公开(公告)号：US20150310085A1

公开(公告)日：2015-10-29

申请号：US14325521

申请日：2014-07-08

Applicant: Moogsoft, Inc.

Inventor： Philip Tee

IPC: G06F17/30 ,  H04L12/58

CPC classification number: G06F17/30598 ,  G06F17/30705 ,  G06Q10/107 ,  H04L12/1895 ,  H04L41/065 ,  H04L41/12 ,  H04L41/22 ,  H04L51/16 ,  H04L51/22 ,  H04L51/24

Abstract: An event clustering system is configured to generate reports. An extraction engine is in communication with an infrastructure. The extraction engine in operation receives data from the infrastructure and produces events. An alert engine receives the events and creates alerts mapped into a matrix, M. A sigalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The sigalizer engine determines one or more common steps from events and produces clusters relating to the alerts and or events. A reporting engine is configured to be coupled to the event clustering system.

Abstract translation: 事件集群系统被配置为生成报告。 提取引擎与基础设施通信。 运行中的提取引擎从基础架构接收数据并产生事件。 警报引擎接收事件并创建映射到矩阵M中的警报。信号发生器引擎包括NMF引擎，k均值聚类引擎和拓扑接近引擎中的一个或多个。 信号发生器引擎确定事件的一个或多个常见步骤，并产生与警报和/或事件有关的群集。 报告引擎被配置为耦合到事件聚类系统。

公开(公告)号：US20140324867A1

公开(公告)日：2014-10-30

申请号：US14262884

申请日：2014-04-28

Applicant: MOOGSOFT, INC.

Inventor： Philip Tee ,  Robert Duncan Harper ,  Charles Mike Silvey ,  Andrew John Leonard ,  Jeffrey Ellison Townsend

IPC: G06F17/30

CPC classification number: G06F11/0709 ,  G06F3/0481 ,  G06F11/0751 ,  G06F11/0769 ,  G06F11/0772 ,  G06F11/079 ,  G06F17/30598 ,  G06F17/30713 ,  G06F17/30994 ,  G06Q10/00 ,  H04L41/0631 ,  H04L41/065 ,  H04L41/0893 ,  H04L41/12 ,  H04L41/22 ,  H04L51/16 ,  H04L51/24

Abstract: A computer-implemented method is provided that is stored on computer readable non-transitory media. One or more data fields are accessed within a file. Accessed data field, are mapped mapping on a display computer system. The accessed one or more data fields are from one or more data sources that relate to situations from clustering messages received from managed infrastructure. The mapping being performed based on a input of the situation summaries using a graphical user interface. Displayed on the display computer system are one or more dashboards of situations relative to summaries from clustering messages received from managed infrastructure. The one or more dashboards include at least one of actions that a user can take relative to clustered messages.

Abstract translation: 提供了一种存储在计算机可读非暂时介质上的计算机实现的方法。 在一个文件中访问一个或多个数据字段。 访问的数据字段是在显示计算机系统上的映射映射。 所访问的一个或多个数据字段来自与从被管理基础设施接收的聚合消息的情况相关的一个或多个数据源。 基于使用图形用户界面的情境摘要的输入来执行映射。 在显示计算机系统上显示的是相对于从被管理基础设施接收的聚类消息的摘要的一个或多个情况的仪表板。 一个或多个仪表板包括用户可以相对于聚集消息采取的动作中的至少一个。

公开(公告)号：US11303502B2

公开(公告)日：2022-04-12

申请号：US16902344

申请日：2020-06-16

Applicant: Moogsoft Inc.

Inventor： Philip Tee ,  Andrew Neil Cameron Hepburn

IPC: G06F3/048 ,  H04L41/046 ,  G06F16/951 ,  H04L41/14 ,  H04L41/12 ,  H04L41/142 ,  H04L41/22 ,  H04L67/00 ,  H04L43/10 ,  H04L67/01 ,  H04L41/08 ,  H04L41/0893 ,  H04L43/067 ,  H04L29/06 ,  H04L43/0823

Abstract: An event clustering system includes a processor. An extraction engine is in communication with an infrastructure. The extraction engine receives data from the infrastructure. A signalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The signalizer engine determines one or more common steps from events and produces clusters relating to the alerts and or events. In response to production of the clusters one or more physical changes are made in a managed infrastructure hardware. Multi-systems interact with each other.

公开(公告)号：US20220014419A1

公开(公告)日：2022-01-13

申请号：US17483818

申请日：2021-09-24

Applicant: Moogsoft Inc.

Inventor： Philip Tee ,  Robert Duncan Harper

IPC: H04L12/24 ,  G06F16/951 ,  H04L12/26 ,  H04L29/06 ,  H04L29/08

Abstract: A system texecutes automatic attribute inference and includes: a processor; a memory coupled to the memory; a first engine that executes automatic attribute inference; an extraction engine in communication with a managed infrastructure and the first engine, the extraction engine configured to receive managed infrastructure data; and a signaliser engine that includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine, the signaliser engine inputting a list of devices and a list a connections between components or nodes in the managed infrastructure, the signaliser engine determining one or more common characteristics and produces one or more dusters of events.

