Feedback-based symptom and condition correlation

摘要

Feedback data can be received from client agents running on client computer systems. The feedback data can include data on the symptoms and conditions for rules that relate computer system symptoms to computer system conditions. The feedback data can be analyzed to produce correlation information that quantifies a degree of correlation between the symptom(s) and condition(s) related by the rule(s). It may be determined whether analysis of the feedback data warrants including one of the rules in correlation mappings to be applied to monitored computer systems. If so, then that rule can be included in the mappings. Information representing the correlation mappings may be transmitted to the monitored computer system(s). Additionally, information representing the correlation mappings may be transmitted to the monitored computer system(s), and types of feedback data collected from the client agents can be altered on the basis of the correlation information.

主权项

1. A computer-implemented method, comprising:
receiving user input, the user input identifying one or more rules, each of the one or more rules relating one or more computer system symptoms to one or more computer system conditions; receiving feedback data from a plurality of client agents running on a plurality of client computer systems, the feedback data including data indicating presence of the one or more symptoms in the client computer systems for each of the one or more rules and indicating presence of the one or more conditions in the client computer systems for each of the one or more rules; analyzing the feedback data to produce correlation information for each of the one or more rules, the correlation information quantifying a degree of correlation between presence of the one or more symptoms and presence of the one or more conditions related by each of the one or more rules, the one or more rules comprising a set of one or more correlation mappings; generating computer support information derived from at least one of the one or more rules; transmitting one or more mapping representations to a set of monitored computer systems, the one or more mapping representations including instructions that, when executed in the set of monitored computer systems, apply the set of one or more correlation mappings to the set of monitored computer systems; receiving an alert if one of the mappings is met in a monitored computer system in the set of monitored computer systems; refining the set of correlation mappings, the refinement being based on analysis of additional feedback data received from the set of monitored computer systems; and altering types of feedback data collected from the plurality of client agents, the alteration being based on the correlation information.