USRE43154E1 - Method and apparatus for monitoring and recording computer system performance parameters - Google Patents

Method and apparatus for monitoring and recording computer system performance parameters Download PDF

Info

Publication number
USRE43154E1
USRE43154E1 US12/057,768 US5776808A USRE43154E US RE43154 E1 USRE43154 E1 US RE43154E1 US 5776808 A US5776808 A US 5776808A US RE43154 E USRE43154 E US RE43154E
Authority
US
United States
Prior art keywords
performance parameters
values
computer system
recording
time window
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime, expires
Application number
US12/057,768
Inventor
Kenny Gross
Larry G. Votta
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Oracle America Inc
Original Assignee
Oracle America Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Oracle America Inc filed Critical Oracle America Inc
Priority to US12/057,768 priority Critical patent/USRE43154E1/en
Application granted granted Critical
Publication of USRE43154E1 publication Critical patent/USRE43154E1/en
Adjusted expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/34Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G06F11/3466Performance evaluation by tracing or monitoring
    • G06F11/3476Data logging
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577Assessing vulnerabilities and evaluating computer system security
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/004Error avoidance
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/34Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G06F11/3438Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment monitoring of user actions
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2201/00Indexing scheme relating to error detection, to error correction, and to monitoring
    • G06F2201/86Event-based monitoring

Definitions

  • the present invention relates to systems for enhancing reliability within computer systems. More specifically, the present invention relates to a method and an apparatus for systematically monitoring and recording performance parameters within a computer system to enhance availability, quality of service and/or security.
  • the circular file has a dual-stage structure, including a first stage that maintains fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window, and a second stage that stores ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
  • the system if the system detects an anomaly in one or more of the performance parameters, the system freezes a state of the circular file in persistent storage while the computer system continues operating. The system then transmits the frozen state of the circular file to an analyst, who may be located at a remote monitoring center.
  • detecting the anomaly can involve using, a threshold limit test on one or more performance parameters, an automated data mining and pattern recognition agent, a soft error rate discriminator (SERD), a sequential probability ratio test (SPRT), a multivariate state estimation technique (MSET), a signature analysis mechanism for intrusion detection, and a neural network.
  • SELD soft error rate discriminator
  • SPRT sequential probability ratio test
  • MSET multivariate state estimation technique
  • the set of performance parameters can include, internal performance parameters maintained by software within the computer system, physical performance parameters measured through sensors located in proximity to the computer system, and canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes.
  • FIG. 1 illustrates a computer system in accordance with an embodiment of the present invention.
  • FIG. 2 illustrates the use of a circular file in a system that monitors and records performance parameters in accordance with an embodiment of the present invention.
  • FIG. 3 is a flow chart illustrating the process of monitoring and recording values for performance parameters in accordance with an embodiment of the present invention.
  • a computer readable storage medium which may be any device or medium that can store code and/or data for use by a computer system.
  • the transmission medium may include a communications network, such as the Internet.
  • FIG. 1 illustrates a computer system 100 in accordance with an embodiment of the present invention.
  • computer system 100 includes a number of processor boards 102 - 105 and a number of memory boards 108 - 110 , which communicate with each other through center plane 112 . These system components are all housed within a frame 114 .
  • these system components and frame 114 are all field replaceable units (FRUs), which are independently monitored as is described below.
  • FRUs field replaceable units
  • a software FRU can include, an operating system, a middleware component, a database, or an application.
  • Computer system 100 is associated with a service processor 118 , which can be located within computer system 100 , or alternatively can be located in a standalone unit separate from computer system 100 .
  • Service processor 118 performs a number of diagnostic functions for computer system 100 .
  • One of these diagnostic functions involves recording performance parameters from the various FRUs within computer system 100 into a set of circular files 116 located within service processor 118 .
  • there exists one dedicated circular file for each FRU within computer system 100 there exists one dedicated circular file for each FRU within computer system 100 . Note that this circular file can have a dual-stage structure as is described below with reference to FIG. 2 .
  • Network 119 can generally include any type of wire or wireless communication channel capable of coupling together computing nodes. This includes, but is not limited to, a local area network, a wide area network, or a combination of networks. In one embodiment of the present invention, network 119 includes the Internet. Remote monitoring center 120 performs various diagnostic functions as is discussed below with reference to FIG. 2 .
  • the present invention is described in the context of a server computer system 100 with multiple processor boards and an associated service processor 18 .
  • the present invention is not meant to be limited to such a server computer system.
  • the present invention can be applied to any type of computer system, with or without a service processor 118 .
  • This includes, but is not limited to, a computer system based on a microprocessor, a mainframe computer, a digital signal processor, a portable computing device, a personal organizer, a device controller, and a computational engine within an appliance.
  • Circular file 202 takes in a number of performance parameters, including internal parameters 208 maintained by software within the computer system.
  • Internal parameters 208 can include system throughput, transaction latencies, queue lengths, load on the central processing unit, load on the memory, load on the cache, I/O traffic, bus saturation metrics, FIFO overflow statistics, and various operational profiles gathered through“virtual sensors” located within the operating system.
  • the performance parameters can additionally include canary parameters 212 associated with distributed synthetic user transactions periodically generated for performance measuring purposes.
  • canary parameters can include user wait times and other Quality Of Service (QOS) metrics measured during execution of distributed synthetic-user transactions.
  • QOS Quality Of Service
  • circular file 202 has dual-stage structure.
  • the first stage 204 contains fine-grain, high-sampling rate data for all monitored parameters.
  • This high-density circular file holds, for example, only the last 72 hours worth of signals. Note that this 72-hour parameter can be adjusted by the customer.
  • the second stage 206 contains ensemble averages of signals from the first stage 204 , but retains data over a longer time period (for example, the most recent 30 days). Note that this dual-stage architecture retains the advantages of maintaining fine-grain information content for rapidly root causing acute problems, and coarser-grain long term information content for root causing more subtle problems, including software aging problems and some security problems whose signatures only become apparent over periods of days or possibly weeks.
  • the new incoming signals simply overwrite the previously recorded signals in circular file 202 .
  • An anomaly detected in any monitored variable becomes a triggering event 214 , which causes the state of dual-stage circular file 202 to be automatically frozen (captured) into persistent memory. This frozen state is then compressed and transmitted to human analysts as is specified within box 216 .
  • the process of detecting the anomaly can involve using, a threshold limit test on one or more performance parameters, an automated data mining and pattern recognition agent, a soft error rate discriminator (SERD), a sequential probability ratio test (SPRT), a multivariate state estimation technique (MSET), and a signature analysis mechanism for intrusion detection.
  • SESD soft error rate discriminator
  • SPRT sequential probability ratio test
  • MSET multivariate state estimation technique
  • an analyst wants to access the data for validation of new techniques, or for evaluating hypotheses about subtle phenomena that do not trip the anomaly thresholds, the analyst can cause a manual dump 217 of circular file 202 at any time.
  • data gathered in this way can be used to provide, predictive failure annunciation, faster Root Cause Analysis (RCA) and enhanced intrusion detection.
  • RCA Root Cause Analysis
  • the benefit of the above-described approach is that it facilitates enhancements to availability, serviceability, performance, capacity planning, quality of service, and security, without placing enormous burdens on the monitoring infrastructure during the majority of the time when systems are behaving without problems.
  • a tertiary benefit comes from the fact that a sensor-operability validation mechanism can continuously sift through data within circular file 202 for proactive identification of sensors that have ceased functioning or have drifted out of calibration.
  • FIG. 3 is a flow chart illustrating the process of monitoring and recording values for performance parameters in accordance with an embodiment of the present invention.
  • the system starts by measuring values of the performance parameters of interest (step 302 ).
  • the system records the values in circular file 202 as is described above with reference to FIG. 2 (step 304 ).
  • the system also tries to detect anomalies in the performance data (step 306 ). If no anomalies are detected, the system returns to step 302 to measure values for the performance parameters again. If one or more anomalies are detected, the system freezes the state of circular file 202 in persistent storage (step 308 ), and then transmits the frozen state to remote monitoring center 120 for further analysis (step 310 ).

