Abstract: Embodiments of the invention are directed generally to data filtering methods, and combinations thereof, for reducing the quantity of non-actionable, redundant, or otherwise unnecessary data events reported to a network management system. According to an embodiment of the invention, a method for filtering event data in a network comprises: defining a plurality of discrete filtering rules, each of the plurality of rules performing at least one of a permit, deny, log, and rewrite function; assembling at least a first and second of the plurality of rules into an ordered sequence to form a first rule set; assembling at least a third and a fourth of the plurality of rules into an ordered sequence to form a second rule set; employing the first rule set in an appliance associated with a customer network; and employing the second rule set in a server associated with a network management system.

Abstract: A computer-based method for improving the timely delivery of telemetry or other application-to-application data. A telemetry routing table is stored in memory that includes entries for a plurality of communication pathways for delivering a telemetry message from a telemetry application running on a first computer system to a telemetry reception application running on a second computer system. The table entries include a latency and a measured data delivery rate for transmittal of data over the corresponding pathway. The method includes generating a telemetry message having a particular data payload using the telemetry application and then selecting one of the communication pathways using the telemetry application based on a size of the data payload, the latencies, and the data delivery rates for the pathways (e.g., determining a total transit time for the payload for each pathway and selecting the pathway corresponding to the shortest transit time).

Abstract: An embodiment of the invention provides a method for communicating event data in a network, including: receiving the event data in a first device, the event data including a native IP address associated with a source of the event data; translating a native protocol of the event data into XML, a resulting XML message including the event data and an identifier associated with the first device; transmitting the XML message from a first location to a second location; determining a new IP address based on the native IP address and the identifier; and including the new IP address in the XML message.

Abstract: Embodiments of the invention are directed generally to a decentralization of security provisions, improved logging of textual and/or graphical data in the network management system, and/or the use of low-value keyboard, mouse, and compressed video data between the network management system and the managed network. An embodiment of the invention includes: a customer appliance coupled to the management server via a first link; and an interface to a managed device coupled to the customer appliance, the first link configured to transmit input/output (I/O) command signals from the management server to the customer appliance, the first link further configured to transmit compressed computer video screen information from the customer appliance to the management server.

Abstract: In one embodiment, a method and apparatus for high-efficiency time-series archiving for computer server telemetry signals is disclosed. The method includes selecting one or more telemetry signals of a plurality of telemetry signals by a sequential probability ratio test (SPRT) algorithm, the SPRT algorithm identifying the one or more telemetry signals as not consistent with normal behavior of the plurality of telemetry signals, injecting synthetic samples around the selected one or more telemetry signals to create a continuous time series telemetry sample, and analyzing the continuous time series telemetry sample to identify leading indicators of faults in the target. Other embodiments are also disclosed.

Abstract: One embodiment of the present invention provides a system that camouflages business-activity information in telemetry signals from a computer system. During operation, the system monitors telemetry signals from the computer system to obtain a time series containing a telemetry metric which provides business-activity information. Next, for each telemetry-metric value contained in the time series, the system compares the telemetry-metric value with a predetermined threshold level. If the telemetry-metric value is below the predetermined threshold level, the system then generates artificial activity associated with the telemetry metric in the computer system, so that the artificial activity causes the telemetry-metric value to exceed the predetermined threshold level.

Abstract: A computer-based method for improving the timely delivery of telemetry or other application-to-application data. A telemetry routing table is stored in memory that includes entries for a plurality of communication pathways for delivering a telemetry message from a telemetry application running on a first computer system to a telemetry reception application running on a second computer system. The table entries include a latency and a measured data delivery rate for transmittal of data over the corresponding pathway. The method includes generating a telemetry message having a particular data payload using the telemetry application and then selecting one of the communication pathways using the telemetry application based on a size of the data payload, the latencies, and the data delivery rates for the pathways (e.g., determining a total transit time for the payload for each pathway and selecting the pathway corresponding to the shortest transit time).

Abstract: One embodiment of the present invention provides a system that camouflages business-activity information in telemetry signals from a computer system. During operation, the system monitors telemetry signals from the computer system to obtain a time series containing a telemetry metric which provides business-activity information. Next, for each telemetry-metric value contained in the time series, the system compares the telemetry-metric value with a predetermined threshold level. If the telemetry-metric value is below the predetermined threshold level, the system then generates artificial activity associated with the telemetry metric in the computer system, so that the artificial activity causes the telemetry-metric value to exceed the predetermined threshold level.