Abstract: An off-line knowledge acquisition process takes IT resource messages, in CBE format generated natively or using generic log adapter, and use a variety of mining techniques and technologies to automatically generate a set of rules used to provide situation categories for the resource messages/events. The off-line knowledge acquisition process also generates an event-to-situation mapping file for efficiently mapping situation to events in runtime. Rules are fed back into a knowledge repository and process for reuse. The off-line knowledge acquisition process also provides methods to reiterate the process of mining (autonomically and/or by human interaction) to improve the rules and confidence level assigning the situation categories. A runtime categorizer component uses the event-to-situation mapping file, when available from the off-line knowledge acquisition process, to add situation categories to the IT resource events.

Abstract: A method to correlate and consolidate a plurality of events may include consolidating each of the plurality of events to form a multi-personality event. Each event may be emitted from a respective one of a plurality of components forming an event producer in response to an incident affecting the event producer. The method may also include providing the multi-personality event to an event consumer.

Abstract: Methods, systems, and computer program products for generating a common event format representation of information from a plurality of messages include parsing a rule associated with a current message to determine if a property of a common event format representation for the current message is to be populated with a property value from a previous message. If the rule specifies to obtain the property value from the previous message, the property value is obtained from the previous message and the common event format representation for the current message is populated with the obtained property value from the previous message. The property value may be obtained by generating a computed key based on properties of the current message that are common to the previous message, and identifying the previous message based on the key of the current message.

Abstract: Methods, systems, computer program products, and methods of doing business by automatically and dynamically annotating events in an event management system (“EMS”) to adapt to capabilities of a management system of which the EMS is an integral part. Furthermore, the EMS may automatically and dynamically recycle existing events (including events which are already annotated) for processing with newly-defined or different EMS capabilities. Events may also be re-annotated to reflect new or different capabilities of the EMS. These benefits of “smart events” are realized without requiring re-instrumentation of the event generation code of managed applications.

Abstract: Methods, systems, computer program products, and methods of doing business by automatically and dynamically annotating events in an event management system (“EMS”) to adapt to capabilities of a management system of which the EMS is an integral part. Furthermore, the EMS may automatically and dynamically recycle existing events (including events which are already annotated) for processing with newly-defined or different EMS capabilities. Events may also be re-annotated to reflect new or different capabilities of the EMS. These benefits of “smart events” are realized without requiring re-instrumentation of the event generation code of managed applications.

Abstract: A system and method for reporting a user's behavior and patterns when engaged in use of an electronic consumable. In a preferred embodiment, an electronic consumable such as an electronic book or library includes detectors for collecting biological information from a user. This information is analyzed to identify the user's interests in and reactions to the electronic consumable.

Abstract: Techniques for parsing rule creation are provided. A technique for constructing one or more message parsing rules may comprise the following steps. First, message data representing past messages, for example, associated with a network, an application and/or a system being analyzed, is obtained. For example, this may involve reading the past or historical message data from messages logs or having a system point to the message data in existing data storage. Parsing rules are then generated by a process from one or more existing rule templates and/or based on user selection and classification of at least a portion of a message. For example, the user may choose a message part and demonstratively classify the part, for example, as a positive or negative example. The generated rules may then be stored for access by a rule-based parsing system such as a message adaptation system.

Abstract: Monitoring components of a system is provided by associating status of at least one component of the system with one of a set of component independent predefined situation categories to provide the status of the component in a common situation format that includes the associated component independent predefined situation category. Status of the system is analyzed based on the common situation format representation of the component status.

Abstract: Problems are resolved in a business process that includes application programs that run on an Information Technology (IT) infrastructure having IT components. A symptom is generated that identifies a problem in the business process. Selected application programs and/or IT components in the IT infrastructure that may cause the problem in the business process are identified, based on the symptom. A respective situation for a respective selected application program and/or IT component is obtained. The respective situation is one of a set of component-independent predefined situation categories that is associated with a respective selected application program and/or IT component. The respective situations provide the status of the selected application programs and/or IT components in a common situation format that includes the associated one of the component-independent predefined situation categories.

