Method and system for clustering event messages and managing event-message clusters

The current document is directed to methods and systems that process, classify, efficiently store, and display large volumes of event messages generated in modern computing systems. In a disclosed implementation, received event messages are assigned to event-message clusters based on non-parameter t...

Full description

Saved in:
Bibliographic Details
Main Authors Kushmerick, Nicholas, Lin, Junyuan, Brown, Darren, McLaughlin, Matt Roy
Format Patent
LanguageEnglish
Published 07.04.2020
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:The current document is directed to methods and systems that process, classify, efficiently store, and display large volumes of event messages generated in modern computing systems. In a disclosed implementation, received event messages are assigned to event-message clusters based on non-parameter tokens identified within the event messages. A parsing function is generated for each cluster that is used to extract data from incoming event messages and to prepare event records from event messages that more efficiently and accessible store event information. The parsing functions also provide an alternative basis for assignment of event messages to clusters. Event types associated with the clusters are used for gathering information from various information sources with which to automatically annotate event messages displayed to system administrators, maintenance personnel, and other users of event messages.
Bibliography:Application Number: US201615251481