Abstract: A network management node monitors network attributes of a network. The network management node is connected to network devices through the network and receives data values associated with measured network attributes from said network devices. The data values are stored in the network management node and a baseline value and rearm baseline value for a network attribute are calculated from a plurality of the received data values measured during a first period of time (e.g., a first time bucket). These data values are compared to the baseline value, and an alarm is generated in response to at least one of these data values exceeding the baseline value. The alarm is reset if at least one subsequently measured data value is below the rearm baseline value. The baseline value and rearm baseline value are recalculated from received data values measured during subsequent time buckets. Data values measured during the subsequent time buckets are compared to corresponding baseline and rearm baseline values.

Abstract: A network management node monitors network attributes of a network. The network management node is connected to network devices through the network and receives data values associated with measured network attributes from said network devices. The data values are stored in the network management node and a baseline value and rearm baseline value for a network attribute are calculated from a plurality of the received data values measured during a first period of time (e.g., a first time bucket). These data values are compared to the baseline value, and an alarm is generated in response to at least one of these data values exceeding the baseline value. The alarm is reset if at least one subsequently measured data value is below the rearm baseline value. The baseline value and rearm baseline value are recalculated from received data values measured during subsequent time buckets. Data values measured during the subsequent time buckets are compared to corresponding baseline and rearm baseline values.

Abstract: A system and method for automatically constructing a baseline for an attribute of a monitored system, calculating a threshold based on the constructed baseline, and feeding the threshold back into the monitored system is presented. In accordance with the invention, a metric corresponding to an attribute of interest of a monitored system is extracted and compared with a current normal threshold associated with the attribute. An event notification is generated if the extracted metric is not within a limit defined by the current normal threshold. A baseline is calculated based on a relevant subset of extracted metrics, from which a new current normal threshold is calculated. The current normal threshold is reconfigured with the new current normal threshold. In preferred embodiments, an alarm is generated if one or more event notifications meet the conditions of pre-specified rules.