Abstract: A technique to generically manage extensible correlation data is provided for correlating a series of events. The technique employs a global unique identifier (GUID) for identifying an event and uses the GUID as a key to associate one or more extensible correlators of correlation data. A transport correlator may be configured to transport the GUID for associating with a GUID of a second event such that a small and fixed amount of data is passed by the communications layer providing the transport, minimally impacting communications. An arbitrary amount of data may be logged and keyed with the GUID, providing optimization and flexibility.

Abstract: An autonomic event parser configured for association with a message adapter. An autonomic event parser can include a store of parsing rules, the parsing rules having a strategically specified order. Additionally, a pattern analyzer can be programmed to identify patterns of received messages and to recommend the strategically specified order of the parsing rules. Finally, a parsing rules manager can be communicatively coupled both to the pattern analyzer and the store of parsing rules, the parsing rules manager having a configuration for ordering the parsing rules in the store based upon the recommended order of the pattern analyzer.

Abstract: Methods, systems, and computer program products for organizing and viewing electronic objects (such as incoming electronic mail messages, documents, and so forth) according to relationships among the objects. Objects may be organized according to user-selectable, node-specific criteria. These criteria may be dynamically learned, based upon a particular user's behavior, using the disclosed techniques.

Abstract: Methods, systems, and computer program products for organizing and viewing electronic objects (such as incoming electronic mail messages, documents, and so forth) according to relationships among the objects. Objects may be organized according to user-selectable, node-specific criteria These criteria may be dynamically learned, based upon a particular user's behavior, using the disclosed techniques.

Abstract: Methods, systems, computer program products, and methods of doing business by automatically and dynamically annotating events in an event management system (“EMS”) to adapt to capabilities of a management system of which the EMS is an integral part. Furthermore, the EMS may automatically and dynamically recycle existing events (including events which are already annotated) for processing with newly-defined or different EMS capabilities. Events may also be re-annotated to reflect new or different capabilities of the EMS. These benefits of “smart events” are realized without requiring re-instrumentation of the event generation code of managed applications.

Abstract: Methods, systems, computer program products, and methods of doing business by automatically and dynamically annotating events in an event management system (“EMS”) to adapt to capabilities of a management system of which the EMS is an integral part. Furthermore, the EMS may automatically and dynamically recycle existing events (including events which are already annotated) for processing with newly-defined or different EMS capabilities. Events may also be re-annotated to reflect new or different capabilities of the EMS. These benefits of “smart events” are realized without requiring re-instrumentation of the event generation code of managed applications.

Abstract: Temporal based objects, such as video or audio objects, are presented in a manner that is determined by the context through which the object is presented. When presented through one context, the object is presented in accordance with one set of presentation characteristics. When presented through another context, the object is presented in accordance with another set of presentation characteristics. A context can be an application program such as a calendar program or an inbasket program, or a context can be an output device such as a video monitor. Presentation characteristics determine which segments of an object are to be presented and how they are to be presented (such as by playing, pause play, fast forward, fast forward play, rewind, rewind play and stop play).

Abstract: Objects on a data processing system are provided to a multimedia presentation device for presentation purposes. Each object is provided with one or more attributes. These attributes are registered before the presentation. When an object is selected for presentation, the object is transformed into a presentable format in accordance with its attributes. Such attributes include whether the object is restricted for display, the particular presentation device or devices that will present the object, the types of transforms to be performed on the object to ready the object for presentation, whether the object should be segmented into plural segments and if so, then the manner in which the segments are presented. After the transformation, the object is provided to the appropriate presentation device.

Abstract: A method and apparatus for graphical manipulation of encryption. In one embodiment, the invention provides an encryption work area window within a graphical user interface. A user may encrypt an unencrypted object by dropping an icon associated with the unencrypted object on the encryption work area. An encrypted object located within the encryption work area is decrypted when opened and encrypted when closed. An encrypted object located within the encryption work area is decrypted if it is dragged and dropped outside the encryption work area and decryption is selected; alternatively, the encryption of the encrypted object is maintained if it is dragged and dropped outside the work area and maintain encryption is selected.