A method and apparatus for providing trouble isolation are disclosed. For example, the method monitors a plurality of sessions for a user group for detecting an abnormal cause code associated with the user group, determines a root cause for the abnormal cause code when a deviation is determined to have occurred for the cause code of the user group, wherein the root cause identifies either an issue associated with the communications network or an issue associated with user endpoint devices of the user group, and generates a ticket indicating the root cause.

A method and apparatus for providing trouble isolation are disclosed. For example, the method monitors a plurality of sessions for a user group for detecting an abnormal cause code associated with the user group, determines a root cause for the abnormal cause code when a deviation is determined to have occurred for the cause code of the user group, wherein the root cause identifies either an issue associated with the communications network or an issue associated with user endpoint devices of the user group, and generates a ticket indicating the root cause.

A method of identification and remediation of a mass event in a managed network. The method includes receiving a first report of an event occurring at a first endpoint of the managed network. In response, a first action is performed. The first action being initiated based on a repeating event trigger not being triggered. The method includes receiving a second report of the event occurring at a second endpoint. In response, the method includes determining whether a threshold that triggers the repeating event trigger is exceeded. The threshold being indicative of a mass event in the managed network. Responsive to the threshold being exceeded, the method includes triggering the repeating event trigger and performing a second automated resolution action in the managed network. The second action being different from the first action. Responsive to the threshold not being exceeded, the method includes performing the first action at the second endpoint.

A system and method for automatically and algorithmically resolving service tickets through the utilization of historical solution data obtained from multiple sources. The system and method are optionally capable of providing and executing a BOT capable of implementing one or solutions based on the automatic and algorithmic recommendation of a solution to resolve the service ticket(s).

A system and method for automatically and algorithmically resolving service tickets through the utilization of historical solution data obtained from multiple sources. The system and method are optionally capable of providing and executing a BOT capable of implementing one or solutions based on the automatic and algorithmic recommendation of a solution to resolve the service ticket(s).

Disclosed is a network management system that provides an interface to enable diagnostics and troubleshoot of a remotely managed multi-site network. Some embodiments provide a natural language interface, while other embodiments provide a chatbot type interface that communicates with a technician via traditional text information on a display screen. The diagnostic and troubleshooting capabilities search a central data store that receives device property information from each site of the multi-site network. Based on devices or users that match portions of the entity, queries to the data store are initiated to obtain additional data on the devices. A response to the query is then provided based on the properties of the devices.

Disclosed is a network management system that provides an interface to enable diagnostics and troubleshoot of a remotely managed multi-site network. Some embodiments provide a natural language interface, while other embodiments provide a chatbot type interface that communicates with a technician via traditional text information on a display screen. The diagnostic and troubleshooting capabilities search a central data store that receives device property information from each site of the multi-site network. Based on devices or users that match portions of the entity, queries to the data store are initiated to obtain additional data on the devices. A response to the query is then provided based on the properties of the devices.

A trouble ticket may contain various details of an observed issue and information of the actual issue which is hidden in the trouble ticket description along with other information. Embodiments herein describe an algorithm of algorithms (AoA) layer approach for extracting issues from trouble ticket descriptions. The method identifies the type of trouble ticket whether it is machine generated or user generated trouble tickets and accordingly selects the appropriate algorithm for issue extraction. It selects a relevant algorithm for the machine generated trouble tickets, and user generated trouble tickets based on trouble ticket data properties, historical performance, and a user feedback. It identifies right mix of columns from a service catalog to be used for matching based on presence of weighted keywords in the input data and identifies high-weighted keywords from input data descriptions and compares them with selected columns from catalog to generate accurate matches with their similarity score.

A framework for security information and event management (SIEM), the framework includes a first data store; a data router; one or more parsing mechanisms; one or more correlation machines; and one or more workflow engines, wherein said framework performs SIEM on behalf of multiple subscribers to said framework.

A framework for security information and event management (SIEM), the framework includes a first data store; a data router; one or more parsing mechanisms; one or more correlation machines; and one or more workflow engines, wherein said framework performs SIEM on behalf of multiple subscribers to said framework.