A system for alerting e-mail activity status. The system has at least one e-mail server for integrating N e-mail accounts, at least one second server communicating with the e-mail server adapted to monitor at the e-mail server; at least one computer readable medium (CRM) adapted to receiving an e-mail alert wherein the second server identifies activity status in the e-mail server according to a set of predetermined parameters. The second server alerts the CRM on the activity status. The parameters may consist of entries to e-mail accounts type of actions performed in an e-mail account and other activities and events. The invention further comprises methods of applying the aforementioned system.

A system for alerting e-mail activity status. The system has at least one e-mail server for integrating N e-mail accounts, at least one second server communicating with the e-mail server adapted to monitor at the e-mail server; at least one computer readable medium (CRM) adapted to receiving an e-mail alert wherein the second server identifies activity status in the e-mail server according to a set of predetermined parameters. The second server alerts the CRM on the activity status. The parameters may consist of entries to e-mail accounts type of actions performed in an e-mail account and other activities and events. The invention further comprises methods of applying the aforementioned system.

Systems, apparatuses, and methods are provided herein for network incident management. A method for network incident management comprises aggregating network metrics associated with a monitored network in a historical network data database, identifying incidents based on the network metrics, generating a training data set based on the network metrics and the incidents, wherein the training data set comprises time series of network metrics as training input and incidents as labels, training an incident model using the training data set, receiving real-time network metrics from the network via the network interface, determining an incident prediction based on the incident model using the real-time network metrics as input, and causing a user interface device to provide an alert to a user based on the incident prediction.

Systems, apparatuses, and methods are provided herein for network incident management. A method for network incident management comprises aggregating network metrics associated with a monitored network in a historical network data database, identifying incidents based on the network metrics, generating a training data set based on the network metrics and the incidents, wherein the training data set comprises time series of network metrics as training input and incidents as labels, training an incident model using the training data set, receiving real-time network metrics from the network via the network interface, determining an incident prediction based on the incident model using the real-time network metrics as input, and causing a user interface device to provide an alert to a user based on the incident prediction.

A failure effects estimating device includes an input unit that inputs a log and a traffic amount obtained from a communication system when an abnormality occurs, an estimating unit that estimates a failure effects amount in the communication system, on the basis of the log and the traffic amount, and an output unit that outputs the failure effects amount estimated by the estimating unit.

A failure effects estimating device includes an input unit that inputs a log and a traffic amount obtained from a communication system when an abnormality occurs, an estimating unit that estimates a failure effects amount in the communication system, on the basis of the log and the traffic amount, and an output unit that outputs the failure effects amount estimated by the estimating unit.

Some embodiments provide a method for identifying policy misconfiguration in a datacenter. Based on flow data received for a plurality of data compute nodes (DCNs) in the datacenter, the method determines that an anomalous amount of data traffic relating to a particular DCN has been dropped. The method uses (i) the received flow data for the particular DCN and (ii) a set of recent policy configuration changes to determine policy configuration changes that contributed to the anomalous amount of dropped data traffic relating to the particular DCN. The method generates an alert for presentation to a user indicating the anomalous amount of data traffic and the contributing policy configuration changes.

Computer program products, methods, and apparatuses, for providing and implementing the efficient detection of network component failures and restart conditions are described.

Computer program products, methods, and apparatuses, for providing and implementing the efficient detection of network component failures and restart conditions are described.

Machine data reflecting operation of a monitored system is ingested and made available for search by a data intake and query system (DIQS). A monitoring function may search the data ingested by the DIQS to determine instances of notable events in regards to the monitored system and may further determine a defined invokable action message (IAM) associated with a notable event instance. Processing ensues to send an IAM to a communications device used by support personnel. The IAM includes information about an action invocation message (AIM) suitable to cause the performance of an action that possibly remedies or improves an operational condition represented by the notable event. Support personnel engages a user interface representation corresponding to the AIM and the AIM is sent to a remedial node where performance of the action is invoked.