Abstract: A log collection utility (LCU) operable in a storage area network (SAN) to identify the various types of log files generated in the SAN computes the location of each of the log files, and collects the log files for consolidation and analysis in a common repository. The LCU periodically collects and/or processes the log files by enumerating the location of each of the log files in a log file designator, and generates a script operable for identifying each of the log files sought. A resulting task definition file lists each of the log files identified. The log collection utility therefore finds log files generated by dissimilar applications and nodes in the SAN via a log type definition that enumerates each of the log files in a manner that is agnostic to operating systems, platforms, and directory structures around which the log files are written and stored.

Abstract: Techniques for locating and collecting application logs are disclosed. Embodiments disclosed herein can be advantageously utilized to collect application logs from a plurality of computers in a network. For example, embodiments disclosed herein can be used to identify and collect application logs from a plurality of host computers in a storage area network.

Abstract: A bulk install which evaluates prerequisites and performs installations of agents for multiple remote host computers performs a prerequisite check to identify prerequisite files, resources, or other objects expected by each agent on the hosts, and identifies potential shortcomings or failures before installation. A GUI identifies agents for installation on a plurality of host computers, which allows agent specification on an agent type, operating system, or individual host basis. Install files for each agent are identified and retrieved from a common media repository for transport to the target host. The prerequisite checks are also performed in bulk prior to the bulk install, such that the checks prevent a failed prerequisite check from disrupting an entire install. Such bulk install operations mitigate the time-consuming, repetitive nature of the conventional single agent install by iteratively installing each of the agents on the proper host.

Abstract: In a storage area network (SAN), a SAN management application provides a security audit log of security sensitive user actions performed across the storage area network. In a SAN, multiple services operate to perform requested user actions. Configurations herein substantially overcome the shortcomings of conventional SAN security event logging by providing a comprehensive security audit mechanism operable to identify and record user actions. An event normalizer disposed in each of the services identifies requested user actions, creates a uniform user action object, and sends the user action object to a coalescer operable to receive user action objects from the plurality of services in the SAN. The user action object provides a generic template responsive to each of the event normalizers in the services. The event normalizers normalize event properties and attributes concerning a user action into the generic user action object, and employs preexisting conduits for gathering and recording events.

Abstract: A SAN management agent performs hierarchical based partitioning. Partitions expressed as a hierarchy of related manageable entities allow partitioning based on the relations in the hierarchy. Related manageable entities often trigger updates to database elements common to both of the related manageable entities. The related manageable entities often take the form of a hierarchy (tree) indicative of these relations. Grouping the updates affecting related manageable entities together in the same partition allows the database elements affected by the related updates to occur from a single retrieval of the common database element. By partitioning updates of related manageable entities together, the common database elements are more likely to be paged or cached in memory at the time the update processing updates the common database element. Accordingly, tree-based partitioning identifies relations between manageable entities, and designates related manageable entities by traversing the relations.

Abstract: A framework for defining and performing installation prerequisite checking using a generic template includes identifying a candidate agent and a corresponding prerequisite check from among a plurality of predetermined prerequisite checks. The prerequisite checks are indicative of installability of the candidate agent on a host computer. An install engine generates a prerequisite script bundle based on a set of configuration parameters corresponding to the candidate agent and the identified prerequisite check. The configuration parameters are defined in a template format adapted to define a plurality of configuration parameter sets, enabling a single generic prerequisite check format to define the configuration parameters. The install engine invokes the script bundle inclusive of the script on the host computer for computing the installation status, (i.e. prerequisite check results) of the candidate agent based on the results.

Abstract: A log collection utility (LCU) operable in a storage area network (SAN) to identify the various types of log files generated in the SAN, compute the location of each of the log files, and collect the log files for consolidation and analysis in a common repository. A designator file enumerates log files for collection. The LCU generates a discovery script for each host, and the hosts generate an identity of each of the log files via execution of the discovery script. The LCU generates a collection script operable to gather the each of the log files. The LCU thus gathers a plurality of log files generated by dissimilar applications and nodes in the SAN via a declarative mechanism that specifies the types of log files via a log file designator, and generates executable scripts that collects the log files in a manner that is agnostic to operating systems, platforms, and directory structures.

