Ronen Artzi

A virtual domain management system is provided which associates application, physical and virtual domains to enable propagation of events, symptoms and other information across the domains. The virtual domain manager collects events and symptom information across multiple domains by correlating domain topology models. Using a causality matrix and codebook technology the virtual domain manager uses the information to perform root cause and impact analysis across domains. Information from the… Show more

A virtual domain management system is provided which associates application, physical and virtual domains to enable propagation of events, symptoms and other information across the domains. The virtual domain manager collects events and symptom information across multiple domains by correlating domain topology models. Using a causality matrix and codebook technology the virtual domain manager uses the information to perform root cause and impact analysis across domains. Information from the analysis may be fed back into the domains to enhance domain management. Show less

Systems and methods are provided for disabling a device in an enterprise storage system. In one embodiment, a method comprises receiving information identifying a device in a storage area network that is scheduled for an outage. The method further determines one or more paths impacted by the outage of the device, generates a notification identifying the determined one or more paths, and transmits the notification to one or more hosts having paths to the device

A method, apparatus and computer program product for performing an analysis on a Storage Area Network (SAN) system, containing a plurality of components, is disclosed. The method comprises the steps of representing selected ones of the plurality of components and the relationship among the components, wherein the representation comprises the steps of creating at least one non-specific representation of the selected components and creating at least one non-specification representation of… Show more

A method, apparatus and computer program product for performing an analysis on a Storage Area Network (SAN) system, containing a plurality of components, is disclosed. The method comprises the steps of representing selected ones of the plurality of components and the relationship among the components, wherein the representation comprises the steps of creating at least one non-specific representation of the selected components and creating at least one non-specification representation of relations along which the events propagate amongst the selected components, providing a mapping between a plurality events and a plurality of observable events occurring among the components, wherein the mapping is represented as a value associating each event with each observable event, and performing the system analysis based on the mapping of events and observable events. Show less

A method, apparatus and computer-program product for mapping and identifying root causes of performance problems in network based services, wherein the service is composed of applications and transactions, is disclosed. The method comprises the steps of establishing a performance objective value, and a threshold value therefrom, for selected ones of the transactions for each of the applications, wherein the aggregate of the performance objective values insures a known service performance… Show more

A method, apparatus and computer-program product for mapping and identifying root causes of performance problems in network based services, wherein the service is composed of applications and transactions, is disclosed. The method comprises the steps of establishing a performance objective value, and a threshold value therefrom, for selected ones of the transactions for each of the applications, wherein the aggregate of the performance objective values insures a known service performance, monitoring a measure of performance for each of the selected transactions, generating an indication for each of the performance measures that exceeds a corresponding threshold value and determining the cause of the degradation by correlating the transactions generating the indication with the elements executing the transaction. Show less

A method, and computer program product for computing a change plan are presented. A model of a current configuration is identified, the model including modeled system assets and modeled tasks. A request to change the current configuration to a new configuration is received. The request to change the current configuration to generate a plurality of valid strategies to be used in a genetic programming parse tree corresponding to modeled assets and modeled tasks of said model is applied to the… Show more

A method, and computer program product for computing a change plan are presented. A model of a current configuration is identified, the model including modeled system assets and modeled tasks. A request to change the current configuration to a new configuration is received. The request to change the current configuration to generate a plurality of valid strategies to be used in a genetic programming parse tree corresponding to modeled assets and modeled tasks of said model is applied to the model. The request to change the current configuration is applied to at least one of said valid strategies to generate a plurality of potential change plans. The change plans are evolved according to genetic programming principles to a preferred change plan. Show less

This invention relates generally to networks, and more specifically to apparatus and methods for modeling, managing, analyzing and determining root cause errors in surveillance networks.

