Abstract: According to one general aspect, a non-transitory computer readable medium includes instructions that, when executed by at least one processor, cause a computing device to read a string of a log file for an application, where the log file comprises multiple strings of log data, compare the string to signatures stored in a memory to find a matching signature, where each of the signatures is encoded with a signature identifier (ID), determine a deviation between the string and the matching signature, encode the string with the signature identifier (ID) of the matching signature and the deviation, and transfer the string to a destination computing device using the signature identifier (ID) of the matching signature, the deviation, and a timestamp of the string.

Abstract: According to one general aspect, a non-transitory computer readable medium includes instructions that, when executed by at least one processor, cause a computing device to read a string of a log file for an application, where the log file comprises multiple strings of log data, compare the string to signatures stored in a memory to find a matching signature, where each of the signatures is encoded with a signature identifier (ID), determine a deviation between the string and the matching signature, encode the string with the signature identifier (ID) of the matching signature and the deviation, and transfer the string to a destination computing device using the signature identifier (ID) of the matching signature, the deviation, and a timestamp of the string.

Abstract: A network management system in which an administrator may specify attributes of interest, and the specified attributes are monitored. Graphs/reports corresponding to the specified reports may be generated in a single place (e.g., on a web page) such that the data points for the various attributes may be correlated easily. The specified attributes may contain attributes which are dynamically created (e.g., counters measuring various aspects related to instances of objects). The network management system provides the ability to discover such attributes using a suitable interface, and selection of such attributes as well.

Abstract: To facilitate gathering of information required for root cause analysis associated with the abnormal behavior of an attribute (“problem attribute”), a user can specify causation attributes associated with the problem attribute. When the abnormal behavior is detected for the problem attribute, the causation attributes are automatically polled and stored in a database. The user can later examine the values of the causation attributes to determine if there is a causal relationship to the abnormal behavior of the problem attribute.

Abstract: A monitoring system provided according to an aspect of the present invention enables a user to specify multiple resource elements as a resource pool, and view various aggregate information (e.g., sum, average) for attributes of interest for all the resource elements together. Such a feature is particularly useful in distributed environments where multiple independent resource elements need to be viewed as a single resource pool. The user is provided the flexibility to select the specific resource elements to be included in the resource pool.

Abstract: A monitoring system provided according to an aspect of the present invention enables a user to specify one or more resource elements as a group, and compute an Abnormality Index that represents the deviation from a baseline operation of these selected resource elements. In an embodiment, the Abnormality Index is computed as a single number. The user may include any desired attributes of each resource element to be considered in determining deviations. The Abnormality Index represents the number of deviations, the seriousness of deviation (e.g., more serious if deviation relates to unavailability of the resource element), and the extent of deviation (i.e., whether the deviation is based on expected operation for hourly, daily or weekly duration).

Abstract: A network management system in which an administrator may specify attributes of interest, and the specified attributes are monitored. Graphs/reports corresponding to the specified reports may be generated in a single place (e.g., on a web page) such that the data points for the various attributes maybe correlated easily. The specified attributes may contain attributes which are dynamically created (e.g., counters measuring various aspects related to instances of objects). The network management system provides the ability to discover such attributes using a suitable interface, and selection of such attributes as well.