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Quality & Reliability (AREA)
  • Computing Systems (AREA)
  • Debugging And Monitoring (AREA)

Abstract

One embodiment of the present invention provides a system that systematically monitors and records performance parameters for a computer system. During operation, the system periodically measures values for a set of performance parameters associated with the computer system while the computer system continues operating. The system then records the values on a data storage device, wherein the recording process keeps track of temporal relationships between events in different performance parameters. The system subsequently allows the recorded values for the set of performance parameters to be analyzed.

Description

BACKGROUND
1. Field of the Invention
The present invention relates to systems for enhancing reliability within computer systems. More specifically, the present invention relates to a method and an apparatus for systematically monitoring and recording performance parameters within a computer system to enhance availability, quality of service and/or security.
2. Related Art
As electronic commerce grows increasingly more prevalent, businesses are increasingly relying on enterprise computing systems to process ever-larger volumes of electronic transactions. A failure in one of these enterprise computing systems can be disastrous, potentially resulting in millions of dollars of lost business. More importantly, a failure can seriously undermine consumer confidence in a business, making customers less likely to purchase goods and services from the business. Hence, it is critically important to ensure high availability in such enterprise computing systems.
To achieve high availability in enterprise computing systems it is necessary to be able to capture unambiguous diagnostic information that can quickly pinpoint the source of defects in hardware or software. If systems have too little event monitoring, when problems crop up at a customer site, service engineers may be unable to quickly identify the source of the problem. This can lead to increased down time, which can adversely impact customer satisfaction and loyalty.
One approach to address this problem is to monitor all aspects of a customer's data center and to send the monitored signals to a central monitoring center. This enables monitoring center personnel to identify problematic discrepancies in system performance parameters and to direct service personnel more efficiently. This remote monitoring approach is currently being employed, but at a high cost and with only limited success.
One of the challenges of remote monitoring is to provide adequate infrastructure to channel the enormous volume of information to a finite number of humans in a remote monitoring center. Note that each server can potentially have several hundred monitored variables, and many customers have several hundred servers. Hence, with thousands of customer sites, it is an extremely challenging task to provide intelligent filtering at remote monitoring centers to analyze data and recognize anomalies with an acceptably low false alarm rate.
What is needed is a method and an apparatus for capturing diagnostic information to enhance system availability without the above-described problems.
SUMMARY
One embodiment of the present invention provides a system that systematically monitors and records performance parameters for a computer system. During operation, the system periodically measures values for a set of performance parameters associated with the computer system while the computer system continues operating. The system then records the values on a data storage device, wherein the recording process keeps track of temporal relationships between events in different performance parameters. The system subsequently allows the recorded values to be analyzed.
In a variation on this embodiment, recording the values involves storing the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
In a further variation, the circular file has a dual-stage structure, including a first stage that maintains fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window, and a second stage that stores ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
In a further variation, if the system detects an anomaly in one or more of the performance parameters, the system freezes a state of the circular file in persistent storage while the computer system continues operating. The system then transmits the frozen state of the circular file to an analyst, who may be located at a remote monitoring center.
In a variation on this embodiment, detecting the anomaly can involve using, a threshold limit test on one or more performance parameters, an automated data mining and pattern recognition agent, a soft error rate discriminator (SERD), a sequential probability ratio test (SPRT), a multivariate state estimation technique (MSET), a signature analysis mechanism for intrusion detection, and a neural network.
In a variation on this embodiment, the computer system is comprised of a plurality of field replaceable units (FRUs). In this variation, the process of recording the values involves recording events for each FRU in local storage associated with each FRU.
In a variation on this embodiment, the set of performance parameters can include, internal performance parameters maintained by software within the computer system, physical performance parameters measured through sensors located in proximity to the computer system, and canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes.
BRIEF DESCRIPTION OF THE FIGURES
FIG. 1 illustrates a computer system in accordance with an embodiment of the present invention.
FIG. 2 illustrates the use of a circular file in a system that monitors and records performance parameters in accordance with an embodiment of the present invention.
FIG. 3 is a flow chart illustrating the process of monitoring and recording values for performance parameters in accordance with an embodiment of the present invention.
DETAILED DESCRIPTION
The following description is presented to enable any person skilled in the art to make and use the invention, and is provided in the context of a particular application and its requirements. Various modifications to the disclosed embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present invention. Thus, the present invention is not intended to be limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.
The data structures and code described in this detailed description are typically stored on a computer readable storage medium, which may be any device or medium that can store code and/or data for use by a computer system. This includes, but is not limited to, magnetic and optical storage devices such as disk drives, magnetic tape, CDs (compact discs) and DVDs (digital versatile discs or digital video discs), and computer instruction signals embodied in a transmission medium (with or without a carrier wave upon which the signals are modulated). For example, the transmission medium may include a communications network, such as the Internet.
Computer System
FIG. 1 illustrates a computer system 100 in accordance with an embodiment of the present invention. As is illustrated in FIG. 1, computer system 100 includes a number of processor boards 102-105 and a number of memory boards 108-110, which communicate with each other through center plane 112. These system components are all housed within a frame 114.
In one embodiment of the present invention, these system components and frame 114 are all field replaceable units (FRUs), which are independently monitored as is described below. Note that all major system units, including both hardware and software, can be decomposed into FRUs. For example, a software FRU can include, an operating system, a middleware component, a database, or an application.
Computer system 100 is associated with a service processor 118, which can be located within computer system 100, or alternatively can be located in a standalone unit separate from computer system 100. Service processor 118 performs a number of diagnostic functions for computer system 100. One of these diagnostic functions involves recording performance parameters from the various FRUs within computer system 100 into a set of circular files 116 located within service processor 118. In one embodiment of the present invention, there exists one dedicated circular file for each FRU within computer system 100. Note that this circular file can have a dual-stage structure as is described below with reference to FIG. 2.
The contents of one or more of these circular files 116 can be transferred across network 119 to remote monitoring center 120 for diagnostic purposes. Network 119 can generally include any type of wire or wireless communication channel capable of coupling together computing nodes. This includes, but is not limited to, a local area network, a wide area network, or a combination of networks. In one embodiment of the present invention, network 119 includes the Internet. Remote monitoring center 120 performs various diagnostic functions as is discussed below with reference to FIG. 2.
