Abstract: A reference instance for use in a configuration management system is a configuration item that may be associated with a number of assets, all of which share a common set of attributes. The use of reference instances permits a single configuration item to identify a potentially large number of assets. This may be particularly useful for identifying and tracking low-priority assets where the detail or amount of information needed to effectively track and manage the asset is relatively small. Use of reference instance configuration items allows an organization to identify and manage virtually all of their assets without the cost and effort of creating large numbers of substantially identical configuration items.

Abstract: Systems and methods for comparing one database structure to another to identify differences between the two. In one embodiment, tree structures corresponding to each database are generated. The tree structures have nodes corresponding to objects in the databases. Each node has an individual check value based on the node attributes and a cumulative check value based on the attributes of the node and its sub-nodes. Beginning with the uppermost nodes of each tree, the check values are compared to identify differences in the check values, hence the node/tree attributes. If the cumulative check values match, the sub-nodes match and do not need to be compared directly. Only the portions of the tree structures that do not have matching check values are traversed. If individual check values do not match, the attributes of the corresponding nodes are compared to determine the exact differences.

Abstract: Embodiments disclosed herein can significantly optimize a root cause analysis and substantially reduce the overall time needed to isolate the root cause or causes of service degradation in an IT environment. By building on the ability of an abnormality detection algorithm to correlate an alarm with one or more events, embodiments disclosed herein can apply data correlation to data points collected within a specified time window by data metrics involved in the generation of the alarm and the event(s). The level of correlation between the primary metric and the probable cause metrics may be adjusted using the ratio between theoretical data points and actual points. The final Root Cause Analysis score may be modified depending upon the adjusted correlation value and presented for user review through a user interface.

Abstract: A time-efficient means for identifying and processing cascading deletes due to referential constraint violations includes: logging, to an error file, all primary key (“PK”) errors detected during table load operations; building a foreign key (“FK”) index for each child table; recursively probing each relevant FK index to identify all loaded rows that violate a referential constraint due to a PK error; logging all identified FK errors to the error file; and using the (preferably sorted) error file contents to identify, mark and physically delete table rows that violate a referential constraint. The described cascade delete processing methods make only a single pass through the table data, using ordinary computer files to track and organize rows identified for deletion. Use of error files rather than tablescans (multiple passes through the loaded table data) can provide a significant reduction in table load times, especially for large or intricately “related” tables.

Abstract: A system and method for visualization of the components of an enterprise system and the rendering of information about the health or status of the enterprise system, its components, and/or its subcomponents. The invention uses a combination of color codes or other indicators and a combination of algorithms and/or rules-based systems to control the computation of status/severities to associate to components and setup the color codes and indicators.

Abstract: A method, system and device for monitoring internal database log events in a computer database environment are described. As database updates are detected they are analyzed and used to determine which of several kinds of database maintenance are required. The database administrator is therefore presented with information to allow for more accurate maintenance scheduling and able to prevent unnecessary database maintenance outages.

Abstract: A system and method for mediating a web page at an intermediate server. The system and method can include receiving a web page from a target web server, ensuring that the web page is not cached and changing links in the web page to refer to the intermediate server.

Abstract: A method, system and medium for recording events in a system management environment is described. As system events are detected in an enterprise computing environment they are stored in a manner allowing them to be “replayed” either forward or reverse to assist a system administrator or other user to determine the chain of events that affected the enterprise. The system engineer and business process owner are therefore presented with pertinent information for monitoring, administrating and diagnosing system activities and their correlation to business services.

Abstract: A system and method for visualization of the components of an enterprise system and the rendering of information about the health or status of the enterprise system, its components, and/or its subcomponents. The invention uses a combination of color codes or other indicators and a combination of algorithms and/or rules-based systems to control the computation of status/severities to associate to components and setup the color codes and indicators.

Abstract: Systems and methods for recording and replaying client-server transactions on selected clients in order to gauge the performance of the client-server system from the perspective of the client. In one embodiment, a method comprises playing back a set of recorded transactions on a client, monitoring selected performance-related parameters at the client, and transmitting monitored data to the server for analysis or for viewing by a system administrator. The set of transactions is recorded on a first client by replacing a standard Internet transaction driver (e.g., WinInet.DLL) with a modified driver that is configured to intercept function calls. The function calls and corresponding parameters are recorded in a file which is later transmitted to a client, where the recorded transaction information is used to reproduce the transactions on the client. As the transactions are played back, performance data may be monitored and forwarded to a management server for analysis, display, etc.

