Abstract: A system and technique for correlating computing network events includes receiving a deployment request for a computing service and identify a deployment template corresponding to the requested computing service where the deployment template indicates resources needed for providing the computing service. Available resources are identified and targeted based on the deployment template. The targeted resources are deployed and the deployment template is associated in a memory with an identification of a resource set indicating each of the deployed resource elements. Responsive to receiving an event including a resource identifier, an event manager identifies the resource set having the deployed resource corresponding to the resource identifier and correlates the event with at least one other active event corresponding to the resource set.

Abstract: A method for correlating computing network events includes identifying computing resources to be deployed. An identification of a correlation pattern comprising a set of the resources to be deployed is received and a correlation identifier is assigned to the correlation pattern. Each resource of the correlation pattern is configured to include the correlation identifier with an event generated by the respective resource. The resources are then deployed in a computing environment.

Abstract: A system and technique for correlating computing network events includes receiving a deployment request for a computing service and identify a deployment template corresponding to the requested computing service where the deployment template indicates resources needed for providing the computing service. Available resources are identified and targeted based on the deployment template. The targeted resources are deployed and the deployment template is associated in a memory with an identification of a resource set indicating each of the deployed resource elements. Responsive to receiving an event including a resource identifier, an event manager identifies the resource set having the deployed resource corresponding to the resource identifier and correlates the event with at least one other active event corresponding to the resource set.

Abstract: A system and technique for correlating computing network events includes an event manager executable by a processor to identify computing resources to be deployed. An identification of a correlation pattern comprising a set of the resources to be deployed is received. A correlation identifier is assigned to the correlation pattern. Each resource of the correlation pattern is configured to include the correlation identifier with an event generated by the respective resource.

Abstract: A system, method and computer program product are provided for improved management of events. A plurality of events is received from an event source. Each event comprises event data relating to a monitored system associated with the event source. A set of data fields in the event data of the plurality of events is identified. One or more relationships between at least one data field in the set of data fields and at least one other data field in the set of data fields are determined. A mapping of the event data of the plurality of events to a predefined common format is determined, based on the one or more relationships.

Abstract: A method for correlating computing network events includes identifying computing resources to be deployed. An identification of a correlation pattern comprising a set of the resources to be deployed is received and a correlation identifier is assigned to the correlation pattern. Each resource of the correlation pattern is configured to include the correlation identifier with an event generated by the respective resource. The resources are then deployed in a computing environment.

Abstract: According to one aspect of the present disclosure, a method and technique for correlating computing network events is disclosed. The method includes: receiving a plurality of events at an event manager residing on a host computing system; identifying a first resource associated with a first event; identifying a second resource associated with a second event; determining whether the first resource is associated with a deployment pattern; determining whether the second resource is associated with a deployment pattern; and responsive to determining that the first and second resources are each associated with a deployment pattern, correlating the first and second events responsive to the first and second resources being associated with a common deployment pattern.

Abstract: A method for providing recommended resolutions to events is provided. The method may include receiving first events. The method may further include generating tickets based on the first events. Additionally, the method may include routing the first events and the tickets to at least one service department. The method may also include associating resolutions codes with the first events and the tickets. The method may further include receiving at least one second event. The method may also include determining the resolution codes to the at least one second event based on the association of the at least one second event to the received plurality of first events and the generated plurality of tickets. The method may further include ranking the resolution codes to the at least one second event. The method may also include presenting the ranked resolution codes to the at least one second event to users.

Abstract: A method for providing recommended resolutions to events is provided. The method may include receiving first events. The method may further include generating tickets based on the first events. Additionally, the method may include routing the first events and the tickets to at least one service department. The method may also include associating resolutions codes with the first events and the tickets. The method may further include receiving at least one second event. The method may also include determining the resolution codes to the at least one second event based on the association of the at least one second event to the received plurality of first events and the generated plurality of tickets. The method may further include ranking the resolution codes to the at least one second event. The method may also include presenting the ranked resolution codes to the at least one second event to users.

Abstract: Search query expansion tool is provided. A processor generates a collection of events for a search result, wherein events included in the collection of events are within a temporal proximity to the search result. A processor determines a content of the collection of events. A processor determines a search suggestion based, at least in part, on the content of the collection of events.

Abstract: Search query expansion tool is provided. A processor generates a collection of events for a search result, wherein events included in the collection of events are within a temporal proximity to the search result. A processor determines a content of the collection of events. A processor determines a search suggestion based, at least in part, on the content of the collection of events.

Abstract: A network management system includes an index of historical events, some of which are associated with at least one historical group type and including for the at least one historical group type, the probability that an historical group of that type will lead to a further event action. Further, the network management system includes for each historical event type, the probability that an historical event of that type will be in the at least one historical group; an event classifier for determining, from the index, an historical group type associated with a new event; an action probability classifier for determining the probability of a further event action occurring due to the new event based on the probability of the associated historical group leading to an historical further event action and the probability of the new event being in the associated historical group; and an event tagger for assigning the probability of the further event action to the new event.

Abstract: A system and technique for correlating computing network events includes an event manager executable by a processor to identify computing resources to be deployed. An identification of a correlation pattern comprising a set of the resources to be deployed is received. A correlation identifier is assigned to the correlation pattern. Each resource of the correlation pattern is configured to include the correlation identifier with an event generated by the respective resource.

Abstract: According to one aspect of the present disclosure, a method and technique for correlating computing network events is disclosed. The method includes: receiving a plurality of events at an event manager residing on a host computing system; identifying a first resource associated with a first event; identifying a second resource associated with a second event; determining whether the first resource is associated with a deployment pattern; determining whether the second resource is associated with a deployment pattern; and responsive to determining that the first and second resources are each associated with a deployment pattern, correlating the first and second events responsive to the first and second resources being associated with a common deployment pattern.

Abstract: According to one aspect of the present disclosure, a method and technique for correlating computing network events is disclosed. The method includes: receiving a plurality of events at an event manager residing on a host computing system; identifying a first resource associated with a first event; identifying a second resource associated with a second event; determining whether the first resource is associated with a deployment pattern; determining whether the second resource is associated with a deployment pattern; and responsive to determining that the first and second resources are each associated with a deployment pattern, correlating the first and second events responsive to the first and second resources being associated with a common deployment pattern.

Abstract: According to one aspect of the present disclosure a system and technique for correlating computing network events is disclosed. The system includes a processor, and an event manager executable by the processor to: identify a first resource associated with a first event; identify a second resource associated with a second event; determine whether the first resource is associated with a deployment pattern; determine whether the second resource is associated with a deployment pattern; and responsive to determining that the first and second resources are each associated with a deployment pattern, correlate the first and second events responsive to the first and second resources being associated with a common deployment pattern.

Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.

Abstract: Search query expansion tool is provided. A processor generates a collection of events for a search result, wherein events included in the collection of events are within a temporal proximity to the search result. A processor determines a content of the collection of events. A processor determines a search suggestion based, at least in part, on the content of the collection of events.

Abstract: Search query expansion tool is provided. A processor generates a collection of events for a search result, wherein events included in the collection of events are within a temporal proximity to the search result. A processor determines a content of the collection of events. A processor determines a search suggestion based, at least in part, on the content of the collection of events.