| 摘要 |
Alert management may include receiving, by a monitoring module from one or more disparate monitored sources, an alert, where the alert is a data structure that includes a plurality of fields; storing, by the monitoring module, the alert in a database; processing, by the monitoring module periodically at predefined intervals, the database, including identifying, in dependence upon a predefined ruleset, one or more alerts; storing, by the monitoring module, the identified alerts in a staging table, including creating, for each of the identified alerts, a primary key in dependence upon the fields of the identified alert; populating, by the monitoring module for each of the alerts stored in the staging table, one or more attribute fields of the alert in dependence upon the created primary key of the alert; and storing, by the monitoring module, the populated alerts in the database. |
| 主权项 |
1. A method of alert management, the method comprising:
receiving, by a monitoring module, from one or more disparate monitored computer system hardware component sources, an alert, wherein the alert comprises a data structure that includes a plurality of fields, the monitoring module logically disposed between the monitored sources and a ticket queuing module, wherein the monitoring module is automated computing machinery; storing, by the monitoring module, the alert in a database; processing, by the monitoring module periodically at predefined intervals, the database, including identifying, in dependence upon a predefined ruleset, one or more alerts, the ruleset comprising a specification of a combination of a source identifier, an alert type, and a timestamp; storing, by the monitoring module, the identified alerts in a staging table, including creating, for each of the identified alerts, a primary key in dependence upon the fields of the identified alert; populating, by the monitoring module for each of the alerts stored in the staging table, one or more attribute fields of the alert in dependence upon the created primary key of the alert, wherein the attribute fields comprise a field comprising one selected from the group consisting of:
a value indicating the alert is not to be passed along to the ticket queueing module,a value indicating the alert is to be passed along to the ticket queuing module with values of the attribute fields populated by the monitoring module, anda value indicating the alert is to be passed along to the ticket queuing module with attribute fields populated with default values from corresponding attribute fields of a persistent table; and storing, by the monitoring module, the populated alerts in the database for later selection and issuance as system maintenance tickets by the ticket queuing module, whereby all of receiving an alert, storing the alert in a database, processing the database, storing identified alerts in a staging table, populating fields, and storing populated alerts are carried out first in an overall process of alert and ticket processing, before the occurrence of any further selection for or issuance as system maintenance tickets. |
