Abstract: A debugging system used for a data center in a network is disclosed. The system includes a monitoring engine to monitor network traffic by collecting traffic information from a network controller, a modeling engine to model an application signature, an infrastructure signature, and a task signature using a monitored log, a debugging engine to detect a change in the application signature between a working status and a non-working status using a reference log and a problem log, and to validate the change using the task signature, and a providing unit to provide toubleshooting information, wherein an unknown change in the application signature is correlated to a known problem class by considering a dependency to a change in the infrastructure signature. Other methods and systems also are disclosed.

Abstract: Techniques are described for detecting the occurrence of error scenarios occurring across a plurality of nodes. Embodiments retrieve a plurality of error scenario profiles. Each of the error scenario profiles specifies prerequisite criteria, the prerequisite criteria including at least one of (i) one or more errors and (ii) one or more conditions. The plurality of nodes is monitored to detect errors occurring on nodes within the plurality of nodes. Embodiments then detect the occurrence of an error scenario, when at least a portion the monitored errors match the prerequisite criteria specified in a first one of the error profiles and when the one or more conditions specified in the first error profile are satisfied.

Abstract: An information processing apparatus monitors one or more apparatuses based on information on multiple items acquired from the apparatuses. Information on an item #3 is associated with information on items #1 and #2. The information processing apparatus examines the information on the item #3. In the case where no failure is detected in the examination of the information on the item #3, the information processing apparatus omits examination of the information on the items #1 and #2. On the other hand, in the case where a failure is detected in the examination of the information on the item #3, the information processing apparatus examines the information on each of the items #1 and #2.

Abstract: A system for performing failure signature recognition training for at least one unit of equipment. The system includes a memory and a processor coupled to the memory. The processor is configured by computer code to receive sensor data relating to the unit of equipment and to receive failure information relating to equipment failures. The processor is further configured to analyze the sensor data in view of the failure information in order to develop at least one learning agent for performing failure signature recognition with respect to the at least one unit of equipment.

Abstract: A method of automating testing of a first computing system comprises identifying a plurality of system interface elements of a second computing system; determining an untested state at the first computing system of one of the identified plurality of system interface elements; determining the existence of any dependency of the one of the identified plurality of system interface elements upon another of the identified plurality of system interface elements; responsive to a finding of no the dependency, seeking in a repository a system interface element test corresponding to the one of the identified plurality of system interface elements and having an expected output according to a structure of the second computing system; and executing the system interlace element test at the first computing system.

Abstract: A condition monitoring system including at least one computing device also includes a memory device configured to store data associated with a monitored device and at least one input channel that is configured to receive the data associated with the monitored device. The condition monitoring system further includes a processor coupled to the memory device and the at least one input channel. The processor is programmed to determine a potential fault condition by comparing at least a portion of the data associated with the monitored device with at least one scenario programmed therein. The at least one scenario is at least partially based on at least one predetermined event associated with at least one condition of the monitored device.

Abstract: A fault detection apparatus includes a storage unit and a correlation model comparison unit. The storage unit stores correlation destruction set information which indicates correlations on which correlation destruction was detected when a fault occurred, among correlations included in a correlation model representing correlations between a plurality types of performance values of a system. The correlation model comparison unit calculates a commonality between the correlation included in the correlation destruction set information and correlation on which correlation destruction is detected for inputted performance values.

Abstract: Exemplary customer premises equipment (“CPE”) diagnostic, recovery, and reporting systems and methods are disclosed herein. An exemplary method includes a technical support server subsystem aggregating, over time, technical support data representing technical issues of CPE devices and operations performed to resolve the technical issues, identifying a subset of the technical support data, and providing the identified subset of the technical support data to a CPE device for local storage by the CPE device, locally stored technical support data configured to be used by the CPE device to self-recover from a future technical issue associated with the CPE device. In certain embodiments, the CPE device may be configured to function as a media server device and/or as an intermediary technical support device at a customer premises. Corresponding methods and systems are also disclosed.