Abstract: Techniques to repair overflow rows in a relational database table are described. In one implementation, a source table's physical memory pages are interrogated to identify overflow rows. In another implementation, overflow rows generated during database update operations are identified from non-table sources (e.g., log files). In general, overflow rows are repaired by: unloading one or more rows identified as overflow rows; locking the source table from outside access; disabling or deleting any associations associated with the unloaded rows; deleting the identified overflow/unloaded rows from the source table; reloading the previously unloaded rows back into the source table; restoring any associations previously disabled/deleted; and unlocking the tables. Rows may be processed in groups small enough not to significantly impact users accessing either the source or associated tables.

Abstract: A method, system, and medium for compressing systems management information in a historical data store. Dynamically determining the appropriate compression algorithm to apply based on the type of data being compressed and stored. As further input is received for any particular measurement, the appropriate compression algorithm will be automatically selected from the set of available compression algorithms or be defined by a user configuration parameter. The amount of historical data stored with the minimal amount of data loss is optimized by the system dynamically changing the compression algorithm used for the given input data over a particular time span. The system engineer is therefore presented with the pertinent information for monitoring, administrating and diagnosing system activities.

Abstract: Service impact data is efficiently propagated in a directed acyclic graph with restricted views. One or more service components, impact rules and business rules are grouped together into a directed acyclic graph and a related metadata array. Impact propagation uses related metadata array to minimize traversal of the graph. As nodes of the graph are updated to propagate impact data, a determination is made as to when no further impact propagation is required. Subsequently, calculations are terminated without having to traverse the entire graph. This method allows a system or business administrator to view and receive real-time notification of the impacted state of all nodes in the graph that are available to their permitted view. Restricted views ensure that available service impact data is only displayed to end users having the proper authorization to view the underlying impact model data.

Abstract: A method, system and medium for efficiently propagating service impact data in a directed acyclic graph. One or more service components, impact rules and business rules will be grouped together into a directed acyclic graph and a related metadata array. Impact propagation uses related metadata array to minimize traversal of the graph. As nodes of the graph are updated to propagate impact data a determination is made as to when no further impact propagation is required and calculations are terminated without having to traverse the entire graph. This method will allow a system or business administrator to maintain real-time notification and visualization of, the impacted state of all objects in the graph.

Abstract: A list folding process dynamically groups items of a list into logically related visual folds to reduce the number of items to be displayed in a window of a computer screen. The process determines attributes of the items to be displayed and dynamically groups items together into a special group called a visual fold based on the attributes. The rules for folding items based on attributes can be defined by a particular user so that each view of the items may be different among users. As the attributes of each item change, the display of the items and visual folds may be automatically adjusted to reflect the current proper grouping. The folding process therefore allows a user to view the maximum amount of information in available display area of a computer screen window.

Abstract: A method, system and medium for organizing and associating log records into logically related groups is described. One or more input sources from, possibly, different systems/subsystems are input to a log correlation method. As the log records are processed the fields are interrogated to determine which log records are related to each other. As further log records are processed more information about previously unidentifiable relationships is determined. After this later information is known, log records that could previously not be associated with any other log records are added to the existing association. The system engineer is therefore presented with the pertinent information for monitoring, administrating and diagnosing system activities.

Abstract: A method and system updates files or other information on a computer system. Updates received are installed, and then additional updates are requested in a specified order.

Abstract: Systems and methods for recording and replaying client-server transactions on selected clients in order to gauge the performance of the client-server system from the perspective of the client. In one embodiment, a method comprises playing back a set of recorded transactions on a client, monitoring selected performance-related parameters at the client, and transmitting monitored data to the server for analysis or for viewing by a system administrator. The set of transactions is recorded on a first client by replacing a standard Internet transaction driver (e.g., WinInet.DLL) with a modified driver that is configured to intercept function calls. The function calls and corresponding parameters are recorded in a file which is later transmitted to a client, where the recorded transaction information is used to reproduce the transactions on the client. As the transactions are played back, performance data may be monitored and forwarded to a management server for analysis, display, etc.

Abstract: A monitoring system provided according to an aspect of the present invention enables a user to specify one or more resource elements as a group, and compute an Abnormality Index that represents the deviation from a baseline operation of these selected resource elements. In an embodiment, the Abnormality Index is computed as a single number. The user may include any desired attributes of each resource element to be considered in determining deviations. The Abnormality Index represents the number of deviations, the seriousness of deviation (e.g., more serious if deviation relates to unavailability of the resource element), and the extent of deviation (i.e., whether the deviation is based on expected operation for hourly, daily or weekly duration).

Abstract: Techniques for sorting data include (1) obtaining records containing variable length key fields, (2) expanding the variable length key fields into fixed length key fields in a temporary structure, (3) sorting the temporary structure based on the fixed length key fields, and (4) reorganizing the data containing the variable length key fields in accordance with the sorted temporary structure. Reorganized data can replace the original data or be saved to temporary storage where it can later be merged with other reorganized data. Temporary storage of reorganized data does not incorporate the expanded fixed length key information used in the temporary structure.