Abstract: A reference instance for use in a configuration management system is a configuration item that may be associated with a number of assets, all of which share a common set of attributes. The use of reference instances permits a single configuration item to identify a potentially large number of assets. This may be particularly useful for identifying and tracking low-priority assets where the detail or amount of information needed to effectively track and manage the asset is relatively small. Use of reference instance configuration items allows an organization to identify and manage virtually all of their assets without the cost and effort of creating large numbers of substantially identical configuration items.

Abstract: Systems and methods for comparing one database structure to another to identify differences between the two. In one embodiment, tree structures corresponding to each database are generated. The tree structures have nodes corresponding to objects in the databases. Each node has an individual check value based on the node attributes and a cumulative check value based on the attributes of the node and its sub-nodes. Beginning with the uppermost nodes of each tree, the check values are compared to identify differences in the check values, hence the node/tree attributes. If the cumulative check values match, the sub-nodes match and do not need to be compared directly. Only the portions of the tree structures that do not have matching check values are traversed. If individual check values do not match, the attributes of the corresponding nodes are compared to determine the exact differences.

Abstract: Embodiments disclosed herein can significantly optimize a root cause analysis and substantially reduce the overall time needed to isolate the root cause or causes of service degradation in an IT environment. By building on the ability of an abnormality detection algorithm to correlate an alarm with one or more events, embodiments disclosed herein can apply data correlation to data points collected within a specified time window by data metrics involved in the generation of the alarm and the event(s). The level of correlation between the primary metric and the probable cause metrics may be adjusted using the ratio between theoretical data points and actual points. The final Root Cause Analysis score may be modified depending upon the adjusted correlation value and presented for user review through a user interface.

Abstract: A time-efficient means for identifying and processing cascading deletes due to referential constraint violations includes: logging, to an error file, all primary key (“PK”) errors detected during table load operations; building a foreign key (“FK”) index for each child table; recursively probing each relevant FK index to identify all loaded rows that violate a referential constraint due to a PK error; logging all identified FK errors to the error file; and using the (preferably sorted) error file contents to identify, mark and physically delete table rows that violate a referential constraint. The described cascade delete processing methods make only a single pass through the table data, using ordinary computer files to track and organize rows identified for deletion. Use of error files rather than tablescans (multiple passes through the loaded table data) can provide a significant reduction in table load times, especially for large or intricately “related” tables.

Abstract: A system and method for mediating a web page at an intermediate server. The system and method can include receiving a web page from a target web server, ensuring that the web page is not cached and changing links in the web page to refer to the intermediate server.

Abstract: A system and method for visualization of the components of an enterprise system and the rendering of information about the health or status of the enterprise system, its components, and/or its subcomponents. The invention uses a combination of color codes or other indicators and a combination of algorithms and/or rules-based systems to control the computation of status/severities to associate to components and setup the color codes and indicators.

Abstract: Systems and methods for recording and replaying client-server transactions on selected clients in order to gauge the performance of the client-server system from the perspective of the client. In one embodiment, a method comprises playing back a set of recorded transactions on a client, monitoring selected performance-related parameters at the client, and transmitting monitored data to the server for analysis or for viewing by a system administrator. The set of transactions is recorded on a first client by replacing a standard Internet transaction driver (e.g., WinInet.DLL) with a modified driver that is configured to intercept function calls. The function calls and corresponding parameters are recorded in a file which is later transmitted to a client, where the recorded transaction information is used to reproduce the transactions on the client. As the transactions are played back, performance data may be monitored and forwarded to a management server for analysis, display, etc.

Abstract: Techniques to repair overflow rows in a relational database table are described. In one implementation, a source table's physical memory pages are interrogated to identify overflow rows. In another implementation, overflow rows generated during database update operations are identified from non-table sources (e.g., log files). In general, overflow rows are repaired by: unloading one or more rows identified as overflow rows; locking the source table from outside access; disabling or deleting any associations associated with the unloaded rows; deleting the identified overflow/unloaded rows from the source table; reloading the previously unloaded rows back into the source table; restoring any associations previously disabled/deleted; and unlocking the tables. Rows may be processed in groups small enough not to significantly impact users accessing either the source or associated tables.

Abstract: A list folding process dynamically groups items of a list into logically related visual folds to reduce the number of items to be displayed in a window of a computer screen. The process determines attributes of the items to be displayed and dynamically groups items together into a special group called a visual fold based on the attributes. The rules for folding items based on attributes can be defined by a particular user so that each view of the items may be different among users. As the attributes of each item change, the display of the items and visual folds may be automatically adjusted to reflect the current proper grouping. The folding process therefore allows a user to view the maximum amount of information in available display area of a computer screen window.

Abstract: Service impact data is efficiently propagated in a directed acyclic graph with restricted views. One or more service components, impact rules and business rules are grouped together into a directed acyclic graph and a related metadata array. Impact propagation uses related metadata array to minimize traversal of the graph. As nodes of the graph are updated to propagate impact data, a determination is made as to when no further impact propagation is required. Subsequently, calculations are terminated without having to traverse the entire graph. This method allows a system or business administrator to view and receive real-time notification of the impacted state of all nodes in the graph that are available to their permitted view. Restricted views ensure that available service impact data is only displayed to end users having the proper authorization to view the underlying impact model data.