Abstract: A fault cause extraction apparatus including a storage unit which stores a model including one or more correlation functions between pieces of performance information acquired from a plurality of elements and a correlation-destruction-propagation detecting unit which calculates a degree of influence for each of the elements based on correlation destruction information. The correlation destruction information is calculated based on whether pieces of performance information newly acquired from the elements satisfy a relationship represented by the correlation functions.

Abstract: A diagnostic handling server is capable of supporting users without operator support, in which the proper handling of a problem, which users know through experience, can be reflected in the support. Preliminarily, data (e.g., dissatisfying item data) on the item with which a user feels dissatisfied and diagnostic data on the diagnoses of the electric appliances are collected from the electric appliances to be supported. The feature points of the respective electric appliances with which the user feels dissatisfied are then extracted from the collected diagnostic data. When the user feels dissatisfied with a specific electric appliance, the diagnostic data of the electric appliance is transmitted together with a search request for the proper handling, the transmitted diagnostic data is compared with the preliminarily extracted feature point, and information on the cause and the proper handling is provided to the user.

Abstract: Detecting a problem in a content distribution is disclosed. Performance information associated with a first content player is received form a first client. Performance information associated with a second content player is received from a second client. The information received from the first client and the second client is aggregated. A determination is made, from the aggregated information, that a problem is indicated. Alternate techniques for detecting a problem in a content distribution are also disclosed.

Abstract: A candidate to cause a fault is identified, in case that correlation destruction is detected in some processing apparatuses or the like due to spread of the fault within a system. A correlation destruction detecting unit 104 detects correlation destruction related to a correlation which is included in a correlation model 122 by applying inputted performance value of a monitored object to the correlation model 122 of the monitored object which a correlation model storing unit 112 stores. The fault analyzing unit 105 determines and outputs the monitored object which should be a candidate to cause a fault through comparing results of judging whether detecting or not detecting the correlation destruction related to a common correlation in a plurality of the monitored objects which are connected directly or indirectly with a common apparatus or common the monitored object and which have the correlation models 122 including the common correlation.

Abstract: A technique includes using a computer agent to observe diagnoses of computer-related incidents. Based on the observation, patterns are identified in the diagnoses, and based at least in part on the patterns, the diagnoses are selectively automated.

Abstract: A system includes at least one monitored device collect data detect and detect an error in the data, a central server, and at least one local server communicatively coupled to the monitored device and the central server. The local server is configured to receive the data and an indication of the error detected from the monitored device, determine a solution for use in resolving the error, transmit instructions to perform the solution to the monitored device, and transmit the error and the solution to the central server for storage.

Abstract: Methods and apparatus for generating at risk probabilities for a pre-integrated cloud computing system. In one embodiment, at risk probabilities are computed for a compute domain, storage volumes in the storage domain, storage paths to the storage domain from the compute domain, and an overall at risk probability for a first one of the services using system resources.

Abstract: In one aspect, the issues of events that may impact one or more partitions of sub-socket partitioning in one or more sockets can be handled. Specifically, events for partitions can be handled in a socket with sub-socket partitioning, wherein the events may include reset, interrupts, errors and reliability, availability, and serviceability (RAS) management.

Abstract: A hierarchical multi-stage model of asset failure risk for complex heterogeneously distributed physical assets is built. The hierarchical multi-stage model considers heterogeneity of failure patterns for the assets. At least one data stream is analyzed to determine whether the hierarchical multi-stage model needs to be updated due to a change in the failure patterns. If the analysis indicates that the hierarchical multi-stage model needs to be updated, the hierarchical multi-stage model is dynamically updated to obtain an updated hierarchical multi-stage model.

Abstract: In some implementations, a testing service receives a test execution request for executing test operations on a test target. The testing service may map the test execution request to a particular type of supported test framework from among a plurality of types of supported test frameworks. The testing service may obtain a test package provided by a user that requested the testing, such as from a cloud storage location. The testing service determines a computing capacity for executing the testing and appropriates a plurality of workers in a cloud computing service. The testing service configures the plurality of workers for executing the test operations based on at least one of the test framework, the test execution request or the test package. The testing service provides test execution chunks from the test package to the plurality of workers for executing the testing on the test target.