Although the present invention is described in the context of a server computer system 100 with multiple processor boards and an associated service processor 18. The present invention is not meant to be limited to such a server computer system. In general, the present invention can be applied to any type of computer system, with or without a service processor 118. This includes, but is not limited to, a computer system based on a microprocessor, a mainframe computer, a digital signal processor, a portable computing device, a personal organizer, a device controller, and a computational engine within an appliance.
Circular File
present invention mitigates the challenges of large-scale remote monitoring schemes by providing a real-time telemetry architecture with a repository structured as a circular file 202 that acts as a system“black box” performance monitor (see FIG. 2)
Circular file 202 takes in a number of performance parameters, including internal parameters 208 maintained by software within the computer system. Internal parameters 208 can include system throughput, transaction latencies, queue lengths, load on the central processing unit, load on the memory, load on the cache, I/O traffic, bus saturation metrics, FIFO overflow statistics, and various operational profiles gathered through“virtual sensors” located within the operating system.
The performance parameters can also include physical parameters 210 measured through sensors located in proximity to the computer system. These physical parameters 210 can include distributed temperatures within the computer system, relative humidity, cumulative or differential vibrations within the computer system, fan speed, acoustic signals, current noise, voltage noise, time-domain reflectometry (TDR) readings, and miscellaneous environmental variables.
The performance parameters can additionally include canary parameters 212 associated with distributed synthetic user transactions periodically generated for performance measuring purposes. For example, canary parameters can include user wait times and other Quality Of Service (QOS) metrics measured during execution of distributed synthetic-user transactions.
In one embodiment of the present invention, circular file 202 has dual-stage structure. The first stage 204 contains fine-grain, high-sampling rate data for all monitored parameters. This high-density circular file holds, for example, only the last 72 hours worth of signals. Note that this 72-hour parameter can be adjusted by the customer. The second stage 206 contains ensemble averages of signals from the first stage 204, but retains data over a longer time period (for example, the most recent 30 days). Note that this dual-stage architecture retains the advantages of maintaining fine-grain information content for rapidly root causing acute problems, and coarser-grain long term information content for root causing more subtle problems, including software aging problems and some security problems whose signatures only become apparent over periods of days or possibly weeks.
During the time that systems are performing without any problems, the new incoming signals simply overwrite the previously recorded signals in circular file 202. An anomaly detected in any monitored variable becomes a triggering event 214, which causes the state of dual-stage circular file 202 to be automatically frozen (captured) into persistent memory. This frozen state is then compressed and transmitted to human analysts as is specified within box 216. Note that the process of detecting the anomaly can involve using, a threshold limit test on one or more performance parameters, an automated data mining and pattern recognition agent, a soft error rate discriminator (SERD), a sequential probability ratio test (SPRT), a multivariate state estimation technique (MSET), and a signature analysis mechanism for intrusion detection.
Alternatively, if an analyst wants to access the data for validation of new techniques, or for evaluating hypotheses about subtle phenomena that do not trip the anomaly thresholds, the analyst can cause a manual dump 217 of circular file 202 at any time. As is indicated within box 218, data gathered in this way can be used to provide, predictive failure annunciation, faster Root Cause Analysis (RCA) and enhanced intrusion detection.
The benefit of the above-described approach is that it facilitates enhancements to availability, serviceability, performance, capacity planning, quality of service, and security, without placing enormous burdens on the monitoring infrastructure during the majority of the time when systems are behaving without problems.
An auxiliary benefit is that improvements over current“threshold limit” alarms that are deployed locally throughout large enterprise servers can be added in the form of smarter agents at the input side of the black box telemetry system.
A tertiary benefit comes from the fact that a sensor-operability validation mechanism can continuously sift through data within circular file 202 for proactive identification of sensors that have ceased functioning or have drifted out of calibration.
Enterprise computing systems (such as computer system 100 illustrated in FIG. 1) can contain many physical sensors deployed for the purpose of anomaly detection and asset protection. By placing threshold limit actuators on the signals from these sensors, it is possible to proactively shut down a domain or an entire server if an over-temperature event is detected. One problem in doing so is that the temperature sensors often have a shorter Mean Time Between Failures (MTBF) than the assets they are designed to protect. If such sensors“fail stupid” (meaning they retain their last mean value, but are no longer responding to changes in temperature), then a server costing in excess of $1,000,000 may be damaged by a thermal event.
Even more likely, however, is that as the sensor eventually drifts out of calibration, in which case it may cause a domain or server to be unnecessarily shut down from a“false alarm” event. In one embodiment of the present invention, a Sequential Probability Ratio Test (SPRT) mechanism with a high sensitivity and a low compute cost continuously sifts signals associated with physical sensors in circular file 202 and“calls home” with an alarm when it detects the incipience or onset of sensor degradation or sensor de-calibration events.
Note that during the recording process, the system keeps track of temporal relationships between events in different performance parameters. This information is useful in performing a root cause analysis. Note that in order to show that an event A causes an event B, it is necessary to: (1) establish a correlation; (2) establish temporal precedence; (3) demonstrate that the correlation is non-spurious; and (4) identify a mechanism that explains how A causes B. By keeping track of the temporal relationships between events in different performance parameters, temporal precedence can be established between these events, which can help in establishing a root cause.
Note that simply maintaining log files of events for each performance parameters does not suffice to establish temporal relationships between events in different performance parameters, because these events will appear in different log files which are not temporally correlated with each other.
Process of Recording and Monitoring Performance Parameters
FIG. 3 is a flow chart illustrating the process of monitoring and recording values for performance parameters in accordance with an embodiment of the present invention. The system starts by measuring values of the performance parameters of interest (step 302). Next, the system records the values in circular file 202 as is described above with reference to FIG. 2 (step 304). The system also tries to detect anomalies in the performance data (step 306). If no anomalies are detected, the system returns to step 302 to measure values for the performance parameters again. If one or more anomalies are detected, the system freezes the state of circular file 202 in persistent storage (step 308), and then transmits the frozen state to remote monitoring center 120 for further analysis (step 310).
The foregoing descriptions of embodiments of the present invention have been presented for purposes of illustration and description only. They are not intended to be exhaustive or to limit the present invention to the forms disclosed. Accordingly, many modifications and variations will be apparent to practitioners skilled in the art. Additionally, the above disclosure is not intended to limit the present invention. The scope of the present invention is defined by the appended claims.