Abstract: In a storage area network, agents provide transactions of data sets containing updates to manageable entities in a SAN. A SAN server avoids intermittent dissemination of events pertaining to a single transaction by storing events in a cache until completion of all subtransactions in the transaction, and then disseminating all events pertaining to the transaction. Transactions are broken down into update sections, each containing one or more subtransactions collectively defining the entire transaction. Update sections corresponding to the transaction are tagged with a section ID. Events indicating completion of processing of the update section are identified by the section ID, and suppressed temporarily by storing them in the event cache pending completion of the transaction. Other events not matching a tagged section ID are allowed to disseminate. Upon completion of the transaction, events for all section IDs corresponding to the transaction are disseminated from the cache.

Abstract: An agent installer operates to install an agent on a plurality of host computer systems using a bulk automated installation process that identifies at least one agent to be installed on a plurality of host computer systems and performs prerequisite checking of each of the plurality of host computer systems to determine which host computer systems of the plurality of host computer system are capable of supporting operation of the at least one agent. For each host computer system of the plurality of host computer systems that is capable of supporting operation of the at least one agent, the agent installer performs an automated bulk agent installation operation to install the at least one agent on that host computer system.

Abstract: A method, apparatus and computer program product for handling secure information (e.g., a password, an account number, a personal identification number (PIN), a user identifier, an encryption key, and a path where said secure information is stored) is presented. Secure information is stored in a software container. A plurality of representations of the secure information is provided, each of the plurality of representations for use under different conditions. Dependent on the particular condition, at least one of the plurality of representations of the secure information is provided by the container. The container holds the secure information during all stages of processing in a manner that prevents unauthorized parties from gaining access to the secret in clear form.

Abstract: A system detects an event suggesting a data discrepancy between a staging database and a production database that maintain network management data within a network management system. The staging database is logically separate from the production database. The system prevents modification to the production database, and replaces data in the staging database with data from the production database. The system then allows modification to the production database.

Abstract: A SAN management agent performs range based partitioning according to subranges of a set of storage devices. Partitions expressed as a range of storage objects (e.g. storage devices), based on device Ids, rather than static partition labels, allows the partitions to dynamically change to suit a current SAN configuration and number of storage devices in the storage arrays. Typically, management information is in the form of updates to a particular storage object. Accordingly, each update record in an update set is attributable to a device ID of the storage object to which it pertains. Identification of partitions by a range of storage devices allows the update records to be indexed, or grouped, to a particular partition without persisting a fixed partition ID with the data. The device ID range defines a partition that remains a logical quantity which may change upon SAN reconfiguration by avoiding persisting a fixed partition ID to the update records.

Abstract: A software version rule-based pattern matching mechanism specifies version compatibility of a particular remote component by identifying a set of compatible versions operable with a particular server, and comparing the versions to determine compatibility of a purported revision component with an existing server (central component). The mechanism employs a rule based syntax for defining a set of compatible versions associated with a candidate component, and processes a version specifier, or range string mask, indicative of the set of compatible versions. The target version, such as the candidate component version, is then compared with each of the compatible versions indicated by the version string mask. If a matching compatible version is found, then the corresponding component (module) is deemed compatible.

Abstract: A system receives a dataset for storing in a staging database. The dataset contains network management data collected from a managed resource. The system disengages a connection between the staging database and a production database, and stores the dataset in the staging database. The system then re-engages the connection between the staging database and the production database.

Abstract: A system allows software not equipped to work with remote location alert reporting software to obtaining alert data indicating an alert associated with a first managed resource in a storage area network. The system identifies a top-level resource in the storage area network to which the first managed resource indicated by the alert data is related and performs remote alert notification analysis to determine if the top-level resource is a managed resource in the storage area network for which remote location alert reporting software is not operational. If the top-level resource is a managed resource for which remote location alert reporting software is not operational, the system proxy engages operation of remote location alert reporting software on behalf of the top-level resource to report the alert data via the communications interface to the remote location.

Abstract: Mechanisms and techniques for processing information in a network management application, such as a storage area network management application, include an agent and store process. The agent collects a current management data set from managed entity(s) in a network and compares the current management data set to a former management data set previously collected from the managed entity to identify differences in the current management data set as compared to the former management data set. The agent transmits the current management data set to a store process. The store process receives the current management data set and uses verification values and change indicators contained therein to identifying current portions of management data in the current management data that reflect a change. For any changed data portions, the store process modifies or updates managed object data in the management database.