Abstract: Systems and methods for determining the root cause of an event in a data center are presented. The system includes a data center management device coupled to a network and configured to receive an indication of the event from a physical infrastructure device via the network, determine a first generic cause model for the event by accessing an event cause model data store, determine a first event profile by adapting the first generic cause model to the data center using data center profile information stored in a data center profile data store and display a first probability that a potential cause defined by the first event profile is the root cause.

Abstract: An air conditioning system diagnosis apparatus is obtained in which a refrigerating cycle is automatically analyzed and waveform data in messages flowing in a general-purpose network is acquired and automatically analyzed according to the analysis result of the refrigerating cycle, thereby achieving, with a single apparatus, diagnosis and monitoring of errors in the refrigerating cycle and in the general-purpose network. A trigger output portion creates a trigger on the basis of a waveform analysis condition and the analysis result of a packet received from a message analyzing portion; when receiving the trigger, a waveform input portion reads out waveform data stored in a buffer; waveform analyzing portion notifies a synchronization determining portion of the analysis result of the waveform data; the synchronization determining portion searches for the analysis result of a packet synchronized with the received analysis result of the waveform data.

Abstract: A system and algorithm to map alerts to a problem domain is provided so that the size of a codebook for the problem domain may be reduced and correlated independently of the general system and/or other problem domains in the system topology. When one or more symptoms of a fault appear in the system topology, the problem domain is discovered dynamically and the codebook for the problem domain generated dynamically. The system described herein provides for computation of a problem domain that has a reduced object repository for a set of objects which are directly or indirectly impacted by monitored symptoms. Multiple problem domains may be independently computed in order to build one or more codebooks. Each problem domain may be smaller compared to a system topology resulting in scale and performance improvements for codebook computation and correlation.

Abstract: Disclosed is a dynamic fault tree analysis system including a fault tree module associated with a mission critical system (mcs), wherein said fault tree module includes at least one item characterized by an initial probability density function (pdf), at least one threshold value associated with the mcs, a sampling module to transform the initial pdf to a heterogeneous pdf (hpdf), wherein the hpdf includes at least one continuous segment and at least one discrete segment, and wherein transition between segments is at least partially based on the at least one threshold; and a stochastic simulator to determine the probability of an mcs failure condition by analyzing the fault tree module using the heterogeneous pdf.

Abstract: Recovery processing is defined that matches the scope of an outage. A programmatic analysis of the resources that have been impacted, of implications of the failure and what degradations have occurred is performed to construct an appropriate level of recovery. This includes selecting the appropriate set of resources to be recovered. Recovery operations are selected based on the current state of the environment.

Abstract: Disclosed is a system comprising: —a reconfigurable hardware platform; —a plurality of hardware units defined as cells adapted to be programmed to provide self-organization and self-maintenance of the system by means of implementing a program expressed in a programming language defined as DNA language, where each cell is adapted to communicate with one or more other cells in the system, and where the system further comprises a converter program adapted to convert keywords from the DNA language to a binary DNA code; where the self-organization comprises that the DNA code is transmitted to one or more of the cells, and each of the one or more cells is adapted to determine its function in the system; where if a fault occurs in a first cell and the first cell ceases to perform its function, self-maintenance is performed by that the system transmits information to the cells that the first cell has ceased to perform its function, and then the self-organization is performed again in order to provide that a second ce

Abstract: A method, apparatus and product. The method comprising automatically determining an abstract CSP based on a formally defined problem having interconnected sub-problems, wherein the abstract CSP corresponds to the problem, wherein the abstract CSP has a reduced complexity in comparison to a CSP representing the problem, wherein the abstract CSP captures the interconnection between the sub-problems and reduces the details of each sub-problem, wherein the abstract CSP comprises constraints over variables, wherein each variable having an associated domain; and repeatedly: (1) propagating constraints of the abstract CSP to reduce domains of the abstract CSP; (2) selecting a sub-problem to solve; (3) solving the sub-problem; and (4) updating the abstract CSP with values in accordance with the solution of the sub-problem. Whereby, a solution to the formally defined problem is determined based on the solutions to the sub-problems.

