Abstract: Root cause analysis in a communication network includes eliminating candidate events using a computer-implemented method, comprising creating a virtual network model that describes nodes and links of the network at a plurality of time periods; receiving from the network a first event that indicates a problem in the network; receiving a set of second events comprising candidates for a root cause of the first event; determining a network topological indicator from the first event; determining a network implication of the first event based on the topological indicator; based on the network implication and a time value of the first event, retrieving data from the virtual network model that indicates a path between nodes associated with the first event at a time at which the first event occurred; removing, from the set of second events, all events that are not on the path between devices associated with the first event.

Abstract: Root cause analysis in a communication network may be provided in a network management system in accordance with an embodiment of the present invention. The system receives a set of events the network. One such received event may indicate a network problem. The system, through time windowing and/or filtering, identifies a sub-set of events, in the first set, as candidate events for a root cause of the problem. The system generates a score value for each candidate event in the sub-set, indicating how likely each such candidate event is the root cause of the problem. The score value is based in part on a hop distance between an entity that generated the event indicating the problem and another entity that generated the candidate event. The system then selects one of the candidate events, which has a minimum score value, as the root cause event for the problem reported.

Abstract: Root cause analysis in a communication network may be provided in a network management system in accordance with an embodiment of the present invention. The system receives a set of events the network. One such received event may indicate a network problem. The system, through time windowing and/or filtering, identifies a sub-set of events, in the first set, as candidate events for a root cause of the problem. The system generates a score value for each candidate event in the sub-set, indicating how likely each such candidate event is the root cause of the problem. The score value is based in part on a hop distance between an entity that generated the event indicating the problem and another entity that generated the candidate event. The system then selects one of the candidate events, which has a minimum score value, as the root cause event for the problem reported.

Abstract: Root cause analysis in a communication network includes eliminating candidate events using a computer-implemented method, comprising creating a virtual network model that describes nodes and links of the network at a plurality of time periods; receiving from the network a first event that indicates a problem in the network; receiving a set of second events comprising candidates for a root cause of the first event; determining a network topological indicator from the first event; determining a network implication of the first event based on the topological indicator; based on the network implication and a time value of the first event, retrieving data from the virtual network model that indicates a path between nodes associated with the first event at a time at which the first event occurred; removing, from the set of second events, all events that are not on the path between devices associated with the first event.