公开(公告)号：US20210281469A1

公开(公告)日：2021-09-09

申请号：US17204926

申请日：2021-03-17

Applicant: Moogsoft, Inc.

Inventor： Philip Tee ,  Amir Borna

IPC: H04L12/24 ,  G06F16/951 ,  H04L12/26 ,  H04L29/06 ,  H04L29/08

Abstract: A system provides for management of a managed infrastructure. A processor is coupled to various engines. An extraction engine is in communication with the managed infrastructure. The extraction engine in operation receives messages from the managed infrastructure, produces events that relate to the managed infrastructure and converts the events into words and subsets used to group the events into clusters that relate to failures or errors in the managed infrastructure, including managed infrastructure physical hardware. The managed infrastructure supports the flow and processing of information. A sigalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The sigalizer engine determines one or more common steps from events and produces clusters relating to events; the sigalizer engine determining one or more common characteristics of events and producing clusters of events relating to the failure or errors in the managed infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information.

公开(公告)号：US11010220B2

公开(公告)日：2021-05-18

申请号：US15811715

申请日：2017-11-14

Applicant: Moogsoft Inc.

Inventor： Philip Tee

IPC: G06N3/08 ,  G06F11/07 ,  H04L12/24 ,  G06F16/28 ,  H04L29/08 ,  H04L12/58 ,  G06F11/30 ,  G06Q10/06 ,  G06N5/04 ,  G06N5/02 ,  H04L12/26 ,  G06Q10/10 ,  G06N3/04

Abstract: An event clustering system that has an extraction engine in communication with a managed infrastructure. A signalizer engine includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine. The signalizer engine determines one or more common characteristics or features from events. The signalizer engine uses the common features of events to produce clusters of events relating to the failure or errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information. A feedback signalizer functor is provided that is a supervised machine learning approach to train to reproduce a situation. In response to production of the clusters one or more physical changes in a managed infrastructure hardware is made, where the hardware supports the flow and processing of information.

公开(公告)号：US10891345B2

公开(公告)日：2021-01-12

申请号：US15854091

申请日：2017-12-26

Applicant: Moogsoft Inc.

Inventor： Philip Tee

IPC: G06F17/00 ,  G06F16/9535 ,  H04L12/24 ,  G06Q10/10 ,  H04L12/58 ,  G06F17/10 ,  G06F16/35

Abstract: A system is provided for clustering events. At least one engine is configured to receive message data from managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information. The at least one engine is configured to determine common characteristics of events and produce clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information. The at least one engine is configured to create one or more situations that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. A situation room includes a collaborative interface (UI) for decomposing events from managed infrastructures. In response to the production of the clusters one or more physical changes is made in managed infrastructure hardware. A reference tool provides for a decomposition of events.

公开(公告)号：US10700919B2

公开(公告)日：2020-06-30

申请号：US16140508

申请日：2018-09-24

Applicant: Moogsoft Inc.

Inventor： Philip Tee

IPC: H04L12/24 ,  H04L29/06 ,  H04L12/26 ,  G06F16/951 ,  G06F40/12 ,  H04L29/08

Abstract: Methods and system are provided for decomposing events from managed infrastructures. The system decomposes events from a managed infrastructure and includes a first engine that receives data from a managed infrastructure which includes managed infrastructure physical hardware. The infrastructure physical hardware supports the flow and processing of information. A second engine determines common characteristics of events and produces clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to support the flow and processing of information. Events are produced that relate to the managed infrastructure. The events are converted into words and subsets used to group the events that relate to failures or errors in the managed infrastructure, including the managed infrastructure physical hardware. The events have textural context. Semantic meaning is applied to the textual context of the events. A change to a managed infrastructure physical hardware component is made.

公开(公告)号：US10693707B2

公开(公告)日：2020-06-23

申请号：US16043168

申请日：2018-07-24

Applicant: Moogsoft Inc.

Inventor： Philip Tee ,  Robert Duncan Harper

IPC: H04L12/24 ,  H04L12/26 ,  H04L29/06 ,  H04L29/08 ,  G06F16/951

Abstract: A system is provided for decomposing events from managed infrastructures. A first engine is configured to receive message data from a managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information, the at least one engine is configured to determine common characteristics of events and produce clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in a physical hardware of the managed infrastructure directed to supporting the flow and processing of information. The first engine is configured to create one or more situations that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. A second engine is configured to determine one or more common steps from events and produces clusters relating to events. The second engine determines one or more common characteristics of events and produces clusters of events relating to the failure or errors in the managed infrastructure. The system is configured to use data-driven fault localization, more particularly using semantic clustering.

公开(公告)号：US20200177436A1

公开(公告)日：2020-06-04

申请号：US16779757

申请日：2020-02-03

Applicant: Moogsoft, Inc.

Inventor： Robert Duncan Harper

IPC: H04L12/24 ,  H04L29/08 ,  H04L29/06 ,  H04L12/26 ,  G06F16/951

Abstract: Methods and system decompose events from managed infrastructures while dealing with tuned data.