Abstract: A method performed by a server processing computer for a plurality of monitored servers is provided. The method includes receiving a server alarm of a first type in response to one of a first set of server metrics, each of which includes a measure of a first property for the monitored servers, exceeding a first threshold. The method also includes receiving a server alarm of a second type in response to one of a second set of server metrics, each of which includes a measure of a second property for the monitored servers, exceeding a second threshold. The method includes determining a server alarm correlation between the received server alarm of the first type and the received server alarm of the second type, and generating a new server alarm configuration for a server alarm of the first type and/or the second type based on the server alarm correlation.

Abstract: A method performed by a server processing computer for a plurality of monitored servers is provided. The method includes receiving a server alarm of a first type in response to one of a first set of server metrics, each of which includes a measure of a first property for the monitored servers, exceeding a first threshold. The method also includes receiving a server alarm of a second type in response to one of a second set of server metrics, each of which includes a measure of a second property for the monitored servers, exceeding a second threshold. The method includes determining a server alarm correlation between the received server alarm of the first type and the received server alarm of the second type, and generating a new server alarm configuration for a server alarm of the first type and/or the second type based on the server alarm correlation.

Abstract: Methods of processing alarm messages in a computer network administration system are provided. Methods include receiving a substantially real time alarm message stream that includes alarm messages. For each alarm message, operations include performing a message preprocessing operation to remove low message content portions, determining message term relevance corresponding to message terms in the alarm message, and converting the message terms into a message vector. Operations further include generating scenarios that represent respective message clusters based on varied similarity distance between given ones of the message vectors.

Abstract: Methods of processing alarm messages in a computer network administration system are provided. Methods include receiving a substantially real time alarm message stream that includes alarm messages, converting each alarm message of the alarm messages into an alarm message vector that includes multiple dimensions, generating an alarm message matrix that includes the alarm message vectors, and determining an information gain corresponding to each of the dimensions of the alarm message matrix.

Abstract: A method processing alarm messages generated by a computer network administration system includes, for each one alarm message of a plurality of alarm messages, selecting a plurality of n-grams from the one alarm message, assigning each of the plurality of n-grams to a node in a knowledge graph, generating a node weight for each node in the knowledge graph based on a popularity of the n-gram associated with the node, generating an edge weight for each of a plurality of edges connecting nodes in the knowledge graph to each other, and extracting semantic relationships between nodes in the knowledge graph based on the node weights and the edge weights. The alarm messages are grouped into clusters based on the extracted semantic relationships.

Abstract: Provided is a process including: receiving a request for a user interface depicting data specified, at least in part, by the request; accessing data in a first type of database, the data in the first type of database including references to entries in a second type of database different from the first type of database, wherein the two types of databases include a relational database and a non-relational database; forming instructions to present a user interface depicting accessed data in the first type of database with inputs to effectuate access to data in the second type of database.