Abstract: In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A compliance policy server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violations) according to severity and recurrence, and identifies related rules and application services and network entities which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach, as well as identify impact on application services and network entities. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration and topological data against the rules to identify breaches.

Abstract: Novel methods for expressing paths contained in queries are provided. The path expressions are composed from tokens selected from the group consisting of object identifiers, attribute identifiers, a relationship operator, and path qualifiers. Path expressions can be more easily created than by creating the path expressions directly in SQL. The path expressions can easily be incorporated into queries for querying data structured according to an object model. Examples of such queries include queries for implementing rules for checking data corresponding to IT infrastructures to see if the IT infrastructure is compliant with policies created for the IT infrastructure.

Abstract: A network compliance application performs a method of coalescing violation data based on rule and policy violations by retrieving network event data indicative of compliance with a set of policies, in which each of the policies has a set of rules. The application computes, for each of the policies, violations, each violation indicative of a deviation from a particular rule, and displays a summary view indicative of a plurality of policies in the set of policies, the summary view indicative of violations attributable to each of the policies. From the displayed summary view, the application receives a detail selection corresponding to a subset of the displayed violations in the summary view; displays, for the received detail selection, a violation view having a sequence of ranked violation entries corresponding to the detail selection.

Abstract: A SAN activity scheduler provides an integrated view of various types of scheduled activities, provides a summary report of multiple scheduled activities, and provides a seamless interface to drill down into specific details of scheduled activities. The scheduler provides a layout view of the scheduled activities arranged according to activity type (tasks, data collection, or retention) or status (success or failure), a detailed layout of activities scheduled within a particular day or other time interval, and a drill down detail which provides activity specific reports such as logs and collection details about the scheduled activities. In this manner, the scheduler provides the SAN operator with an integrated, all-inclusive interface for directing scheduled activities, presents a unified cohesive interface for quickly assessing the current state of scheduled activities, and drilling down into details on an activity specific basis without leaving the integrated scheduler application.

Abstract: Compliance rules are created that can be used to help detect violations of compliance policies imposed on an IT infrastructure. Each of one or more compliance rules associated with a respective IT-infrastructure compliance policy is defined by specifying three items: 1) the type of configuration items to which the rule is to be applied, 2) the rule scope that determines which configuration items of the configuration type are to be checked for compliance, and 3) a desired state that each configuration item checked must satisfy in order to be considered in compliance.

Abstract: In response to a user selection of a management function to configure a storage area network, a resource manager application generates a graphical user interface that displays a list including at least initial process steps requiring selection of resources in the storage area network to execute the management function. Based on input from a user such as selection of resources for a given process step in the list, the resource manager application dynamically selects further process steps in addition to the list of initial process steps for display in the list. In this way, a user can i) view a changing list of process steps and ii) identify which additional process steps are required to perform a respective management function as a result of making a selection of storage area network resources for the given process step.

Abstract: In a large storage area network (SAN), many administrative tasks perform various operations. Managing the tasks can be a formidable activity. A network management application, operable to identify and manipulate the tasks, organizes the tasks in a common graphical user interface (GUI) which allows task management from a single operator console. The task manager provides a GUI having display panes for managing the tasks. The task manager allows selection and invocation of tasks, in which the same task is identifiable by each of the plurality of attributes. The task manager displays the hierarchy of tasks in a task tree, including selectable task icons, in a task tree pane. The task icons are expandable into the corresponding subtasks and operations in a task list pane, and status details about the operations and task status are displayed in a context detail pane. An operator traverses the task tree to drill down into the operation and completion status of tasks in the task tree.

Abstract: A configuration management tool initiates display of a listing of multiple different types of managed resources present in a storage area network environment. Based on user input, the resource manager receives a selection of two or more types of managed resources from the listing. In addition to receiving a select of two or more types of resources in the listing, the resource manager application receives search criteria associated with each of the selected two or more types of managed resources. The configuration manager initiates a search for objects (in one or more repositories) that satisfy the search criteria and are of a managed resource type as indicated by the selection. The configuration manager application then produces a report indicating the objects (i.e., storage area network resources and corresponding management information) that satisfy the search criteria. After receiving the report (e.g.

Abstract: A compliance manager enables creation of policies and corresponding rules to test compliancy of network resources via evaluation of collected data associated with the network resources. For example, each of one or more rules associated with a respective network compliance policy has a corresponding rule scope definition indicating which portion of collected network resource data to use for verification purposes. Each rule also has a corresponding set of selected compliance conditions. The compliance conditions specify what values the portions of collected resource data as specified by the rule scope definition should be in order to be compliant. During a compliancy check, the compliance manager applies the rule scope definition to the collected data to produce a set of network resource data to be verified. Thereafter, the compliance manager determines compliancy by checking whether the produced set of network resource data matches the corresponding compliance conditions as specified for the rule.

Abstract: In a storage area network (SAN), first and second zone sets are compared to identify differences, including zones appearing in one zone set but not the other, and zones in both zone sets but having different contents in each. A zone comparison user interface (UI) window is displayed on a SAN management computer system via user selection from a pop-up menu appearing when a SAN object is selected from a hierarchical object display. The UI window includes a differences display area to display zone set differences and includes fields for identifying a type of zone difference, a zone identifier, and identifiers of host computers and storage devices of a zone. Based on differences identified between the first and second zone sets, identifiers of those zones of the first and second zone sets having a predetermined difference type are displayed.

