Abstract: One embodiment provides a method including: collecting system log files comprising a plurality of log messages representing activity within the system; generating a plurality of message templates by (i) clustering the plurality of messages into groups having similar activity patterns and (ii) generating a message template for each of the groups; identifying message templates of interest and determining the message templates representing actual end-user events as opposed to system events, wherein the determining comprises (i) identifying a seed set of event types that represent known end-user events based upon identifying the event as being known to be initiated by a user and (ii) correlating the event to the known end-user event based upon a time correlation between the known end-user event and the event within the message template of interest.

Abstract: One embodiment provides a method including: collecting, from a plurality of collaborative computing systems, system log files comprising a plurality of log messages representing activity within the system, wherein the activity within the system corresponds to system activity and end-user activity; generating a plurality of message templates, each of the plurality of message templates representing an event type by clustering the plurality of messages into groups having similar activity patterns; identifying, from the plurality of message templates, a subset of message templates representing potential end-user events; differentiating end-user events from system events, in the subset of message templates representing potential end-user events, comprising identifying a seed set of event types that represent known end-user events and correlating potential end-user events remaining after identifying the seed set of event types with the known end-user events; and grouping, based upon the differentiating, the event t

Abstract: One embodiment provides a method including: collecting system log files comprising a plurality of log messages representing activity within the system; generating a plurality of message templates by (i) clustering, using a clustering algorithm, the plurality of messages into groups having similar activity patterns and (ii) generating a message template for each of the groups; identifying message templates of interest, wherein a message template of interest comprises a template that potentially represents end-user events; and determining, within the message templates of interest, the message templates representing actual end-user events as opposed to system events, wherein the determining comprises (i) identifying a seed set of event types that represent known end-user events based upon identifying the event as being known to be initiated by a user and (ii) correlating the event to the known end-user event based upon a time correlation between the known end-user event and the event within the message template

Abstract: One embodiment provides a method including: collecting, from a plurality of collaborative computing systems, system log files comprising a plurality of log messages representing activity within the system, wherein the activity within the system corresponds to system activity and end-user activity; generating a plurality of message templates, each of the plurality of message templates representing an event type by clustering the plurality of messages into groups having similar activity patterns; identifying, from the plurality of message templates, a subset of message templates representing potential end-user events; differentiating end-user events from system events, in the subset of message templates representing potential end-user events, comprising identifying a seed set of event types that represent known end-user events and correlating potential end-user events remaining after identifying the seed set of event types with the known end-user events; and grouping, based upon the differentiating, the event t

Abstract: A policy-based data management system, method, and apparatus are disclosed. The system, method, and apparatus are configured to operate over a distributed storage system such as a storage area network (SAN). Files to be stored on the network are each assigned a service class and a storage pool based on the application of policies to file attributes such as file name, type, user, etc. The service class and storage pool designations are stored as metadata. Files may be retrieved using the metadata to identify the storage pool where the file is stored, and the service class listed within the metadata may be used to control the manner in which the file is handled. A metadata server may be utilized to provide the appropriate service class of files in response to requests from remote clients that may be of different computing platforms.

Abstract: An apparatus, system, and method are disclosed for determining prefetch data. A start module communicates a start of a target software process to a storage device. A learning module learns data blocks accessed for the target software process. In one embodiment, a prefetch module prefetches the learned data blocks in response to the start of the target software process. An end module communicates the end of the target software process to the storage device. In one embodiment, the prefetch module terminates prefetching data blocks and the learning module terminates learning the data blocks accessed for the target software process in response to the end module's communication of the end of the target software process.

Abstract: According to the present invention, there is provided a SAN management system to provide autonomic management of a storage system using an action-centric approach. The SAN management system includes a policy specification logic block to maintain a policy specification associated with the managed system. In addition, the SAN management system includes a reasoning logic block to provide for the determining of action rules using a combination of logic and information obtained from the policy specification. Also, the SAN management system includes a learning logic block to couple the policy specification logic block with the reasoning logic block to improve an understanding of a managed system. The learning is continuous and provides for autonomic evolvement of the system in which reliance on manual input from a user is lessened.