Abstract: A method, system and medium for efficiently propagating service impact data in a directed acyclic graph. One or more service components, impact rules and business rules will be grouped together into a directed acyclic graph and a related metadata array. Impact propagation uses related metadata array to minimize traversal of the graph. As nodes of the graph are updated to propagate impact data a determination is made as to when no further impact propagation is required and calculations are terminated without having to traverse the entire graph. This method will allow a system or business administrator to maintain real-time notification and visualization of, the impacted state of all objects in the graph.

Abstract: A method, system, and medium for compressing systems management information in a historical data store. Dynamically determining the appropriate compression algorithm to apply based on the type of data being compressed and stored. As further input is received for any particular measurement, the appropriate compression algorithm will be automatically selected from the set of available compression algorithms or be defined by a user configuration parameter. The amount of historical data stored with the minimal amount of data loss is optimized by the system dynamically changing the compression algorithm used for the given input data over a particular time span. The system engineer is therefore presented with the pertinent information for monitoring, administrating and diagnosing system activities.

Abstract: A method, system and medium for organizing and associating log records into logically related groups is described. One or more input sources from, possibly, different systems/subsystems are input to a log correlation method. As the log records are processed the fields are interrogated to determine which log records are related to each other. As further log records are processed more information about previously unidentifiable relationships is determined. After this later information is known, log records that could previously not be associated with any other log records are added to the existing association. The system engineer is therefore presented with the pertinent information for monitoring, administrating and diagnosing system activities.

Abstract: A method and system updates files or other information on a computer system. Updates received are installed, and then additional updates are requested in a specified order.

Abstract: Systems and methods for recording and replaying client-server transactions on selected clients in order to gauge the performance of the client-server system from the perspective of the client. In one embodiment, a method comprises playing back a set of recorded transactions on a client, monitoring selected performance-related parameters at the client, and transmitting monitored data to the server for analysis or for viewing by a system administrator. The set of transactions is recorded on a first client by replacing a standard Internet transaction driver (e.g., WinInet.DLL) with a modified driver that is configured to intercept function calls. The function calls and corresponding parameters are recorded in a file which is later transmitted to a client, where the recorded transaction information is used to reproduce the transactions on the client. As the transactions are played back, performance data may be monitored and forwarded to a management server for analysis, display, etc.

Abstract: Techniques for sorting data include (1) obtaining records containing variable length key fields, (2) expanding the variable length key fields into fixed length key fields in a temporary structure, (3) sorting the temporary structure based on the fixed length key fields, and (4) reorganizing the data containing the variable length key fields in accordance with the sorted temporary structure. Reorganized data can replace the original data or be saved to temporary storage where it can later be merged with other reorganized data. Temporary storage of reorganized data does not incorporate the expanded fixed length key information used in the temporary structure.

Abstract: The present invention is a method and apparatus for measuring the performance of a subroutine in a software application executing upon a computer system. When characterized as a method, a monitoring application operating according to the present invention first intercepts a call to a subroutine. The monitoring application then examines a system clock. If the clock is in a particular configuration, the monitoring application collects a first set of performance data. Next, the monitoring application passes control to the subroutine. When the subroutine completes, control is returned to the monitoring application. The monitoring application then collects a second set of performance data. The first and second sets of data are then compared to determine the performance characteristics of the subroutine. If the clock in not in the particular configuration, the monitoring application passes control to the subroutine in such a way that processing continues as it would if the monitoring program had never been called.

Abstract: A system and method are used for visually representing performance and flow analysis of a communication network having devices connected by links. The system includes a first memory for storing a graphical representation of the communication network and showing the devices connected by links and a second memory storing data representing performance and flows in the communication network. A processing system is operatively connected to the first and the second memory and to a display. The processing system selectively maps the data on the graphical representation of the communication network by varying visual characteristics of the devices and the links for viewing on the display.

Abstract: Systems and methods for monitoring the performance of client-server transactions from the perspective of a client. In one embodiment, a JARTA (Java Application Response Time Analyzer) component (which may include JavaScript) is installed on an end user's browser to collect various response time measurements and certain client system information and transmit this information to a server. A JARTA utility on the web server can manage the actions (e.g., insert, modify, and delete) associated with web pages that are ear-marked for JARTA testing at the client browser. The JARTA component may include a Java™ applet that can be downloaded to a client computer along with a web page. In one embodiment, a certain percentage of web transactions to be monitored can be designated using, e.g., a sampling algorithm.

Abstract: A method and apparatus identifies changes made to a computer system caused by the installation of software. The state of the computer system is recorded before the software is installed and, after the software is installed, the recorded state is compared against the state of the computer system. Changes are written into a manifest, which may be combined with any new or changed files and an installation program to produce a package which can be sent to another computer system for installation.