Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: A method for dynamic specification of a business value by a discovered resource that includes registering or discovering a resource within a business system; specifying a business value for the resource; and then computing a business value of the entire business system, based upon the resource's business value. An apparatus and computer program product that also employs these aspects is disclosed.

Abstract: A method, apparatus, and computer-usable medium for retrieving a first entry from a collection of trickle confirmation entries (associated with a first collection of resources that require configuration confirmation) from a trickle confirmation queue. A first resource among the first collection of resources associated with the first entry from the collection of trickle confirmation entries is queried for a potential change in configuration of the first resource. If a potential change in configuration is detected, the first entry from the collection of trickle confirmation entries is inserted on a trickle update queue. A first entry from a collection of trickle update entries (associated with a second collection of resources that require configuration update) is retrieved from the trickle update queue. Configuration information regarding a first resource associated with the first entry from the collection of trickle update entries is updated.

Abstract: A system and method for enhancing event correlation with exploitation of external data is presented. A correlation engine receives events and selects a correlation rule that corresponds to the events. The correlation rule includes an event selection, a trigger condition, and a correlation conclusion. The correlation engine uses the event selection to access external data and select events based upon the external data. In turn, the correlation engine monitors the selected events and checks whether they meet the correlation rule's trigger condition. When the events meet the correlation rule's trigger condition, the correlation engine performs an action based upon the correlation rule's correlation condition.

Abstract: A method and apparatus is provided for reporting the impact on services in a network caused by node and network faults or outages. As a method, the operator of a specified network device is provided with notice of the impact of a network fault on one or more services running in association with the specified device. The method includes the steps of discovering one or more devices in the network that are respectively connected to the specified device, to assist in performing an intended task, and then discovering each service that is configured to run on each of the discovered devices, likewise in support of task performance. The method further comprises monitoring the status of respective discovered devices at prespecified intervals, in order to detect the occurrence of a fault in the network. Upon detecting a fault, an alert is generated, to indicate the impact of the detected fault on respective discovered services.

Abstract: A method to automatically define resources forming an IT service may include tracking resources utilized in responding to a request or set of requests or performing a transaction or a set of transactions. The method may also include automatically defining resources that form an IT service by aggregating all resources utilized to respond to all requests or to perform all transactions.

Abstract: Under the present invention, a mapping is provided that interrelates security permissions for an application-based resource with security permissions for a set of IT-based resources in the distributed system. When a desired security permission for the application-based resource is expressed, the mapping can be accessed to determine the corresponding security permissions for the IT-based resources. Once these security permissions are determined, resource plug-ins corresponding to the IT-based resources will effect their respective security permissions.

Abstract: A highly reliable and readily scalable solution for managing events. In particular, an event is received and processed in a transaction. Any one of a plurality of event servers is selected to obtain event data based on the event and store the event data in an event data store. The event can be published to allow a subscribing event consumer to conduct further processing for the event data.

Abstract: Methods, systems and computer program products are provided for generating events having common formats by obtaining a populated common base event including source specific situation information for an event source. It is determined if a format of the populated common base event conforms to a predefined event format and a common event format representation of the populated common base event is generated based on the predefined event format if the format of the populated common base event does not conform to the predefined event format.

Abstract: Under the present invention, when an event is received on a server, it is stored and then categorized. In being categorized, an event group pertaining to the event is identified. Based on the group of events, a set (e.g., one or more) of destinations to which the event should be routed can be determined. The group of events is then associated with an access control list (ACL) that contains entries identifying users (or groups of users) and their permissions to interact with events in that group. Once the association is made, the event and optionally the ACL is routed to the appropriate destinations. Based on the permissions contained in the ACL, the destinations will interact with the event accordingly.

Abstract: Event reports generated from multiple event sources within an event management system such as Tivoli (TM) Event Console are handled by an Event Bus, which links multiple problem resolution servers together and assigns an ownership to each event report. The Event Bus parses each incoming event for adding or altering a slot value. Based on the slot value, the event is forwarded to the configured event servers. In addition, the ability to dynamically change ownership to maintain an error-free systematic transmission flow is provided.