Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: A plurality of first event instances of a first event and a plurality of second event instances of a second event are received based on the first event occurring and the second event occurring. Each event instance has an event identifier and a timestamp. A first event type of the plurality of first event instances and a second event type of the plurality of second event instances are identified. A time period of overlap between the first event and the second event are determined by detecting regular intervals between the plurality of first event instances, as compared to each other, and the plurality of second event instances, as compared to each other. A relationship between the first event and the second event are scored based on the time period of overlap. The first event and the second event are grouped based on the scored relationship.

Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: Method and system for event relationship analysis in fault management. The method includes identifying a group of related events based on a history of a plurality of event instances relating to multiple events. For each event occurrence of each event of the group of related events, an event type and one or more resources associated with the event occurrence is identified. The method also comprises: identifying a group of event occurrences associated with the same resource, and identifying from the group of event occurrences a set of event occurrences of the same type.

Abstract: Method and system for event relationship analysis in fault management. The method includes identifying a group of related events based on a history of a plurality of event instances relating to multiple events. For each event occurrence of each event of the group of related events, an event type and one or more resources associated with the event occurrence is identified. The method also comprises: identifying a group of event occurrences associated with the same resource, and identifying from the group of event occurrences a set of event occurrences of the same type.

Abstract: Method and system for event relationship analysis in fault management. The method includes identifying a group of related events based on a history of a plurality of event instances relating to multiple events. For each event occurrence of each event of the group of related events, there is identified: an event type; and one or more resources associated with the event occurrence. The method also comprises: identifying a set of event occurrences of the same type; and identifying event occurrences associated with the same resource.

Abstract: Processing of a set of event log data that includes event records. A search criteria is received from a user, and a subset of the set of event log data that includes event records from the set of event log data that satisfy the search criteria is determined. For each event record in the subset of event log data, a similarity score for the event record is determined, where the similarity score is indicative of the similarity of the event record to the other event records in the subset of event log data. The subset of event log data is updated by adding to each event record its similarity score, and the updated subset of event log data is then returned to the user.

Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: An event management method of attributing a seasonal fault to maintenance activity is described. The method includes identifying a sequence of fault events as a seasonal fault, and calculating an initial seasonality metric indicating a degree of seasonality of the sequence of fault events. One or more maintenance windows are identified, and then a subset of the sequence of the fault events which correspond in time with the maintenance windows are identified. A compensated seasonality metric is calculated for the sequence of fault events minus at least some of the subset of fault events. Based on determining that the compensated seasonality metric indicates a reduction in seasonality compared with the initial seasonality metric, an indication that the sequence of fault events is associated with maintenance activities is generated.

Abstract: Anomaly detection is provided. A first component of a first data resource of a plurality of data resources is identified. Each data resource of the plurality of data resources includes one or more components. A score of the first component is determined based, at least in part, on underlying data of the first component and underlying data of one or more other components of data resources of the plurality of data resources that correspond to the first component. An interest level of the first data resource is determined. A relationship between the score of the first component and the interest level of the first data resource is modeled.

Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: Method and system for event relationship analysis in fault management. The method includes identifying a group of related events based on a history of a plurality of event instances relating to multiple events. For each event occurrence of each event of the group of related events, there is identified: an event type; and one or more resources associated with the event occurrence. The method also comprises: identifying a set of event occurrences of the same type; and identifying event occurrences associated with the same resource.

Abstract: Anomaly detection is provided. A first component of a first data resource of a plurality of data resources is identified. Each data resource of the plurality of data resources includes one or more components. A score of the first component is determined based, at least in part, on underlying data of the first component and underlying data of one or more other components of data resources of the plurality of data resources that correspond to the first component. An interest level of the first data resource is determined. A relationship between the score of the first component and the interest level of the first data resource is modeled.

Abstract: Method for monitoring data events using calendars are provided. Aspects include accessing a plurality of calendars, each calendar defining a schedule of calendar days and receiving a plurality of inputs from one or more applications, each input defining a data event for a specific source, for each calendar of the plurality of calendars. Aspects also include maintaining, for each data event source, a count for each calendar day and a count for each non-calendar day, for each calendar of the plurality of calendars. Aspects further include determining, for each data event source, if a comparison of the count for each calendar day and the count for each non-calendar day is statistically significant, and generating an output for a data event source, if the comparison of the count for each calendar day and the count for each non-calendar day is statistically significant.

Abstract: A computer implemented method comprises accessing a plurality of calendars, each calendar defining a schedule of calendar days, receiving a plurality of inputs from one or more applications, each input defining a data event for a specific source, for each calendar of the plurality of calendars, maintaining, for each data event source, a count for each calendar day and a count for each non-calendar day, for each calendar of the plurality of calendars, determining, for each data event source, if a comparison of the count for each calendar day and the count for each non-calendar day is statistically significant, and generating an output for a data event source, if the comparison of the count for each calendar day and the count for each non-calendar day is statistically significant.

Abstract: Method and system are provided for event relationship analysis in fault management. The method includes: providing a history of a plurality of event instances relating to multiple events identified by event identifiers, where an event instance has one or more event occurrences referencing an event identifier, the history including the event occurrences and resolution event information; analyzing the event occurrences relating to each event identifier to identify a first occurrence(s) of an event instance; analyzing the resolution event information relating to each event identifier to identify any event resolution time for an event instance; comparing two event identifiers to obtain a relationship score between the two event identifiers, wherein the comparing is based on a combination of first occurrences of event instances relating to the two event identifiers and resolution times of the event instances; and creating a group of events that are related based on the relationship scores.

Abstract: An event management method of attributing a seasonal fault to maintenance activity is described. The method includes identifying a sequence of fault events as a seasonal fault, and calculating an initial seasonality metric indicating a degree of seasonality of the sequence of fault events. One or more maintenance windows are identified, and then a subset of the sequence of the fault events which correspond in time with the maintenance windows are identified. A compensated seasonality metric is calculated for the sequence of fault events minus at least some of the subset of fault events. Based on determining that the compensated seasonality metric indicates a reduction in seasonality compared with the initial seasonality metric, an indication that the sequence of fault events is associated with maintenance activities is generated.

Abstract: A plurality of first event instances of a first event and a plurality of second event instances of a second event are received based on the first event occurring and the second event occurring. Each event instance has an event identifier and a timestamp. A first event type of the plurality of first event instances and a second event type of the plurality of second event instances are identified. A time period of overlap between the first event and the second event are determined by detecting regular intervals between the plurality of first event instances, as compared to each other, and the plurality of second event instances, as compared to each other. A relationship between the first event and the second event are scored based on the time period of overlap. The first event and the second event are grouped based on the scored relationship.

Abstract: A method for providing recommended resolutions to events is provided. The method may include receiving first events. The method may further include generating tickets based on the first events. Additionally, the method may include routing the first events and the tickets to at least one service department. The method may also include associating resolutions codes with the first events and the tickets. The method may further include receiving at least one second event. The method may also include determining the resolution codes to the at least one second event based on the association of the at least one second event to the received plurality of first events and the generated plurality of tickets. The method may further include ranking the resolution codes to the at least one second event. The method may also include presenting the ranked resolution codes to the at least one second event to users.