Dynamic Event Suppression for Storage Log Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for managing event logs in computer and storage environments face challenges with excessive event generation, leading to log overflow and loss of critical information, as conventional methods like truncation or rotation are inadequate in dynamically handling varying event frequencies and importance.
Innovation Solution
A method and system for dynamically suppressing events by identifying high-frequency recurring events, modifying delivery parameters, and selectively eliminating redundant event information, allowing for real-time adjustment of event generation based on configuration settings to manage log growth and prioritize important events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If conventional log management methods (truncation, rotation, tailing) are used, then log size is controlled, but critical event information is lost and troubleshooting capability deteriorates
Solution Approach 1:
The patent changes the parameter of event delivery by introducing suppression rules that dynamically control whether events are delivered to support systems. Instead of uniformly truncating or rotating logs, the system selectively suppresses specific event types based on configuration parameters, allowing log size control while preserving critical information.
Solution Approach 2:
The patent segments events into different categories and applies different delivery rules to each segment. By dividing events into suppressible and non-suppressible categories, the system can control log size for specific event types while maintaining complete information for critical events, thus resolving the contradiction between log size control and information preservation.
2Reliability
If all events are delivered to support systems, then complete monitoring is achieved, but system complexity and processing overhead increase
Solution Approach 1:
The patent extracts and removes unnecessary event information from the delivery stream by applying suppression rules. Events that match suppression criteria are filtered out before being sent to support systems, reducing the volume of data processed while maintaining delivery of critical events, thus simplifying the support system without compromising monitoring reliability.
Solution Approach 2:
The patent introduces dynamic event suppression where delivery parameters can be adjusted based on system conditions, event types, and priority levels. This dynamic approach allows the system to adaptively control event delivery, reducing complexity for routine events while maintaining complete monitoring for critical situations.
3Ease of operation
If event delivery parameters are fixed by default, then system operation is simple, but adaptability to different event frequencies and importance levels is reduced
Solution Approach 1:
The patent creates a universal event delivery framework that can handle multiple event types with different priorities and frequencies through a single configurable suppression mechanism. The default parameters provide simple operation, while the configurable parameters enable adaptability to various scenarios, making the system multi-functional.
Solution Approach 2:
The patent establishes default event delivery parameters in advance that work for general scenarios, providing simple operation. Configuration files or administrative interfaces allow preliminary setup of suppression rules for specific event types, enabling the system to adapt to different event frequencies and importance levels without complicating routine operation.
Data Source
AI summary
A method and system for managing and dynamically suppressing event notification is provided. The method and system receives an indication of an event from a storage environment to be processed by a support system according to a set of default delivery parameters. Next, the method and system determines if one or more event specific delivery parameters have been associated with the event. If this is the case, then the method and system modifies the default delivery parameters for the information associated with the event according to the one or more event specific delivery parameters. These event specific delivery parameters are also used to determine when to transmit a notification of the event to the support system. The dynamic suppression of events combines events gathered into an event log together into a set of one or more recurring events. From these events, the method and system then identifies a high frequency subset as one or more recurring events considered to occur at a higher frequency compared with a low frequency subset having one or more recurring events that occur at a lower frequency. Based on this information gathered, the method and system then eliminates a portion of the events in the high frequency subset until the frequency of events in the high frequency subset approximates the frequency of events in the low frequency subset.