyan