Managing incident reports

摘要

The present disclosure describes methods, systems, and computer program products for managing incident reports can include receiving alert messages from multiple tenants and aggregating the alert messages into a reduced, correlated incident reports. For example, the method includes receiving, from a number of tenants, alert reports that represent at least one system alert incident associated with the tenants. The alert reports can be collected and analyzed for duplicate reports. The analysis for duplicate reports can include identifying a number of duplicate alert reports and correlating each identified duplicate alert reports into a correlated incident report. The correlated incident report can be aggregated into a summarized incident report for processing.

主权项

1. A computer-implemented method for managing system alert incidents, comprising:
receiving, from a plurality of tenants in at least one multi-tenant system, a plurality of alert reports, each alert report representing at least one system alert incident associated with the plurality of tenants in the at least one multi-tenant systems; analyzing, by a hardware processor, the plurality of alert reports for duplicate alert reports, wherein analyzing the plurality of received alert reports includes:
identifying duplicate alert reports, wherein identifying the duplicate alert reports comprises:
generating a hash code corresponding to each of the plurality of alert reports; andcomparing each of the generated hash codes with each of the other generated hash codes and previously-generated hash codes associated with previously received alert reports to identify duplicate alert reports having similar generated hash codes;correlating each duplicate alert report of the plurality of duplicate alert reports into a correlated incident report; andaggregating the correlated incident reports into at least one summarized incident report.