Network monitoring and diagnostics

摘要

Techniques are provided for monitoring and diagnosis of a network comprising one or more devices. In some embodiments, techniques are provided for gathering network information, analyzing the gathered information to identify correlations, and for diagnosing a problem based upon the correlations. The diagnosis may identify a root cause of the problem. In certain embodiments, a computing device may be configurable to determine a first event from information, allocate a first event to a first cluster, the first cluster is from one or more clusters of events, based on a set of attributes for the first event, and determine a set of attributes for the first cluster, and rank the first cluster against the other clusters from the one or more clusters of events based on the set of attributes for the first cluster. The set of attributes may be indicative of the relationship between events in the cluster. In some embodiments, one or more recommendations may be provided for taking preventative or corrective actions for the problem.

主权项

1. A computing device comprising one or more processing units configured to:
determine a first event from information; allocate the first event to a first cluster from one or more clusters of events, based on a set of attributes associated with the first event, the set of attributes comprising:
location information indicative of a location in a network where the first event occurred; andtime information indicative of a time when the first event occurred in the network; determine a set of attributes for the first cluster; and rank the first cluster against other clusters from the one or more clusters of events based on the set of attributes for the first cluster and a set of attributes for the other clusters from the one or more clusters, wherein a timestamp of a last event added to each cluster is one of the set of attributes for each cluster from the one or more clusters.