In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A compliance policy server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violations) according to severity and recurrence, and identifies related rules and application services and network entities which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis… Show more

In a large network, it can be difficult to pinpoint and track down the causes of breaches of established policies. A compliance policy server allows traversal of notifications according to breaches, organizes the breaches (vulnerabilities and violations) according to severity and recurrence, and identifies related rules and application services and network entities which may be related to the breach. An integrated graphical user interface (GUI) provides efficient, timely traversal and analysis of rule breaches across the network to allow quick, efficient identification of the underlying cause or condition of the rule breach, as well as identify impact on application services and network entities. A discoverer gathers configuration data including notifications of changes, alerts, and conditions in the network that are pertinent to the rule breaches. A compliance engine evaluates the configuration and topological data against the rules to identify breaches. Collective breaches pertaining to a common application or service or dependency indicate a common underlying condition causing the breach, therefore providing efficient correction of the underlying condition. Show less

A configuration management tool initiates display of a listing of multiple different types of managed resources present in a storage area network environment. Based on user input, the resource manager receives a selection of two or more types of managed resources from the listing. In addition to receiving a select of two or more types of resources in the listing, the resource manager application receives search criteria associated with each of the selected two or more types of managed… Show more

A configuration management tool initiates display of a listing of multiple different types of managed resources present in a storage area network environment. Based on user input, the resource manager receives a selection of two or more types of managed resources from the listing. In addition to receiving a select of two or more types of resources in the listing, the resource manager application receives search criteria associated with each of the selected two or more types of managed resources. The configuration manager initiates a search for objects (in one or more repositories) that satisfy the search criteria and are of a managed resource type as indicated by the selection. The configuration manager application then produces a report indicating the objects (i.e., storage area network resources and corresponding management information) that satisfy the search criteria. After receiving the report (e.g., search results) that satisfies the search criteria, the user can select a storage area network resource in the report to view information associated with the selected resource. Further, the user can select from multiple different viewing options to view different types of information associated with the selected resource. Show less

Modeling a data path of a network environment is disclosed. Components are identified at a source location of a data path, at a target location of the data path, and connections there between. The network environment includes a plurality of domains, and the data path traverses the plurality of domains. Components and the connections there between are assigned to one of: an input-output path pattern, a virtualizer pattern, and a meta pattern. The patterns represent common elements of components… Show more

Modeling a data path of a network environment is disclosed. Components are identified at a source location of a data path, at a target location of the data path, and connections there between. The network environment includes a plurality of domains, and the data path traverses the plurality of domains. Components and the connections there between are assigned to one of: an input-output path pattern, a virtualizer pattern, and a meta pattern. The patterns represent common elements of components of the network environment. The patterns and relationships between patterns are defined to repeat within and across domains in the network environment. A model of the data path is created from the assigned patterns and the defined relationships between patterns. The created model of the data path is then presented. Show less

A method, apparatus and computer-program product for mapping and identifying resources in network based services is disclosed. The method comprises the steps of determining a measure of utilization for each of the selected transactions, generating an indication for each measure of utilization exceeding an associated utilization threshold value, determining the cause of the measure of utilization exceeding the associated utilization threshold value by correlating the transactions generating the… Show more

A method, apparatus and computer-program product for mapping and identifying resources in network based services is disclosed. The method comprises the steps of determining a measure of utilization for each of the selected transactions, generating an indication for each measure of utilization exceeding an associated utilization threshold value, determining the cause of the measure of utilization exceeding the associated utilization threshold value by correlating the transactions generating the indications with the resources executing the transaction and applying additional resources until the measure of utilization is less than the associated threshold. In one aspect of the invention, balancing the measure of utilization associated with each of the selected transactions occurs to maintain each of the measures of utilization within a substantially known tolerance to each other measure of utilization. Show less

Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of… Show more

Systems and methods are provided for selecting a path for an I/O in a storage area network. In one embodiment, a method comprises receiving path configuration information for paths associated with a host device connected to the storage area network, a listing of components within the storage area network, and a notification of a component failure within the storage area network. The method may also comprise correlating the received path configuration information, the received listing of components, and the received notification of component failure to determine one or more paths associated with the host device affected by the component failure. The method may further comprise transmitting to the host device an alert for the one or more affected paths. Show less