Claims (42)

1. A method for systematically monitoring and recording performance parameters for a computer system, comprising:
periodically measuring values for a set of performance parameters associated with the computer system while the computer system continues operating, wherein the set of performance parameters can include:
internal performance parameters maintained by software within the computer system,
physical performance parameters measured through sensors located in proximity to the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
recording the values on a data storage device;
wherein the recording process keeps track of temporal relationships between events in different performance parameters; and
subsequently allowing the recorded values for the set of performance parameters to be analyzed.
2. The method of claim 1, wherein recording the values involves storing the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
3. The method of claim 2, wherein the circular file has a dual-stage structure, including:
a first stage that maintains fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
4. The method of claim 2, wherein subsequently allowing the recorded values for the set of performance parameters to be analyzed involves:
detecting an anomaly in one or more of the performance parameters; and
in response to the anomaly,
freezing a state of the circular file in persistent storage while the computer systems continues operating, and
transmitting the frozen state of the circular file to an analyst.
5. The method of claim 4, wherein transmitting the frozen state of the circular file to the analyst involves transmitting the frozen state to a remote monitoring center.
6. The method of claim 4, wherein detecting the anomaly can involve using:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rate discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
7. The method of claim 1,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein recording the values involves recording events for each FRU in local storage associated with each FRU.
8. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for systematically monitoring and recording performance parameters for a computer system, wherein the computer-readable storage medium includes one of a volatile memory, a non-volatile memory, a disk drive, a magnetic tape, a compact disc, a digital versatile disk and a digital video disk, the method comprising:
periodically measuring values for a set of performance parameters associated with the computer system while the computer system continues operating, wherein the set of performance parameters can include:
internal performance parameters maintained by software within the computer system,
physical performance parameters measured through sensors located in proximity to the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
recording the values on a data storage device;
wherein the recording process keeps track of temporal relationships between events in different performance parameters; and
subsequently allowing the recorded values for the set of performance parameters to be analyzed.
9. The computer-readable storage medium of claim 8, wherein recording the values involves storing the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
10. The computer-readable storage medium of claim 9, wherein the circular file has a dual-stage structure, including:
a first stage that maintains fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
11. The computer-readable storage medium of claim 9, wherein subsequently allowing the recorded values for the set of performance parameters to be analyzed involves:
detecting an anomaly in one or more of the performance parameters; and
in response to the anomaly,
freezing a state of the circular file in persistent storage while the computer system continues operating, and
transmitting the frozen state of the circular file to an analyst.
12. The computer-readable storage medium of claim 11, wherein transmitting the frozen state of the circular file to the analyst involves transmitting the frozen state to a remote monitoring center.
13. The computer-readable storage medium of claim 11, wherein detecting the anomaly can involve using:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rate discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
14. The computer-readable storage medium of claim 8,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein recording the values involves recording events for each FRU in local storage associated with each FRU.
15. An apparatus that systematically monitors and records performance parameters for a computer system, comprising:
a measurement mechanism configured to periodically measure values for a set of performance parameters associated with the computer system while the computer system continues operating, wherein the set of performance parameters can include:
internal performance parameters maintained by software within the computer system,
physical performance parameters measured through sensors located in proximity to the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
a recording mechanism configured to record the values on a data storage device;
wherein the recording mechanism keeps track of temporal relationships between events in different performance parameters; and
an analysis mechanism configured to allow the recorded values for the set of performance parameters to be analyzed.
16. The apparatus of claim 15, wherein the recording mechanism is configured to store the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
17. The apparatus of claim 16, wherein the circular file has a dual-stage structure, including:
a first stage that maintains fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
18. The apparatus of claim 16, wherein the analysis mechanism is configured to:
detect an anomaly in one or more of the performance parameters; and
in response to the anomaly, to
freeze a state of the circular file in persistent storage while the computer system continues operating, and to
transmit the frozen state of the circular file to an analyst.
19. The apparatus of claim 18, wherein the analyst is located at
a remote monitoring center.
20. The apparatus of claim 18, wherein the measuring mechanism can be configured to use:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rate discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
21. The apparatus of claim 15,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein the recording mechanism is configured to record events for each FRU in local storage associated with each FRU.
22. A method for systematically monitoring and recording performance parameters for a computer system, comprising:
periodically measuring values for a set of performance parameters associated with the computer system while the computer system continues operating;
wherein the set of performance parameters includes at least one of:
physical performance parameters measured through sensors located in proximity to the compute system,
internal performance parameters maintained by software within the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
recording the values on a data storage device, wherein recording the values involves recording fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window, and storing a record of averages of the fine-grain, high-sampling rate data from a preceding second time window, wherein the second time window is larger than the first time window;
wherein the recording process keeps track of temporal relationships between events in different performance parameters; and
