Determining alert criteria in a network environment

摘要

Alert conditions datasets are created from historic data taken from actual incidents for which the alert condition datasets are to indicate during future operations. A networked computers system including various devices is monitored for alert conditions associated with one, or more, of the devices. The severity of an alert is based on the number of alert conditions met for a given alert conditions dataset.

主权项

1. A method comprising:
collecting a set of baseline conditions for at least one system component during operation of a computer system when no existence of alert conditions are identified; determining a time range for a first instance of an incident in the computer system; collecting a set of collected conditions of at least one component of the computer system; and deriving a set of alert conditions for the incident from the set of collected conditions; wherein: existence of the incident inhibits functionality of the at least one component of the computer system; the set of collected conditions were present during the time range; and at least the collecting and deriving steps are performed by computer software running on computer hardware.