Abstract: In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A policy compliance server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violation) according to severity and recurrence, and identifies related rules, network entities and configuration changes, which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration data against the rules to identify breaches.

Abstract: Systems and methods are provided for selecting a path through which to send data in a host-based multi-path system. In one embodiment, a system includes a management server that determines a topology of the network and analyzes a plurality of paths for sending data through the network. The management server may also create a path quality index based on the topology and the analysis, the path quality index indicating a quality of individual paths within the plurality of paths. The system further includes a host that receives the path quality index from the management server and automatically selects, based on the path quality index, a path from the plurality of paths through which to send data.

Abstract: Information-technology discovery techniques are performed directly on virtual machine files. A discovery system sends directives to a remote host and receives data extracted from the virtual machine files as a result of the remote host responding to the directive. The discovery system extracts discovery information from the received data and sends the discovery information to a discovery repository. The discovery information may include static and dynamic virtualized hardware as well as executing software applications and services within a virtual machine and across multiple virtual machines.

Abstract: Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths.

Abstract: A virtual domain management system is provided which associates application, physical and virtual domains to enable propagation of events, symptoms and other information across the domains. The virtual domain manager collects events and symptom information across multiple domains by correlating domain topology models. Using a causality matrix and codebook technology the virtual domain manager uses the information to perform root cause and impact analysis across domains. Information from the analysis may be fed back into the domains to enhance domain management.

Abstract: Modeling a data path of a network environment is disclosed. Components are identified at a source location of a data path, at a target location of the data path, and connections there between. The network environment includes a plurality of domains, and the data path traverses the plurality of domains. Components and the connections there between are assigned to one of: an input-output path pattern, a virtualizer pattern, and a meta pattern. The patterns represent common elements of components of the network environment. The patterns and relationships between patterns are defined to repeat within and across domains in the network environment. A model of the data path is created from the assigned patterns and the defined relationships between patterns. The created model of the data path is then presented.

Abstract: Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths.

Abstract: A method, apparatus and computer-program product for mapping and identifying resources in network based services is disclosed. The method comprises the steps of determining a measure of utilization for each of the selected transactions, generating an indication for each measure of utilization exceeding an associated utilization threshold value, determining the cause of the measure of utilization exceeding the associated utilization threshold value by correlating the transactions generating the indications with the resources executing the transaction and applying additional resources until the measure of utilization is less than the associated threshold. In one aspect of the invention, balancing the measure of utilization associated with each of the selected transactions occurs to maintain each of the measures of utilization within a substantially known tolerance to each other measure of utilization.

Abstract: Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths.

Abstract: A method, and computer program product for computing a change plan are presented. A model of a current configuration is identified, the model including modeled system assets and modeled tasks. A request to change the current configuration to a new configuration is received. The request to change the current configuration to generate a plurality of valid strategies to be used in a genetic programming parse tree corresponding to modeled assets and modeled tasks of said model is applied to the model. The request to change the current configuration is applied to at least one of said valid strategies to generate a plurality of potential change plans. The change plans are evolved according to genetic programming principles to a preferred change plan.

Abstract: A virtual domain management system is provided which associates application, physical and virtual domains to enable propagation of events, symptoms and other information across the domains. The virtual domain manager collects events and symptom information across multiple domains by correlating domain topology models. Using a causality matrix and codebook technology the virtual domain manager uses the information to perform root cause and impact analysis across domains. Information from the analysis may be fed back into the domains to enhance domain management.

Abstract: In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A compliance policy server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violations) according to severity and recurrence, and identifies related rules and application services and network entities which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach, as well as identify impact on application services and network entities. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration and topological data against the rules to identify breaches.

Abstract: Systems and methods are provided for disabling a device in an enterprise storage system. In one embodiment, a method comprises receiving information identifying a device in a storage area network that is scheduled for an outage. The method further determines one or more paths impacted by the outage of the device, generates a notification identifying the determined one or more paths, and transmits the notification to one or more hosts having paths to the device.

Abstract: A configuration management tool initiates display of a listing of multiple different types of managed resources present in a storage area network environment. Based on user input, the resource manager receives a selection of two or more types of managed resources from the listing. In addition to receiving a select of two or more types of resources in the listing, the resource manager application receives search criteria associated with each of the selected two or more types of managed resources. The configuration manager initiates a search for objects (in one or more repositories) that satisfy the search criteria and are of a managed resource type as indicated by the selection. The configuration manager application then produces a report indicating the objects (i.e., storage area network resources and corresponding management information) that satisfy the search criteria. After receiving the report (e.g.

Abstract: A method, apparatus and computer program product for performing an analysis on a Storage Area Network (SAN) system, containing a plurality of components, is disclosed. The method comprises the steps of representing selected ones of the plurality of components and the relationship among the components, wherein the representation comprises the steps of creating at least one non-specific representation of the selected components and creating at least one non-specification representation of relations along which the events propagate amongst the selected components, providing a mapping between a plurality events and a plurality of observable events occurring among the components, wherein the mapping is represented as a value associating each event with each observable event, and performing the system analysis based on the mapping of events and observable events.

Abstract: A method, apparatus and computer-program product for mapping and identifying root causes of performance problems in network based services, wherein the service is composed of applications and transactions, is disclosed. The method comprises the steps of establishing a performance objective value, and a threshold value therefrom, for selected ones of the transactions for each of the applications, wherein the aggregate of the performance objective values insures a known service performance, monitoring a measure of performance for each of the selected transactions, generating an indication for each of the performance measures that exceeds a corresponding threshold value and determining the cause of the degradation by correlating the transactions generating the indication with the elements executing the transaction.

Abstract: A method, device and computer product suitable for performing an analysis on a Grid Computer Network (GCN) is disclosed. The method comprises the steps of representing selected ones of a plurality of components and a relationship among the components in the GCN, providing a mapping between a plurality of events and a plurality of observable events occurring among the components, wherein the mapping is represented as a value associating each event with each observable event, and determining at least one likely causing event based on at least one of the plurality of observable events by determining a measure between each of a plurality of values associated with the plurality of observable events and the plurality of causing events.

Abstract: A method, and computer program product for computing a change plan are presented. A model of a current configuration is identified, the model including modeled system assets and modeled tasks. A request to change the current configuration to a new configuration is received. The request to change the current configuration to generate a plurality of valid strategies to be used in a genetic programming parse tree corresponding to modeled assets and modeled tasks of said model is applied to the model. The request to change the current configuration is applied to at least one of said valid strategies to generate a plurality of potential change plans. The change plans are evolved according to genetic programming principles to a preferred change plan.

Abstract: A method, system and computer product for performing a system analysis of a surveillance network containing a plurality of components. The method comprises the steps of representing selected ones of the plurality of components, providing a mapping between a plurality of observable events and a plurality of causing events occurring in components, wherein the observable events are at least associated with each of the at least one components, and determining at least one likely causing event based on at least one of the plurality of observable events by determining a measure between each of a plurality of values associated with the plurality of observable events and the plurality of causing events.