subsequently allowing the recorded values for the set of performance parameters to be analyzed.
23. The method of claim 22, wherein recording the values involves storing the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
24. The method of claim 23, wherein the circular file has a dual-stage structure, including:
a first stage that maintains the fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores an ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
25. The method of claim 23, wherein subsequently allowing the recorded values for the set of performance parameters to be analyzed involves:
detecting an anomaly in one or more of the performance parameters; and
in response to the anomaly,
freezing a state of the circular file in persistent storage while the computer systems continues operating, and
transmitting the frozen state of the circular file to an analyst.
26. The method of claim 25, wherein transmitting the frozen state of the circular file to the analyst involves transmitting the frozen state to a remote monitoring center.
27. The method of claim 25, wherein detecting the anomaly can involve using:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rate discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
28. The method of claim 22,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein recording the values involves recording events for each FRU in local storage associated with each FRU.
29. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for systematically monitoring and recording performance parameters for a computer system, wherein the computer-readable storage medium includes one of a volatile memory, a non-volatile memory, a disk drive, a magnetic tape, a compact disc, a digital versatile disk and a digital video disk, the method comprising:
periodically measuring values for a set of performance parameters associated with the computer system while the computer system continues operating;
wherein the set of performance parameters includes at least one of:
physical performance parameters measured through sensors located in proximity to the computer system,
internal performance parameters maintained by software within the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
recording the values on a data storage device, wherein recording the values involves recording fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window, and storing a record of averages of the fine-grain, high-sampling rate data from a preceding second time window, wherein the second time window is larger than the first time window;
wherein the recording process keeps track of temporal relationships between events in different performance parameters; and
subsequently allowing the recorded values for the set of performance parameters to be analyzed.
30. The computer-readable storage medium of claim 29, wherein recording the values involves storing the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
31. The computer-readable storage medium of claim 30, wherein the circular file has a dual-stage structure, including:
a first stage that maintains the fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores an ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
32. The computer-readable storage medium of claim 30, wherein subsequently allowing the recorded values for the set of performance parameters to be analyzed involves:
detecting an anomaly in one or more of the performance parameters; and
in response to the anomaly,
freezing a state of the circular file in persistent storage while the computer system continues operating, and
transmitting the frozen state of the circular file to an analyst.
33. The computer-readable storage medium of claim 32, wherein transmitting the frozen state of the circular file to the analyst involves transmitting the frozen state to a remote monitoring center.
34. The computer-readable storage medium of claim 32, wherein detecting the anomaly can involve using:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rale discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
35. The computer-readable storage medium of claim 29,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein recording the values involves recording events for each FRU in local storage associated with each FRU.
36. An apparatus that systematically monitors and records performance parameters for a computer system, comprising:
a measurement mechanism configured to periodically measure values for a set of performance parameters associated with the computer system while the computer system continues operating;
wherein the set of performance parameters includes at least one of:
physical performance parameters measured through sensors located in proximity to the computer system,
internal performance parameters maintained by software within the computer system, and
canary performance parameters associated with synthetic user transactions periodically generated for performance measuring purposes;
a recording mechanism configured to record the values on a data storage device, wherein recording the values involves recording fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window, and storing a record of averages of the fine-grain, high-sampling rate data from a preceding second time window, wherein the second time window is larger than the first time window;
wherein the recording mechanism keeps track of temporal relationships between events in different performance parameters; and
an analysis mechanism configured to allow the recorded values for the set of performance parameters to be analyzed.
37. The apparatus of claim 36, wherein the recording mechanism is configured to store the values in a circular file, wherein if the circular file is full, new incoming values overwrite the oldest existing values in the circular file.
38. The apparatus of claim 37, wherein the circular file has a dual-stage structure, including:
a first stage that maintains the fine-grain, high-sampling rate data for the set of performance parameters over a preceding first time window; and
a second stage that stores an ensemble averages of data from the first stage over a preceding second time window, wherein the second time window is larger that the first time window.
39. The apparatus of claim 37, wherein the analysis mechanism is configured to:
detect an anomaly in one or more of the performance parameters; and
in response to the anomaly, to
freeze a state of the circular file in persistent storage while the computer system continues operating, and to
transmit the frozen state of the circular file to an analyst.
40. The apparatus of claim 39, wherein the analyst is located at a remote monitoring center.
41. The apparatus of claim 39, wherein the measuring mechanism can be configured to use:
a threshold limit test on one or more performance parameters;
an automated data mining and pattern recognition agent;
a soft error rate discriminator (SERD);
a sequential probability ratio test (SPRT);
a multivariate state estimation technique (MSET);
a signature analysis mechanism for intrusion detection; and
a neural network.
42. The apparatus of claim 36,
wherein the computer system is comprised of a plurality of field replaceable units (FRUs); and
wherein the recording mechanism is configured to record events for each FRU in local storage associated with each FRU.
US12/057,768 2002-10-17 2008-03-28 Method and apparatus for monitoring and recording computer system performance parameters Expired - Lifetime USRE43154E1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US12/057,768 USRE43154E1 (en) 2002-10-17 2008-03-28 Method and apparatus for monitoring and recording computer system performance parameters

