The invention relates to coordination of network function, NF, consumers subscribing to analytics events from a second network node. According to embodiments of the invention procedures for suppressing the notification related to an analytics event for specific NF consumers are introduced. The procedures are performed between a first network node and the second network node, where the first network node 100 may be seen as a controlling function and the second network node may be seen as a controlled function. The procedures are based on a list of NF consumers subscribing to an analytics event and their respective notification status associated with the analytics event. Depending on the list of NF consumers, the second network node may transmit or suppress notifications associated with the analytics event to the NF consumers.

An example operation may include a system, comprising one or more of: receiving a status failure notification for a VNFCI, retrieving a peer VNFCI admin state and a peer VNFCI operational state, taking no action when one or more of: the peer VNFCI admin state is not online, the peer VNFCI is not reachable, and the peer VNFCI operational state is active, retrieving current issues reported on resources associated with the peer VNFCI when one or more of: the peer VNFCI admin state is online, the peer VNFCI is reachable, and the peer VNFCI operational state is not active, sending a state change request message with an active state to the peer VNFCI when the current issues do not exist, and starting a retry timer for the peer VNFCI.

An example operation may include a system, comprising one or more of: receiving a status failure notification for a VNFCI, retrieving a peer VNFCI admin state and a peer VNFCI operational state, taking no action when one or more of: the peer VNFCI admin state is not online, the peer VNFCI is not reachable, and the peer VNFCI operational state is active, retrieving current issues reported on resources associated with the peer VNFCI when one or more of: the peer VNFCI admin state is online, the peer VNFCI is reachable, and the peer VNFCI operational state is not active, sending a state change request message with an active state to the peer VNFCI when the current issues do not exist, and starting a retry timer for the peer VNFCI.

Techniques are described for monitoring network performance and managing network faults in a computer network. A cloud-based network management system stores path data received from a plurality of network devices operating as network gateways for an enterprise network, the path data collected by each network device of the plurality of network devices for one or more logical paths of a physical interface from the network device over a wide area network (WAN). The network management system determines, based on the path data, one or more WAN link health assessments, wherein the one or more WAN link health assessments include a success or failure state associated with one or more of service provider reachability, physical interface operation, or logical path performance; and in response to determining the at least one failure state, outputs a notification including identification of a root cause of the at least one failure state.

Techniques are described for monitoring network performance and managing network faults in a computer network. A cloud-based network management system stores path data received from a plurality of network devices operating as network gateways for an enterprise network, the path data collected by each network device of the plurality of network devices for one or more logical paths of a physical interface from the network device over a wide area network (WAN). The network management system determines, based on the path data, one or more WAN link health assessments, wherein the one or more WAN link health assessments include a success or failure state associated with one or more of service provider reachability, physical interface operation, or logical path performance; and in response to determining the at least one failure state, outputs a notification including identification of a root cause of the at least one failure state.

A method for calculating a communication time between a first and second devices includes: adding, to a first packet, first timer information indicating an elapsed time from activation of the first device, and transmitting the first packet; transmitting notification information including the first timer information and second timer information indicating an elapsed time from activation of the second device; transmitting a second packet including the first and second timer information, third timer information indicating an elapsed time from activation of the second device, and first time information indicating a time in the second device; and calculating a communication time from the first device to the second device based on the first timer information, the second timer information, the third timer information, and the first time information, fourth timer information indicating an elapsed time from activation of the first device, and second time information indicating a time in the first device.

At least one aspect is directed to the monitoring and management of in-home broadband subscriber computer networks allowing for automatic network issue detection and resolution. The systems and methods described herein can monitor the network utilization, subscriber information, and subscriber devices using protocols such as TR-069 and SNMP. The systems described herein are service provider and vendor agnostic, being compliant with the TR-098 and TR-131 protocols to allow for remote management, diagnosis, and configuration of subscriber devices. The systems and methods described herein can reduce the number of home visits by service provider technicians by providing a remote network management solution capable of automatically diagnosing and resolving network issues with an issue detection model. The system can be non-intrusive and executed from a cloud computing environment to allow access to millions of devices.

At least one aspect is directed to the monitoring and management of in-home broadband subscriber computer networks allowing for automatic network issue detection and resolution. The systems and methods described herein can monitor the network utilization, subscriber information, and subscriber devices using protocols such as TR-069 and SNMP. The systems described herein are service provider and vendor agnostic, being compliant with the TR-098 and TR-131 protocols to allow for remote management, diagnosis, and configuration of subscriber devices. The systems and methods described herein can reduce the number of home visits by service provider technicians by providing a remote network management solution capable of automatically diagnosing and resolving network issues with an issue detection model. The system can be non-intrusive and executed from a cloud computing environment to allow access to millions of devices.

A network traffic correlation engine monitors inbound and/or outbound connection information received from on each host computer system on a network. Each host device on the network store data logs corresponding to information corresponding to communications sent by the device and received by the device. The network traffic correlation engine correlates connections between different hosts throughout the network. If the network traffic correlation engine identified unmatched outbound and inbound connections, the network traffic correlation engine generates an alert to initiate further investigation and may also provide a mapping of the communications showing a possible start device for the connection and/or a type of access that the connections may now be providing.

A network traffic correlation engine monitors inbound and/or outbound connection information received from on each host computer system on a network. Each host device on the network store data logs corresponding to information corresponding to communications sent by the device and received by the device. The network traffic correlation engine correlates connections between different hosts throughout the network. If the network traffic correlation engine identified unmatched outbound and inbound connections, the network traffic correlation engine generates an alert to initiate further investigation and may also provide a mapping of the communications showing a possible start device for the connection and/or a type of access that the connections may now be providing.