Abstract: The invention relates to a method and a device (72) for diagnosing and remotely controlling a host computer (74), in particular a computer which is incorporated in a network and has a local bus (50). The device (72) comprises a network connection (41) via which bidirectional data transmission from the network and into the network is carried out by the host computer (74).

Abstract: A computer-implemented method for fetching troubleshooting data may include 1) receiving a request for information describing at least one potential cause of a failure within a computing environment, and, in response to the request, 2) identifying a set of relationships between a plurality of subsystems within the computing environment, 3) identifying a plurality of potential causes of the failure based on the set of relationships, and 4) responding to the request by providing the plurality of potential causes of the failure. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method analyzes a quality control strategy. A quality control rule can define quality control events and specifying a control limit for determining whether a quality control event passes or fails. The quality control rule and a number of patient samples tested between quality control events can be received. A first expected number of correctible errors when a quality control event fails can be computed based on the quality control rule and the number of patient samples tested between quality control events. A second expected number of final errors that are not correctible when a quality control event fails can be computed based on the quality control rule and the number of patient samples tested between quality control events. An assessment of the quality control rule can include the first expected number of correctible errors and the second expected number of final errors as separate values.

Abstract: Detecting a problem in a content distribution is disclosed. Performance information associated with a first content player is received form a first client. Performance information associated with a second content player is received from a second client. The information received from the first client and the second client is aggregated. A determination is made, from the aggregated information, that a problem is indicated. Alternate techniques for detecting a problem in a content distribution are also disclosed.

Abstract: A system for condition monitoring and fault diagnosis includes a data collection function that acquires time histories of selected variables for one or more of the components, a pre-processing function that calculates specified characteristics of the time histories, an analysis function for evaluating the characteristics to produce one or more hypotheses of a condition of the one or more components, and a reasoning function for determining the condition of the one or more components from the one or more hypotheses.

Abstract: Methods and apparatus are provided for determining a lowest total cost maintenance plan. The method comprises receiving a sequence of maintenance actions in an order of a waiting time for each maintenance action, wherein one of the maintenance actions is likely to repair the failure mode. Each maintenance action has an associated cost equal to a waiting time cost, an execution time cost and a material cost, wherein the waiting time of each maintenance action is the time required to requisition and receive material required to perform the maintenance action. The method also constructs a maintenance plan comprising a primary requisition and a secondary requisition by assigning each of the sequence of maintenance actions to one of the primary and secondary requisition.

Abstract: A method for generating a set of analytical redundancy relations representative of a system with which a plurality of sensors is associated for the observation of variables indicative of operating conditions and adapted to enable detection and discrimination of faults. A complete set of analytical redundancy relations of the system is built from a set of intermediate relations established between observable and non-observable variables of the system, wherein each intermediate relation is generated by combining two predetermined relations Rj, Rk, each of which is expressed in an implicit form as a tuple (i) of a subset Sj of system variables, (ii) of the set Cj of the support components for said relation, and (iii) of the set Tj of the primary relations used to derive said intermediate relation.

Abstract: An apparatus for managing a network system including a plurality of components, the apparatus includes a memory that stores component type data of each component of the plurality of components, component relation data including relation information indicating a pair of components related to each other in the network system and error history data including error information of respective error components in the plurality of components. The apparatus includes a processor that executes a procedure including extracting a pair of component type data as a relation class candidate on the basis of the component type data of a pair of error components indicated by the error information in the error history data, the pair of error components being indicated by the relation information.

Abstract: An embodiment is a technique to generate failure mode information for solid-state drive (SSD) in real environment. An environmental acquisition module acquires environmental information from an environmental sensor. A learning and update module generates an environmental profile based on the acquired environmental information. A failure acquisition module associates failure information from an SSD controller that controls an SSD with the environmental profile. An operation analyzer analyzes the associated failure information using pre-determined information provided by a database to generate failure mode information. A decision module decides if the failure mode information is valid.

