H04L41/0613

EMS resolution of split-brain virtual network function components

An example operation may include a system, comprising one or more of receiving a virtual network function component instance (VNFCI) status notification resumption message with an active state when a peer VNFCI operational state is active, retrieving a timestamp of a VNFCI state change to an active state from an element VNFCI state database, retrieving a timestamp of a peer VNFCI state change to active from an element VNFCI state database, sending one or more of: a request to a virtual network function manager (VNFM) to determine if the VNFCI network is isolating while an operating state was active, and a request to the VNFM to determine if the peer VNFCI network is isolating while an operating state was active, sending a state change request with standby state to the peer VNFCI when the VNFCI is not network isolated and the peer VNFCI is network isolated, and a VNFM response is received regarding the VNFCI, a timeout response from the VNFM, and a VNFM response is received regarding the peer VNFCI, and sending a state change request with standby to the VNFCI with one or more of: the VNFCI network isolate and peer VNFCI is not network isolated, and the VNFCI is network isolated or the peer VNFCI is not network isolated, and the VNFCI is not network isolated and the peer VNFCI is network isolated and the VNFCI is in preferred standby.

Composite display of multi-sourced IT incident related information

An application executing on a mobile computing platform provides independent data channels over a mobile network to multiple separate computing systems that each maintain some data pertinent to problem determination and resolution when an incident arises in a monitored information technology (IT) environment. The application maintains and separately exercises the channels to provide timely information in a user interface that composites data to present a single interface with a multi-sourced contextual rendering. Some systems may include an IT monitoring system and a separate incident management system among its sources. Channels may include extended functionality to improve security or other aspects of communication with mobile platforms.

Change management system with monitoring, alerting, and trending for information technology environment

An information technology (IT) network includes configuration items (CIs) that may constantly change, where the CIs describe hardware components or software components that are configured to operate on the IT network. A system comprising a server can determine a change associated with a CI, send, to a configuration management database (CMDB), a message that updates the CMDB based on the determined change associated with the CI, determine, for the CI, a monitor configuration that describes one or more variables and corresponding one or more parameters with which the CI is to be monitored, and send the CI with the monitor configuration to a plurality of monitoring software tools operating on a plurality of servers, where each monitoring software tool is configured to monitor the CI based on the monitor configuration.

Problem detection and categorization for integration flows
11601326 · 2023-03-07 · ·

A system and method to determine an event for an executing integration flow defining how messages are passed between a sender system and a receiver system; determine message processing states of messages of the integration flow before an event time; determine message processing states of messages of the integration flow after the event time; determine, based on an evaluation of failed message processing states for the messages before and after the event time, whether the event is associated with a problem; assign, in response to the determination that the event time is associated with a problem, one or more categories to the problem; and store a record of the assignment of the one or more categories to the problem.

RAPID APPRAISAL OF NIC STATUS FOR HIGH-AVAILABILITY SERVERS

An information handling system includes a network interface device configured to provide indications of faults on the network interface device, a baseboard management controller agent configured to receive the indications, and a baseboard management controller coupled to a management system. The management system mitigates the faults on the network interface device. The network interface device further detects a fault on the network interface device and provides an indication to the baseboard management controller agent in response to detecting the fault. The baseboard management controller agent further receives the indication from the network interface device, receives an identification of the management system from the baseboard management controller, and provides a second indication to the management system based upon the identification.

Monitoring user experience using data blocks for secure data access

Techniques for enabling secure access to data using data blocks is described. Computing device(s) can provide instruction(s) to a component associated with an entity, wherein the instruction(s) are associated with an identifier corresponding to a data block of a plurality of data blocks. The computing device(s) can receive, from the component, data associated with the component, wherein the data is associated with the identifier and is indicative of a state of the component. The computing device(s) can store the data in the data block and monitor, using rule(s), changes to the state of the component based at least partly on the data in the data block. As a result, techniques described herein enable near real-time—and in some examples, automatic—reporting and/or remediation for correcting changes to the state of the component using data that is securely accessed by use of data blocks.

Auto Pause Incident Notification

Pausing alert notifications includes triggering an alert responsive to an event in a managed environment. A normalized title is obtained from a title of the alert. Using the normalized title, it is determined whether the alert is of a likely transient type, where the alert is of the likely transient type when it is predicted to resolve without human intervention. A transmission of notifications for the alert during a pause period is withheld responsive to determining that the alert is the likely transient type. A notification for the alert is transmitted to a responder responsive to determining that the alert is unresolved after the pause period.

VIRTUALIZING PRECISE EVENT BASED SAMPLING

A core includes a memory buffer and executes an instruction within a virtual machine. A processor tracer captures trace data and formats the trace data as trace data packets. An event-based sampler generates field data for a sampling record in response to occurrence of an event of a certain type as a result of execution of the instruction. The processor tracer, upon receipt of the field data: formats the field data into elements of the sampling record as a group of record packets; inserts the group of record packets between the trace data packets as a combined packet stream; and stores the combined packet stream in the memory buffer as a series of output pages. The core, when in guest profiling mode, executes a virtual machine monitor to map output pages of the memory buffer to host physical pages of main memory using multilevel page tables.

MANAGING LARGE VOLUMES OF EVENT DATA RECORDS

A network device that operates as an analysis platform for analysis of event data records that can provide a flexible approach to event data record aggregation. For example, aggregation can be flexibly turned on or off and dynamically adjusted based on event record volume and other factors such as network capacity or throughput. Devices that are instructed to aggregate records can also be instructed to archive the raw records, e.g., to maintain a full fidelity log of events. Devices can further be instructed to utilize a mixed queue approach to determine an order to deliver those records that includes both older records and newer records.

NEGATIVE CACHING FOR EVENT NOTIFICATIONS
20220360487 · 2022-11-10 ·

Technology is described for receiving an event notification produced by a source service. A negative cache may be searched for a cache entry for the event notification. The negative cache may be determined to not include the cache entry for the event notification. The event notification may be determined to satisfy a filter rule included in a filter rules table, which may indicate that the event notification is useful information for a destination service. The event notification may be transmitted to the destination service.