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US10/272,680 US7020802B2 (en) 2002-10-17 2002-10-17 Method and apparatus for monitoring and recording computer system performance parameters
US12/057,768 USRE43154E1 (en) 2002-10-17 2008-03-28 Method and apparatus for monitoring and recording computer system performance parameters

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US10/272,680 Reissue US7020802B2 (en) 2002-10-17 2002-10-17 Method and apparatus for monitoring and recording computer system performance parameters

Publications (1)

Publication Number Publication Date
USRE43154E1 true USRE43154E1 (en) 2012-01-31

Family

ID=32092636

Family Applications (2)

Application Number Title Priority Date Filing Date
US10/272,680 Ceased US7020802B2 (en) 2002-10-17 2002-10-17 Method and apparatus for monitoring and recording computer system performance parameters
US12/057,768 Expired - Lifetime USRE43154E1 (en) 2002-10-17 2008-03-28 Method and apparatus for monitoring and recording computer system performance parameters

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/272,680 Ceased US7020802B2 (en) 2002-10-17 2002-10-17 Method and apparatus for monitoring and recording computer system performance parameters

Country Status (1)

Country Link
US (2) US7020802B2 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110185235A1 (en) * 2010-01-26 2011-07-28 Fujitsu Limited Apparatus and method for abnormality detection
US20120030522A1 (en) * 2010-02-15 2012-02-02 Kentarou Yabuki Fault cause extraction apparatus, fault cause extraction method, and program recording medium
US20120144246A1 (en) * 2010-12-02 2012-06-07 Microsoft Corporation Performance monitoring for applications without explicit instrumentation