Abstract: A resource manager receives selection of a particular icon from an expandable tree of icons displayed in a first region of a display screen. The selected particular icon represents a corresponding group of resources associated with a storage area network. In response to receiving the selection, the resource manager displays a set of selectable view mode icons in a second region of the display screen. The set of selectable view mode icons enable a user to select different subsets of resources from the corresponding group of resources in the first region for viewing in a table. The table is also displayed in the second region of the display screen. After initially populating the table, the resource manager provides the selectable view mode icons in the second region of the display screen along with the table to enable further selection of different subsets of resources for viewing in the table.

Abstract: A system filters network management information in a graphical user interface by receiving a managed object selection that represents a resource in a storage area network. The system then identifies a view selection associated with the managed object selection, and produces a filter region containing filter components. At least one of the filter components is contingent upon the managed object selection in conjunction with the view selection. The system then displays the filter region containing the filter components.

Abstract: A resource manager application performs a search for managed resources (e.g., hosts, adapters, databases, host devices, etc.) associated with a storage area network. Results of the search are displayed in a first display region of a display screen. Based on selection of a particular managed resource by a user from the first display region, the resource manager populates a second display region of the display screen with corresponding additional managed resource information. The user further selects one of multiple view mode options to view different types of corresponding additional managed resource information in the second display region.

Abstract: A status monitoring and reporting mechanism which distinguishes more significant events and prominently displays events pertaining to nodes, interconnections, and other network entities which may present problems, and to suppresses benign messages which may not require immediate attention, provides an “at a glance” view of overall system health. By processing and displaying aggregate status events from a plurality of agent components to highlight the most severe and critical events from among a large volume of general status events allows an operator to quickly diagnose potential problems before detrimental results occur, and helps maintain a general efficient system health by isolating less efficient areas to allow for timely remedial action prior to failure. Various agents disseminated in a storage area network determine and report status events back to a central server. The server receives, aggregates, and processes the status events to display a status array indicative of overall system health.

Abstract: A resource manager (e.g., a computer, a software application, etc.) initiates display of a list of managed objects associated with respective resources in a storage area network. The resource manager then receives a command from a user viewing the list to display view mode options associated with a set of two or more selected managed objects in the list. In response to receiving the command, the resource manager initiates display of a menu of view mode options that can be applied to each of the two or more managed objects in the set. The menu provided by the resource manager excludes any view mode options that pertain only to one of the managed objects or fewer than all managed objects in the set. Common view modes that can be applied to all managed objects in the set appear in the menu for selection by the user.

Abstract: A graphical user interface displays management information associated with one or more selected managed entities along with a drill down menu. The drill down menu includes selectable drill down options corresponding to respective drill down functions. Based on selection of a drill down option by a user, a respective drill down function is applied to the management information associated with the one or more selected managed entities. For example, after identifying a selected drill down option chosen from the drill down menu, a processor function associated with the graphical user interface produces a successive drill down view by applying the respective drill down function associated with the selected drill down option to the management information associated with the management view. This technique of drilling down based on selection of one of multiple selectable drill down options enables a network manager to more quickly traverse network management information.

Abstract: A processing device displays a physical network topology associated with a storage area network on a display screen. The physical network topology generated by the processing device includes identification of at least one switch resource that supports connectivity among resources in a corresponding storage area network. The processing device typically receives input from a user to display at least one virtual network associated with the storage area network. In response to receiving the input, the processing device displays a virtual network topology associated with the selected at least one virtual network in relation to the physical network topology on the display screen. Displaying the virtual network topology in relation to the physically network topology provides a unique view for the network manager to identify network resources in physical fabric associated with a selected virtual storage area network.

Abstract: A resource manager generates a graphical user interface that enables a user to manage a configuration of the storage area network via a guided mode in which a graphical user interface displays a set of automatically generated operations to be performed by the user to execute a storage area network management function. The resource manager also can generate a graphical user interface also enables the user to manage configuration of the storage area network via an interactive mode in which the graphical user interface enables the user free navigation amongst storage area network resources and initiation of user-generated operations on the resources to execute the storage area network management function. In furtherance of executing the management function, the resource manager preserves state information of performed operations associated with the management function while the user switches between the guided mode and the interactive mode of the graphical user interface.

Abstract: A processing device displays icons in a first region of a display screen. The icons represent managed resources associated with a storage system. The processing device receives a selection from a user of a resource identified on the display screen. Based on the selection, the processing device identifies whether resources related to the selected at one resource exceed a threshold value. In response to identifying that the resources related to the selected resource exceed a threshold value, the processing device displays filter criteria in a second region of the display screen to limit which of many resources related to the selected resource will be displayed on a display screen for viewing. Thus, the filter criteria enables input of filter parameters by the user to limit a subsequent display of resources related to the initially selected resource.

Abstract: A processing device generates a relationship view of managed entities in a storage area network based on objects stored in a relational database. Each managed entity (e.g., file system, database, volume, storage device, etc.) in the storage area network has a corresponding managed object stored in the relational database. Generally, managed objects of a particular type are categorized into one or more tables. Such tables are related to one another by foreign key attributes, which represent relationships between types of managed objects (and thus a relationship between corresponding managed entities). Relationships among the managed objects in the relational database may be generally classified as either association or containment. Association identifies a logical relationship between managed objects. Containment identifies groups of managed objects that are logically associated with each other.