Alert Management System Using Generic Conceptual Data Model
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current event expert systems are inadequate in managing unexpected or unknown events and recurrent alerts in data centers, as they rely on outdated data models that do not match the concepts used by IT operators, leading to uncertainty and potential system performance issues.
Innovation Solution
A system and method that utilize a generic conceptual data model to automatically handle alerts by enriching information, identifying impacted components, and generating resolution actions, allowing for autonomous and adaptive alert management across data centers without requiring system reconfiguration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a generic conceptual data model is implemented to improve alert management, then adaptability to different data center environments is improved, but device complexity increases
Solution Approach 1:
The patent implements a generic conceptual data model that serves multiple functions across different data center environments. This model provides a unified framework for representing alert information, contextual data, and resolution actions that can be applied universally across various monitoring systems and data center configurations, thereby achieving adaptability without proportionally increasing complexity.
Solution Approach 2:
The generic conceptual data model acts as an intermediary layer between the event expert system and the operator console. It transforms and enriches alert information into a standardized format that bridges the gap between system-level technical data and operator-level conceptual understanding, facilitating easier integration across different environments.
2Measurement precision
If alert information is enriched with contextual data, then measurement precision of alert identification is improved, but loss of time for processing increases
Solution Approach 1:
The system performs preliminary enrichment of alert information by pre-defining the structure of the generic conceptual data model and pre-establishing relationships between alert attributes, contextual data, and resolution actions. This preparation work is done in advance so that when alerts are generated, the enrichment process can proceed efficiently using pre-configured templates and rules.
Solution Approach 2:
The alert enrichment process is automated through the event expert system itself, which automatically extracts contextual information from available data sources and populates the generic conceptual data model without requiring manual intervention. The system serves itself by autonomously completing the enrichment task that would otherwise require operator time.
3Ease of operation
If automatic decision-making is implemented to reduce operator workload, then ease of operation is improved, but reliability of decision-making may worsen due to lack of human judgment
Solution Approach 1:
The system implements feedback mechanisms where the event expert system continuously monitors alert patterns, resolution outcomes, and system performance. This feedback loop allows the system to learn from past decisions and operator actions, refining its automatic decision-making capabilities over time while maintaining reliability through continuous validation against actual results.
Solution Approach 2:
The generic conceptual data model serves as an intermediary that structures alert information in a way that enhances both automatic processing and human judgment. By standardizing the representation of alert data, the model enables reliable automated analysis while preserving the ability for operators to review and override decisions when necessary, combining machine efficiency with human expertise.
Data Source
AI summary
A system and related method for automating alert decision-making in a computer network are disclosed. The system and method act to receive an alert request from an event management system, and then carries out operations using several sets of inference rules, associating the alert request to a generic conceptual data model of alert request and alert resolution. The generic model is specialized to represent the specific environment being monitored. The alert request is enriched with contextual and network information in order to generate one or several alert resolution actions.