Families Citing this family (83)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7203868B1 (en) * 1999-11-24 2007-04-10 Unisys Corporation Dynamic monitoring of resources using snapshots of system states
US6620723B1 (en) * 2000-06-27 2003-09-16 Applied Materials, Inc. Formation of boride barrier layers using chemisorption techniques
US6972267B2 (en) 2002-03-04 2005-12-06 Applied Materials, Inc. Sequential deposition of tantalum nitride using a tantalum-containing precursor and a nitrogen-containing precursor
US7243265B1 (en) * 2003-05-12 2007-07-10 Sun Microsystems, Inc. Nearest neighbor approach for improved training of real-time health monitors for data processing systems
US8201249B2 (en) * 2003-05-14 2012-06-12 Northrop Grumman Systems Corporation Steady state computer intrusion and misuse detection
US6950773B1 (en) * 2004-02-10 2005-09-27 Sun Microsystems, Inc. Detecting thermal anomalies in computer systems based on correlations between instrumentation signals
US20050252449A1 (en) 2004-05-12 2005-11-17 Nguyen Son T Control of gas flow and delivery to suppress the formation of particles in an MOCVD/ALD system
US7483810B2 (en) * 2004-06-29 2009-01-27 Honeywell International Inc. Real time event logging system
US7472315B2 (en) * 2005-02-09 2008-12-30 International Business Machines Corporation Method of seamlessly integrating thermal event information data with performance monitor data
JP4734003B2 (en) * 2005-03-17 2011-07-27 富士通株式会社 Soft error correction method, memory control device, and memory system
US20070034206A1 (en) * 2005-08-11 2007-02-15 Urmanov Aleksey M Method and apparatus for generating a telemetric impulsional response fingerprint for a computer system
US7869965B2 (en) * 2005-08-17 2011-01-11 Oracle America, Inc. Inferential power monitor without voltage/current transducers
US7493525B2 (en) * 2005-09-21 2009-02-17 Cisco Technology, Inc. Method and system for managing failure information
US7827448B1 (en) * 2006-01-27 2010-11-02 Sprint Communications Company L.P. IT analysis integration tool and architecture
US7558985B2 (en) * 2006-02-13 2009-07-07 Sun Microsystems, Inc. High-efficiency time-series archival system for telemetry signals
US7870893B2 (en) * 2006-04-06 2011-01-18 Oracle America, Inc. Multichannel cooling system with magnetohydrodynamic pump
US8266329B2 (en) * 2006-06-01 2012-09-11 Hewlett-Packard Development Company, L.P. Apparatus and method for accessing command line interface information from a device
US7672129B1 (en) 2006-09-19 2010-03-02 Sun Microsystems, Inc. Intelligent microchannel cooling
US7769562B2 (en) * 2006-11-13 2010-08-03 Oracle America, Inc. Method and apparatus for detecting degradation in a remote storage device
US7436059B1 (en) 2006-11-17 2008-10-14 Sun Microsystems, Inc. Thermoelectric cooling device arrays
US7913022B1 (en) 2007-02-14 2011-03-22 Xilinx, Inc. Port interface modules (PIMs) in a multi-port memory controller (MPMC)
US7711907B1 (en) 2007-02-14 2010-05-04 Xilinx, Inc. Self aligning state machine
US7720636B1 (en) * 2007-02-14 2010-05-18 Xilinx, Inc. Performance monitors (PMs) for measuring performance in a system and providing a record of transactions performed
US8479124B1 (en) 2007-02-14 2013-07-02 Xilinx, Inc. Graphical user interface (GUI) including input files with information that determines representation of subsequent content displayed by the GUI
US7577542B2 (en) * 2007-04-11 2009-08-18 Sun Microsystems, Inc. Method and apparatus for dynamically adjusting the resolution of telemetry signals
US20090009960A1 (en) * 2007-07-05 2009-01-08 Melanson Ronald J Method and apparatus for mitigating dust-fouling problems
US7757124B1 (en) * 2007-07-16 2010-07-13 Oracle America, Inc. Method and system for automatic correlation of asynchronous errors and stimuli
US8230278B2 (en) 2007-11-26 2012-07-24 AT&T Intellectual Property, I, LP Test system having a sub-system to sub-system bridge
