Abstract: A method, system and program product for monitoring resources servicing a business transaction is provided. The method includes providing a transaction manager that monitors a business transaction serviced by one or more resources, with each of the resources and the transaction manager having a protocol stack configured to send and receive load-monitoring headers in protocol messages. The method further includes specifying, in a protocol request header in a protocol request message, collection of performance metrics for a resource, collecting, by the resources, the performance metrics specified in the protocol request message and sending the performance metrics collected to the transaction manager, in a protocol response header in a protocol response message. Further, the method includes pre-configuring with policies the protocol stack on a subset of the resources, such that the pre-configured resources can act as monitoring agents on behalf of peer resources and send alerts to a resource manager.

Abstract: A method in a data processing system for propagation of filter expressions across multi-layered systems. If a selection criteria expression in a data request received by a first data processing engine from an application is incompatible with selection criteria expressions of a second data processing engine, the data request and the portion of the selection criteria expression that is compatible with selection criteria expressions of the second data processing engine is transmitted to the second data processing engine. If the second data processing engine received a message that matches the compatible portion of the selection criteria expression, the message that matches is transmitted to the first data processing engine. If the message that matches the compatible portion also matches the portion of the selection criteria expression that is incompatible with the selection criteria expressions of the second data processing engine, the message that matches is transmitted to the application.

Abstract: A method in a data processing system for propagation of filter expressions across multi-layered systems. If a selection criteria expression in a data request received by a first data processing engine from an application is incompatible with selection criteria expressions of a second data processing engine, the data request and the portion of the selection criteria expression that is compatible with selection criteria expressions of the second data processing engine is transmitted to the second data processing engine. If the second data processing engine received a message that matches the compatible portion of the selection criteria expression, the message that matches is transmitted to the first data processing engine. If the message that matches the compatible portion also matches the portion of the selection criteria expression that is incompatible with the selection criteria expressions of the second data processing engine, the message that matches is transmitted to the application.

Abstract: Embodiments of the present invention provide a method, system and computer program product for the detection of correlation rules in an enterprise computing monitoring and management system. In one embodiment of the invention, a method for detection of correlation rules can be provided. The method can include receiving events from multiple event sources, classifying the events according to a set of event attributes, determining a temporal proximity of occurrence of different classified events, further determining a frequency of occurrence of temporal proximity for particular classified events, and reporting a causal relationship between the particular classified events when the frequency of occurrence exceeds a threshold value.

Abstract: Embodiments of the present invention provide a method, system and computer program product for cross-cutting event correlation in an enterprise computing monitoring and management system. An enterprise computing monitoring and management system can include a hierarchy of nodes, where several of the nodes are each coupled to a corresponding embedded correlation engine and an event bus. The system further can include a root node among the nodes. The root node can be coupled to the event bus and to centralized correlation logic programmed to identify a high correspondence between events from a particular event source among the nodes and a particular set of correlation rules in that correlation engine. The identification of such correspondence can be used to move to the set of correlation rules to an embedded correlation engine closer to the particular event source.

Abstract: A solution for managing a monitor that includes enhanced data collection capabilities is provided. A set of triggers, each of which is capable of monitoring a computing environment for a condition, and a set of collectors each of which is capable of collecting environment information for the computing environment are obtained. A set of links that define a relationship between a trigger and a collector can be defined by a user and used to generate the monitor. In this manner, the monitor is configurable to collect any combination of data about the computing environment in response to the presence/occurrence of the condition. The collected data can then be used to provide an improved analysis of environment data to identify any unknown existing relationships, root causes of problems, and/or the like.

Abstract: A method in a data processing system for propagation of filter expressions across multi-layered systems. If a selection criteria expression in a data request received by a first data processing engine from an application is incompatible with selection criteria expressions of a second data processing engine, the data request and the portion of the selection criteria expression that is compatible with selection criteria expressions of the second data processing engine is transmitted to the second data processing engine. If the second data processing engine received a message that matches the compatible portion of the selection criteria expression, the message that matches is transmitted to the first data processing engine. If the message that matches the compatible portion also matches the portion of the selection criteria expression that is incompatible with the selection criteria expressions of the second data processing engine, the message that matches is transmitted to the application.

Abstract: Under the present invention, a mapping is provided that interrelates security permissions for an application-based resource with security permissions for a set of IT-based resources in the distributed system. When a desired security permission for the application-based resource is expressed, the mapping can be accessed to determine the corresponding security permissions for the IT-based resources. Once these security permissions are determined, resource plug-ins corresponding to the IT-based resources will effect their respective security permissions.

Abstract: An improved solution for configuring an event management system. In particular, a correlation rule can be deployed based on metadata for the correlation rule and/or a correlation engine. The metadata can describe one or more capabilities of the corresponding correlation rule/correlation engine. As a result, the combined capabilities can be readily considered when deploying the correlation rule.

Abstract: Method, apparatus, and computer program products for scheduling and tracking preparatory work associated with electronic meeting invitations. When a meeting invitation is received and tentatively accepted, the user is prompted to enter the expected duration of the associated work. A floating block of time is created, subject to the constraint that it must be completed before the meeting convenes. If both the meeting and the floating block can be scheduled without irresolvable conflicts, they are added to the calendar, and a to-do associated with the floating block may be added to the to-do list. When an invitation for a second meeting conflicts with a first floating block associated with a first meeting, the first floating block may be rescheduled, within its completion-time constraint, to accommodate the second meeting.

Abstract: A highly reliable and readily scalable solution for managing events. In particular, an event is received and processed in a transaction. Any one of a plurality of event servers is selected to obtain event data based on the event and store the event data in an event data store. The event can be published to allow a subscribing event consumer to conduct further processing for the event data.

Abstract: Under the present invention, when an event is received on a server, it is stored and then categorized. In being categorized, an event group pertaining to the event is identified. Based on the group of events, a set (e.g., one or more) of destinations to which the event should be routed can be determined. The group of events is then associated with an access control list (ACL) that contains entries identifying users (or groups of users) and their permissions to interact with events in that group. Once the association is made, the event and optionally the ACL is routed to the appropriate destinations. Based on the permissions contained in the ACL, the destinations will interact with the event accordingly.

Abstract: Methods, systems and computer program products are provided for generating events having common formats by obtaining a populated common base event including source specific situation information for an event source. It is determined if a format of the populated common base event conforms to a predefined event format and a common event format representation of the populated common base event is generated based on the predefined event format if the format of the populated common base event does not conform to the predefined event format.