Abstract: A system includes a first device, a first storage element, a comparator and a second device. The first device is configured to test memory cells in an array of memory cells to detect defective memory cells. The defective memory cells include a first memory cell and a second memory cell. The first storage element is configured to store a first address of the first memory cell. The comparator is configured to compare a second address of the second memory cell to the first address.

Abstract: A method and system for the classification of software in networked systems, includes: determining a software received by a sensor is attempting to execute on a computer system of the sensor; classifying the software as authorized or unauthorized to execute, and gathering information on the software by the sensor if the software is classified as unauthorized to execute. The sensor sends the information on the software to one or more actuators, which determine whether or not to act on one or more targets based on the information. If so, then the actuator sends a directive to the target(s). The target(s) updates its responses according to the directive. The classification of the software is definitive and is not based on heuristics or rules or policies and without any need to rely on any a priori information about the software.

Abstract: Systems and methods for detecting faults in a system. The method comprising maintaining diagnostic history for one or more system components; receiving system information about operational state and relational interaction among system components; determining if one or more system components are to be examined, in response to performing an analysis of the diagnostic history, wherein the analysis is performed to determine if the diagnostic history includes any information that may indicate that certain system components or combinations of components are suspected of causing a problem detected in the system, wherein the diagnostic history is maintained based on an at least one examination performed on said one or more components when said one or more components were installed in a system other than the system in which the problem is detected.

Abstract: An approach to root cause determination in a complex systems based on monitoring and event data is disclosed. It includes a historical analysis of events with their probabilistic correlations. Applying information measures between the random variables which embody those events one can detect origins of problems and generate real-time recommendations for their locations in a hierarchical system. Estimation of system bottlenecks, as well as the risk of “black swan”-type events are also computed. The processes are based on a statistical processing of a virtual directed graph produced from historical events.

Abstract: In a method for intelligently monitoring and dispatching an Information Technology (IT) service alert, a computer receives a service error alert and classifies the service error alert. The computer assigns the service error alert, based on the service error alert class. The computer monitors the progress of the resolution of the service error alert.

Abstract: A method is provided for managing changes to a computer system. The method includes generating a database configured with fields identifying one or more component changes and potential problems associated with each one or more component changes; populating the fields of the database with information as a change is made to a computer system; monitoring the computer system for issuance of error alerts; comparing issued error alerts against entries of potential problems in the database; and identifying a set of at least one of the component changes as a potential cause of the issued error alert based on the result of the comparing step. The method executes a corrective process in response to the identification of the potential cause of the issued error and updates the database entry of the set of at least one of the component changes to reflect the issued error as a confirmed error thereof.

Abstract: Methods, systems and computing devices are provided for using a completed corrective action as evidence of a fault. The methods, systems and computing devices receive equipment status evidence and determine an equipment fault based on the equipment status evidence. The methods, systems and computing devices also create and rank a list of potential failure modes based at least in part on the determined equipment fault, recommend a corrective action to correct the equipment fault based at least in part on the ranking of the potential failure modes and receiving additional equipment status evidence indicating that the recommended corrective action failed to correct the equipment fault. The methods, systems and computing devices then associate a detection probability and a false negative rate with the failed corrective action to create additional status evidence, and re-rank the list of potential failure modes for subsequent performance based on the additional status evidence.

Abstract: A computing system includes a processor configured to identify a resource manager associated with a computing transaction, classify the computing transaction to determine a predetermined metric, measure an actual metric of the computing transaction, compare the predetermined metric to the actual metric to detect abnormal behavior in the transaction and model the abnormal behavior to determine how the resource manager is affected by the abnormal behavior.

