Systems and methods for monitoring and acting on logged system messages

摘要

A computer operations center that has a number of computing systems, where each computing system issues system messages regarding such computing system. Each issued system message from each computing system is stored in a message logging database. The system messages stored in the message logging database are monitored for predetermined patterns, and upon detecting a particular pattern in the system messages, a predetermined action corresponding to the detected pattern is taken. The detected pattern anticipates an occurrence of an unwanted system event, and the corresponding action is intended to prevent or at least minimize the unwanted system event.

主权项

1. A method with regard to a computer operations center having a plurality of computing systems, the plurality of computing systems issuing system messages that are stored in a message logging database, the method comprising:
monitoring the system messages stored in the message logging database for a predetermined pattern in the system messages; detecting a particular pattern in the system messages; querying the message logging database for relevant messages; computing a statistic based on the relevant messages; obtaining, from the detected pattern, a first threshold and a first action to be taken if the first threshold is surpassed by the statistic, wherein the detected pattern further includes a second threshold, and a third threshold; and acting in response to the detected pattern by taking a predetermined action corresponding to the detected pattern that anticipates an occurrence of an unwanted system event, the predetermined action intended to prevent or at least minimize the unwanted system event, wherein the predetermined action corresponding to the detected pattern includes the first action to be taken if the first threshold is satisfied, a second corresponding action to be taken if the second threshold is satisfied, and a third corresponding action to be taken if the third threshold is satisfied, and wherein the first corresponding action, the second corresponding action, and the third corresponding action are each different from each other.