Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

This application provides example detection block sending and receiving methods, and network devices and systems. One example detection block sending method includes obtaining, by a network device, an original bit block data flow. At least one detection block is generated, and the at least one detection block is inserted into a position of at least one idle block in the original bit block data flow. The bit block data flow including the at least one detection block is then sent.

The present disclosure facilitates improving the operation of a cloud service by updating its configuration information and its resource requirements. The resource utilization of the cloud service can be monitored, and a decision logic module can determine whether action is required. When action is required, an update can be prepared and applied, and notifications can be generated about the condition and its resolution. Resolutions can require correlation of multiple cloud services to provide real-time access to information that is not otherwise available to a single entity. Resolutions can be learned and predicted in a number of ways using a predictive engine.

A recovery support apparatus includes an index value calculation means which calculates a predetermined index value with respect to a recovery work sequence on the basis of the recovery work sequence indicating a work procedure for recovery from an abnormality that has occurred in an apparatus group constituting a communication network, and an output means which outputs the index value calculated by the index value calculation means to a predetermined output destination.

In various embodiments, the techniques and supporting systems implement a recursive routing mechanism in hierarchical topological addressed environments to analyze and determine the presence of packet-forwarding errors within an IP network comprising a plurality of network-connected devices. This includes receiving, at a software defined network device, an indication of a potential packet-forwarding error between a first and second device of the plurality of network-connected devices and injecting, by the software defined network device, a test packet at an ingress to the first device. The test packet includes an initial ingress interface location identifying the first device, an alternate ingress interface location identifying the software defined network device and an egress interface location identifying the second device. A determination may then be made as to whether the test packet is received at the second device, thus indicating the existence or lack of routing errors.

Provided is a client terminal access control method, and the method includes: allocating a communication process of a first client group comprising a plurality of client terminals to an edge server; when a failure occurs in an operation of the edge server, allocating a communication process of a second client group comprising at least one client terminal belonging to the first client group to a failure-handling edge server; and determining whether a failure occurs in an operation of the failure-handling edge serve.

Generally described, systems and methods are provided for monitoring and detecting causes of failures of network paths. The system collects performance information from a plurality of nodes and links in a network, aggregates the collected performance information across paths in the network, processes the aggregated performance information for detecting failures on the paths, analyzes each of the detected failures to determine at least one root cause, and initiates a remedial workflow for the at least one root cause determined. In some aspects, processing the aggregated information may include performing a statistical regression analysis or otherwise solving a set of equations for the performance indications on each of a plurality of paths. In another aspect, the system may also include an interface which makes available for display one or more of the network topology, the collected and aggregated performance information, and indications of the detected failures in the topology.

Methods and systems for managing health of devices in an Internet of Things (IoT) environment. A method includes detecting an occurrence of at least one event on a device of a plurality of devices and determining a change in ambience in the device. The method also includes detecting at least one anomaly in the device if the determined change in the ambience of the at least one device does not satisfy threshold criteria determined for the at least one event. The method further includes determining at least one root cause for the at least one anomaly detected in the device.

Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

An information processing device capable of reducing an amount of data to be monitored in an onboard system is provided. The information processing device obtains a first log including, per unit time, some communication data flowing through the onboard system. The information processing device determines whether an abnormality is included in the communication data, using the first log. In a case where the abnormality is included in the communication data, the information processing device outputs first detection results to the onboard system. The first detection results cause transmission of a second log from the onboard system. The second log includes, per the unit time, more of the communication data than the first log.