Abstract: A method for monitoring a distributed application for errors includes constructing a transaction path for each request received by the distributed application, detecting a writing action to a log of the distributed application, and annotating the transaction path in accordance with the writing action to produce an annotated transaction path. In another embodiment, a method for building a knowledge base for use in diagnosing an error occurring in a distributed application includes executing the distributed application on a replica of a production server that supports the distributed application, constructing a transaction path for a request received by the distributed application, wherein the transaction path traverses the replica, injecting a fault into the transaction path, detecting a writing action to a log of the distributed application, wherein the writing action is a response to the fault, and storing an association between the fault and the writing action.

Abstract: An anomaly detection mechanism is provided that detects an anomaly in a control network, and includes an identifying unit to receive event information on an event that occurs, and to identify a group including a resource related to the event information by referring to a configuration management database for retaining dependence relationships between processes and resources including a control system; a policy storing unit to store one or more policies each of which associates one or more actions with a condition defining a situation suspected to have an anomaly; an adding unit to acquire group-related information needed for application to the one or more policies, and to add the acquired information to the event information; and a determining unit to apply the event information to the one or more policies and to determine the one or more actions associated with the matched condition as one or more actions to be taken.

Abstract: A method for distributed diagnostic reasoning is provided. The method includes establishing a computing node monitoring the operation of a component of a complex system and populating at least one of a processor and the memory of the computing node with one or more standardized executable application modules (SEAMs) and a workflow service. The method further includes creating a configuration file in combination with several SEAMS to create a distributed diagnostic reasoner (DDR) associated with the component. The method also comprises installing the configuration file in the computing node for execution by the processor; and initializing the one or more SEAMS, the configuration file and the workflow service, wherein the workflow service facilitates data flow between the one or more SEAMS and the static data associated with a fault condition resident in the configuration file.

Abstract: A system and computer program product for system care for a computing device. In one embodiment, a process includes analyzing one or more software and hardware components of the computing device by a system care program of the computing device, analyzing system health of the computing device based on the one or more software and hardware components based on at least one of status and settings of the one or more software and hardware components, and analyzing performance of the computing device based on the one or more software and hardware components based on signature profiles of the one or more software and hardware components The process may also include determining one or more solutions for the computing device by the system care program based on the system health and performance of the computing device, and displaying a report including the one or more solutions.

Abstract: Performance information which is a possible generation cause of a fault is extracted accurately. A fault cause extraction apparatus 10 includes a storage unit 12 and a correlation-destruction-propagation detecting unit 25. Here, the storage unit 12 stores a correlation model including one or more correlation functions, each of which is generated based on a time series of performance information including a plurality of types of performance values in a system and transforms a performance value for one of the types being an input to a performance value for another one of the types being an output.

Abstract: Methods and test systems for testing a network. A test system may emulate a plurality of users, each emulated user executing a user activity. Each emulated user activity may include one or more commands. At least some emulated user activities may include a command randomly selected from a predefined command pool in accordance with an associated probability distribution. The test system may report a result of emulating the plurality of users.

Abstract: An operation management device includes: an information collection module which collects, from a managed device, first and second performance information showing a time series change in the performance information; a correlation model generation module which derives a correlation function between the first and second performance information and creates a correlation model based on the correlation function; a correlation change analysis module which judges whether or not the current first and second performance information acquired by the information collection module satisfy the relation shown by the conversion function between the first and second performance information of the correlation model within a specific error range; and a failure period extraction module which, when the first and second performance information does not satisfy the relation shown by the conversion function of the correlation model, extracts a period of that state as a failure period.

Abstract: A method of generating common trouble case data for managing a plurality of systems. The method includes (a) obtaining first identifiers of actual system components and a second identifier of a template from a system data storage unit, (b) obtaining third identifiers of definitional system components from a template data storage unit on the basis of the second identifier, (c) selecting, by a computer, a first identifier subset among the first identifiers on the basis of the third identifiers, and (d) selecting, by the computer, a first trouble case data subset among a plurality of first trouble case data pieces on the basis of the first identifier subset to generate the common trouble case data. In the above (c), the first identifiers of the first identifier subset are identical to the third identifiers. In the above (d), the first trouble case data subset includes the first identifier subset.