Abstract: According to the present invention, there is provided a SAN management system to provide autonomic management of a storage system using an action-centric approach. The SAN management system includes a policy specification logic block to maintain a policy specification associated with the managed system. In addition, the SAN management system includes a reasoning logic block to provide for the determining of action rules using a combination of logic and information obtained from the policy specification. Also, the SAN management system includes a learning logic block to couple the policy specification logic block with the reasoning logic block to improve an understanding of a managed system. The learning is continuous and provides for autonomic evolvement of the system in which reliance on manual input from a user is lessened.

Abstract: According to the present invention, there is provided a SAN management system to provide autonomic management of a storage system using an action-centric approach. The SAN management system includes a policy specification logic block to maintain a policy specification associated with the managed system. In addition, the SAN management system includes a reasoning logic block to provide for the determining of action rules using a combination of logic and information obtained from the policy specification. Also, the SAN management system includes a learning logic block to couple the policy specification logic block with the reasoning logic block to improve an understanding of a managed system. The learning is continuous and provides for autonomic evolvement of the system in which reliance on manual input from a user is lessened.

Abstract: A disk caching method for an intermediary controller is disclosed. Requests for data blocks are made and then disk caching is performed according to a most expedient cache method. The disk caching method may be performed by asynchronously requesting a data record from both a intermediary controller disk storage and from a intermediary controller cache and using a first received copy of the data record, the first received copy being a copy received first from the intermediary controller disk storage.

Abstract: A policy-based data management system, method, and apparatus are disclosed. The system, method, and apparatus are configured to operate over a distributed storage system such as a storage area network (SAN). Files to be stored on the network are each assigned a service class and a storage pool based on the application of policies to file attributes such as file name, type, user, etc. The service class and storage pool designations are stored as metadata. Files may be retrieved using the metadata to identify the storage pool where the file is stored, and the service class listed within the metadata may be used to control the manner in which the file is handled. A metadata server may be utilized to provide the appropriate service class of files in response to requests from remote clients that may be of different computing platforms.

Abstract: A distributed data storage system for sharing data among client computers running different types of operating systems by separating metadata from data. Data is stored in storage pools that are accessed by the client computers through a storage network. Metadata is stored in a metadata store and provided to the client computers by a cluster of metadata servers. The client computers communicate with the metadata servers using a Storage Tank protocol and over a control network. Each client computer runs an operating system-specific client program that provides the client side functions of the Storage Tank protocol. The client program preferably includes a file system interface for communicating with the file system in the storage system and user applications, a client state manager for providing data consistency, and a plurality of operating system services for communicating with the metadata servers.

Abstract: A system transfers data between a client computer and a server computer over a network, wherein communications are established over a first data link between the client and the server to provide the server with identification of the data to be transferred, then communications are established over a second data link between the client and the server for data transfer such that the second data link has a faster data transfer rate than the first data link, then the identified data is transferred from the client to the server; and then finally the client computer is provided with status information relating to the transfer of the identified data. The first data link is sufficient to support normal data operations utilizing existing network resources. The second data link can connect the clients to one or more of the servers, or may connect only particular clients and servers with special needs for large data transfer.

Abstract: A disk caching method for an intermediary controller is disclosed. Requests for data blocks are made and then disk caching is performed according to a most expedient cache method. The disk caching method may be performed by asynchronously requesting a data record from both a intermediary controller disk storage and from a intermediary controller cache and using a first received copy of the data record, the first received copy being a copy received first from the intermediary controller disk storage.

Abstract: A file translation system and a physical information and extensions file for an intermediary controller is disclosed. The file translation system that allow a host computer to directly access data from a different host type without moving the actual data. The physical information and extension file provides information concerning the location of data and the file system the host is viewing. The intermediary controller is disposed between a legacy disk controller for an originating host of a first type and an open system host. The intermediary controller emulates a virtual storage device using a virtual device file system, wherein the virtual device file system mapping data stored in a storage device by the originating host to objects in a root directory in the virtual device file system.