Abstract: One embodiment provides a method including: collecting system log files comprising a plurality of log messages representing activity within the system; generating a plurality of message templates by (i) clustering the plurality of messages into groups having similar activity patterns and (ii) generating a message template for each of the groups; identifying message templates of interest and determining the message templates representing actual end-user events as opposed to system events, wherein the determining comprises (i) identifying a seed set of event types that represent known end-user events based upon identifying the event as being known to be initiated by a user and (ii) correlating the event to the known end-user event based upon a time correlation between the known end-user event and the event within the message template of interest.

Abstract: One embodiment provides a method including: collecting, from a plurality of collaborative computing systems, system log files comprising a plurality of log messages representing activity within the system, wherein the activity within the system corresponds to system activity and end-user activity; generating a plurality of message templates, each of the plurality of message templates representing an event type by clustering the plurality of messages into groups having similar activity patterns; identifying, from the plurality of message templates, a subset of message templates representing potential end-user events; differentiating end-user events from system events, in the subset of message templates representing potential end-user events, comprising identifying a seed set of event types that represent known end-user events and correlating potential end-user events remaining after identifying the seed set of event types with the known end-user events; and grouping, based upon the differentiating, the event t

Abstract: One embodiment provides a method including: collecting system log files comprising a plurality of log messages representing activity within the system; generating a plurality of message templates by (i) clustering, using a clustering algorithm, the plurality of messages into groups having similar activity patterns and (ii) generating a message template for each of the groups; identifying message templates of interest, wherein a message template of interest comprises a template that potentially represents end-user events; and determining, within the message templates of interest, the message templates representing actual end-user events as opposed to system events, wherein the determining comprises (i) identifying a seed set of event types that represent known end-user events based upon identifying the event as being known to be initiated by a user and (ii) correlating the event to the known end-user event based upon a time correlation between the known end-user event and the event within the message template

Abstract: One embodiment provides a method including: collecting, from a plurality of collaborative computing systems, system log files comprising a plurality of log messages representing activity within the system, wherein the activity within the system corresponds to system activity and end-user activity; generating a plurality of message templates, each of the plurality of message templates representing an event type by clustering the plurality of messages into groups having similar activity patterns; identifying, from the plurality of message templates, a subset of message templates representing potential end-user events; differentiating end-user events from system events, in the subset of message templates representing potential end-user events, comprising identifying a seed set of event types that represent known end-user events and correlating potential end-user events remaining after identifying the seed set of event types with the known end-user events; and grouping, based upon the differentiating, the event t

Abstract: An apparatus, system, and method are disclosed for monitoring computer system components in large or complex systems. The apparatus includes an identifier module for associating at least one visual identifier with a computer system component. A function module associates one or more control functions with the visual identifier. A presentation module selectively displays the at least one identifier for the computer system component within a present view of a user interface. A monitoring module monitors the computer system component associated with the at least one identifier and modifies the identifier in response to a change in operational status for the computer system component.

Abstract: An apparatus, system, and method are disclosed for interacting with multi-attribute managed resources as groups. The apparatus, system and method identify in a repository one or more groups associated with a target attribute. The apparatus system and method further determine a set of managed resources from the repository wherein each managed resource in a set comprises the same value for the target attribute. The apparatus system and method further associate each set of managed resources with a group. The apparatus system and method may subdivide the groups into sub-groups according to additional attributes possessed by members of each group and may display the groups and sub-groups to summarize and highlight the managed resources of each group and sub-group.

Abstract: An apparatus, system, and method are disclosed for displaying a complementary, high-level graphical representation of an enterprise information technology system. A primary visualization module displays a primary visualization that is a schematic representation of one or more elements of a selected portion of an enterprise information technology system. A minimap module displays a minimap that is an abstracted, high-level schematic representation of the enterprise information technology system. A navigation module demarks a primary visualization representation within the minimap that corresponds to the primary visualization. In one embodiment, the navigation module modifies the primary visualization representation and the corresponding primary visualization in response to a user input directed to the demarked primary visualization representation within the minimap.