An intermediate network node manages location data of mobile terminals in a wireless communication network and includes a processing unit and a memory, which contains instructions executable by the processing unit, whereby the network node is operative to establish connection with one or more mobility management nodes in the network, establish connection with any one of network nodes requesting location data indicating the location of at least one mobile terminal, receive a request for the location data indicating the location of the at least one mobile terminal from a requesting network node of said network nodes, obtain a set of location information indicating the location of the at least one mobile terminal from at least one of the mobility management nodes, produce the requested location data from the obtained set of location information, and provide the produced location data to the requesting network node of said network nodes.

Disclosed are an optimized alarm processing method and device, and an alarm associated information setting method, wherein the alarm processing method includes: a logic function module detecting an event which can trigger an alarm, and sending an alarm generation request to an alarm generation module; the alarm generation module determining alarm type, alarm path and level of the alarm triggered by the event in accordance with the alarm associated information stored in an alarm associated information storage module; if the determined alarm type is a correlated alarm, first inquiring an alarm memory module and judging whether the next level of alarm on the alarm path to which the correlated alarm belongs is reported or not, if not reported, generating and reporting the alarm; if reported, no generating or reporting the alarm.

A system for monitoring and visualization of network data includes a plurality of first devices and a second device coupled to the plurality of first devices over a network. Each first device is associated with corresponding ones of a plurality of ports. Each first device is configured to determine network traffic analysis information associated with a characteristic of network data traversing each of the ports, and to push the network traffic analysis information across a network independent of a solicitation from the network. The second device is configured to generate a map of the network including a visual indicator based on the network traffic analysis information, to receive an update of the network traffic analysis information from at least one of the first devices, and to refresh the visual indicator in real time to reflect the update of the network traffic analysis information.

In one embodiment, a device receives a plurality of network alerts over a time frame. A sliding transaction window is used across the time frame to associate each network alert occurring within the transaction window with one or more transactions. A pruning test is applied to subsets of the plurality of network alerts, with the network alerts in a given subset being associated with the same transaction. The pruning test is based in part on the number of co-occurrences of network alerts in a given subset for different transaction windows. The subsets of network alerts are assigned to network alert clusters based on the applied pruning test. The network alerts are then joined within a network alert cluster to identify the largest grouping of network alerts that pass the pruning test. A notification that the identified grouping of network alerts is associated with the same transaction is also provided.

Apparatuses, methods, and systems are disclosed for determining a network system issue. One method (900) includes a first network device determining (902) a system issue corresponding to at least one second network device. The first network device is an analytics entity in a cellular network and the at least one second network device is a managed entity in the cellular network, and the system issue comprises a software issue, a hardware issue, a compatibility issue, an issue with an interaction between a plurality of second network devices comprising the at least one second network device, an issue with an interaction between the at least one second network device and another device, or some combination thereof. The analytics entity comprises an entity that analyzes one or more devices to determine descriptive analytics, predictive analytics, and/or prescriptive analytics. The method (900) includes providing (904) a notification indicating the system issue.

A platform, apparatus and method for detecting that an IoT hub communication channel has become inoperative. For example, one embodiment of an IoT system comprises: an Internet of Things (IoT) hub comprising a network interface to couple the IoT hub to an IoT service over a first communication channel; at least one IoT device communicatively coupled to the IoT hub over a second communication channel; connection monitoring logic to detect when the first communication channel between the IoT service and the IoT hub has become inoperative; notification logic to transmit a notification to a data processing device of a user of the IoT system responsive to the connection monitoring logic detecting that the first communication channel has become inoperative.

According to one aspect of the present disclosure, a method and technique for correlating computing network events is disclosed. The method includes: receiving a plurality of events at an event manager residing on a host computing system; identifying a first resource associated with a first event; identifying a second resource associated with a second event; determining whether the first resource is associated with a deployment pattern; determining whether the second resource is associated with a deployment pattern; and responsive to determining that the first and second resources are each associated with a deployment pattern, correlating the first and second events responsive to the first and second resources being associated with a common deployment pattern.

An alert management system for a configuration management database (CMDB) platform includes a client instance configured to: apply a first filter of an alert rule to CMDB alerts to select a first alert based on context of the first alert and apply a second filter of the alert rule to the CMDB alerts to select a second alert based on context of the second alert, wherein the context of the first and second alerts includes details regarding the first and second alerts and associated configuration items (CIs). The client instance is also configured to: evaluate at least one condition of the alert rule using the context of the first and/or second alert; and in response to evaluating the at least one condition of the alert rule to be true, performing at least one action of the alert rule using the context of the first and/or second alert.

Technology is described for receiving an event notification produced by a source service. A negative cache may be searched for a cache entry for the event notification. The negative cache may be determined to not include the cache entry for the event notification. The event notification may be determined to satisfy a filter rule included in a filter rules table, which may indicate that the event notification is useful information for a destination service. The event notification may be transmitted to the destination service.

The present disclosure describes methods, computer-readable media, and apparatuses supporting management and resolution of alarms of a communication network. In one example, management and resolution may include receiving a new alarm, determining an alarm resolution of the new alarm based on the new alarm and historical alarm information, and initiating an alarm resolution action for resolving the new alarm based on the alarm resolution of the new alarm. In one example, management and resolution may include maintaining historical alarm information for a set of historical alarms, receiving a new alarm, determining a set of similar alarms including one or more of the historical alarms similar to the new alarm, determining an alarm resolution for the new alarm based on the set of similar alarms similar to the new alarm, and initiating an alarm resolution action for resolving the new alarm based on the alarm resolution of the new alarm.