Abstract: Feedback data can be received from client agents running on client computer systems. The feedback data can include data on the symptoms and conditions for rules that relate computer system symptoms to computer system conditions. The feedback data can be analyzed to produce correlation information that quantifies a degree of correlation between the symptom(s) and condition(s) related by the rule(s). It may be determined whether analysis of the feedback data warrants including one of the rules in correlation mappings to be applied to monitored computer systems. If so, then that rule can be included in the mappings. Information representing the correlation mappings may be transmitted to the monitored computer system(s). Additionally, information representing the correlation mappings may be transmitted to the monitored computer system(s), and types of feedback data collected from the client agents can be altered on the basis of the correlation information.

Abstract: Systems and methods for information technology (IT) management, utilizing presence aware notification, are disclosed. In an implementation, the method includes receiving availability or online status of one or more users at an IT management server. The IT management server queries a monitoring database for one or more alerts. The one or more alerts are sent to the one or more users based on respective availability or online status.

Abstract: Model-based event processing is described. In an embodiment, a model of a system includes managed entities and relationships between the managed entities. Events associated with the managed entities are identified and determined to be correlated if the managed entities with which the events are associated have a relationship according to the model.

Abstract: One exemplary embodiment uses templates that define certain features of a given service type, wherein the features are common to all services of that service type. The template can be configured by a user to obtain a service definition for the given service. The service definition is passed to a programmability layer and provides enough information that the programmability layer can construct the various monitors, rules, classes and tasks required to monitor the given service without further customization by the user. In one embodiment, the user can also customize the service definition, a desired, in order to obtain additional monitoring.

Abstract: Feedback data can be received from client agents running on client computer systems. The feedback data can include data on the symptoms and conditions for rules that relate computer system symptoms to computer system conditions. The feedback data can be analyzed to produce correlation information that quantifies a degree of correlation between the symptom(s) and condition(s) related by the rule(s). It may be determined whether analysis of the feedback data warrants including one of the rules in correlation mappings to be applied to monitored computer systems. If so, then that rule can be included in the mappings. Information representing the correlation mappings may be transmitted to the monitored computer system(s). Additionally, information representing the correlation mappings may be transmitted to the monitored computer system(s), and types of feedback data collected from the client agents can be altered on the basis of the correlation information.

Abstract: One embodiment of the invention uses templates that define certain features of a given service type, wherein the features are common to all services of that service type. The template can be configured by a user to obtain a service definition for the given service. The service definition is passed to a programmability layer and provides enough information that the programmability layer can construct the various monitors, rules, classes and tasks required to monitor the given service without further customization by the user. In one embodiment, the user can also customize the service definition, a desired, in order to obtain additional monitoring.

Abstract: In a management system, computing devices collect sample performance values that describe utilization or usage of resources or processes. The sample performance values may be in the form of performance data or performance counters. Sample performance values are either sent or not sent to a management server, based on a delta value of a current collected sample performance value and a last current collected sample value. Plots may be constructed based on actual received sample performance values and interpolated, or estimated sample performance values based on a known frequency at which the sample performance values are collected.

Abstract: In a management system, a management server authorizes users to access computing devices based on class space and instance space. The management server further determines whether users are authorized to use particular computing devices and/or applications provided by the particular computing devices. Alerts may also be provided to the users by the management server.

Abstract: Computing devices receive data type specific data from various local and external sources and managed entities. The data is received and process using modules and monitors, where the modules are sequenced to process the data and the monitors are used to provide condition states of the individual data sources and/or an overall condition state of a grouping of the data sources.

Abstract: A rules definition language the authoring rules for concurrent processing. The RDL includes statements that facilitate efficient use of computer resources by allowing a rule to be broken down into one or more instructions, and processing these instructions asynchronously to provide more efficient use of the computer resources. Once processed into the instructions, results thereof can be passed among the instructions to facilitate process completion of the rule.

Abstract: Systems and methods for information technology (IT) management, utilizing presence aware notification, are disclosed. In an implementation, the method includes receiving availability or online status of one or more users at an IT management server. The IT management server queries a monitoring database for one or more alerts. The one or more alerts are sent to the one or more users based on respective availability or online status.

Abstract: A remote server managing multiple client computers at a customer site communicates with a server at a service provider site. A proxy gateway at the remote server allows communications through a network to the server at the service provider site. Remote monitoring of the multiple client computers may be performed at the server at the service provider site through a central monitoring console.

Abstract: A health model builder may construct a health model from instrumentation of software. To do so, the instrumentation of the software component may be mapped to states of operation of the software component and the instrumentation may be grouped together. A health model may be built with the states of operation resulting from mapping the instrumentation to states of operation of the software component and with transitions between the states of the health model that represent an occurrence of instrumentation in an instrumentation group. The system allows for identification of anti-alert instrumentation to be added where instrumentation is missing for reporting recovery from failure. Moreover, a blame component may be identified for any instrumentation of a software component that indicates it failed because of another software component.

Abstract: Model-based event processing is described. In an embodiment, a model of a system includes managed entities and relationships between the managed entities. Events associated with the managed entities are identified and determined to be correlated if the managed entities with which the events are associated have a relationship according to the model.

Abstract: One embodiment of the invention uses templates that define certain features of a given service type, wherein the features are common to all services of that service type. The template can be configured by a user to obtain a service definition for the given service. The service definition is passed to a programmability layer and provides enough information that the programmability layer can construct the various monitors, rules, classes and tasks required to monitor the given service without further customization by the user. In one embodiment, the user can also customize the service definition, a desired, in order to obtain additional monitoring.

Abstract: One embodiment of the invention uses templates that define certain features of a given service type, wherein the features are common to all services of that service type. The template can be configured by a user to obtain a service definition for the given service. The service definition is passed to a programmability layer and provides enough information that the programmability layer can construct the various monitors, rules, classes and tasks required to monitor the given service without further customization by the user. In one embodiment, the user can also customize the service definition, a desired, in order to obtain additional monitoring.

Abstract: Computing devices receive data type specific data from various local and external sources and managed entities. The data is received and process using modules and monitors, where the modules are sequenced to process the data and the monitors are used to provide condition states of the individual data sources and/or an overall condition state of a grouping of the data sources.

Abstract: In a management system, computing devices collect sample performance values that describe utilization or usage of resources or processes. The sample performance values may in the form of performance data or performance counters. Sample performance values are either sent or not sent to a management server, based on a delta value of a current collected sample performance value and a last current collected sample value. Plots may be reconstructed based on actual received sample performance values and interpolated or estimated sample performance values based on a known frequency at which the sample performance values are collected.

Abstract: In a management system, a management server authorizes users to access computing devices based on class space and instance space. The management server further determines whether users are authorized to use particular computing devices and/or applications provided by the particular computing devices. Alerts may also be provided to the users by the management server.

Abstract: An improved system and method for building a health model is provided. A health model builder may construct a health model from instrumentation of software. To do so, the instrumentation of the software component may be mapped to states of operation of the software component and the instrumentation may be grouped together. A health model may be built with the states of operation resulting from mapping the instrumentation to states of operation of the software component and with transitions between the states of the health model that represent an occurrence of instrumentation in an instrumentation group. The system allows for identification of anti-alert instrumentation to be added where instrumentation is missing for reporting recovery from failure. Moreover, a blame component may be identified for any instrumentation of a software component that indicates it failed because of another software component.