US7895146B2 (en) * 2007-12-03 2011-02-22 Microsoft Corporation Time modulated generative probabilistic models for automated causal discovery that monitors times of packets
US8180718B2 (en) * 2008-01-14 2012-05-15 Hewlett-Packard Development Company, L.P. Engine for performing root cause and effect analysis
US8447719B2 (en) * 2008-01-14 2013-05-21 Hewlett-Packard Development Company, L.P. Compilation of causal rules into continuations
US20090183030A1 (en) * 2008-01-14 2009-07-16 Bethke Bob Episodic cause analysis
US8437881B2 (en) * 2008-02-15 2013-05-07 The Pnc Financial Services Group, Inc. Systems and methods for computer equipment management
US7925873B2 (en) * 2008-03-13 2011-04-12 Oracle America, Inc. Method and apparatus for controlling operating parameters in a computer system
US8176342B2 (en) * 2008-04-24 2012-05-08 Oracle America, Inc. Real-time inference of power efficiency metrics for a computer system
US7756652B2 (en) * 2008-04-24 2010-07-13 Oracle America, Inc. Estimating a power utilization of a computer system
US20090271049A1 (en) * 2008-04-25 2009-10-29 Sun Microsystems, Inc. Assuring stability of the speed of a cooling fan in a computer system
US7716006B2 (en) 2008-04-25 2010-05-11 Oracle America, Inc. Workload scheduling in multi-core processors
US8230266B2 (en) * 2008-06-03 2012-07-24 General Electric Company System and method for trip event data acquisition and wind turbine incorporating same
US9779234B2 (en) * 2008-06-18 2017-10-03 Symantec Corporation Software reputation establishment and monitoring system and method
US20090326864A1 (en) * 2008-06-27 2009-12-31 Sun Microsystems, Inc. Determining the reliability of an interconnect
US7975175B2 (en) * 2008-07-09 2011-07-05 Oracle America, Inc. Risk indices for enhanced throughput in computing systems
US20100023282A1 (en) * 2008-07-22 2010-01-28 Sun Microsystem, Inc. Characterizing a computer system using radiating electromagnetic signals monitored through an interface
US8108697B2 (en) * 2008-07-28 2012-01-31 Oracle America, Inc. Controlling the power utilization of a computer system by adjusting a cooling fan speed
US7869977B2 (en) * 2008-08-08 2011-01-11 Oracle America, Inc. Using multiple antennas to characterize a computer system based on electromagnetic signals
US8467912B2 (en) * 2008-08-11 2013-06-18 Oracle America, Inc. Controlling a cooling fan for a storage array
US7962797B2 (en) * 2009-03-20 2011-06-14 Microsoft Corporation Automated health model generation and refinement
US9152530B2 (en) 2009-05-14 2015-10-06 Oracle America, Inc. Telemetry data analysis using multivariate sequential probability ratio test
US9495272B2 (en) * 2009-06-11 2016-11-15 Oracle America, Inc. Method and system for generating a power consumption model of at least one server
US8164434B2 (en) * 2009-06-16 2012-04-24 Oracle America, Inc. Cooling-control technique for use in a computer system
US9188996B2 (en) * 2009-09-03 2015-11-17 Oracle America, Inc. System and method for controlling computer system fan speed
WO2012088707A1 (en) * 2010-12-31 2012-07-05 中国科学院自动化研究所 Intelligent detecting system and detecting method for detecting fault of device
US9600523B2 (en) 2011-01-19 2017-03-21 Oracle International Corporation Efficient data collection mechanism in middleware runtime environment
US8892960B2 (en) * 2011-01-19 2014-11-18 Oracle International Corporation System and method for determining causes of performance problems within middleware systems
US8627150B2 (en) 2011-01-19 2014-01-07 Oracle International Corporation System and method for using dependency in a dynamic model to relate performance problems in a complex middleware environment
US8631280B2 (en) 2011-01-19 2014-01-14 Oracle International Corporation Method of measuring and diagnosing misbehaviors of software components and resources
US20130090889A1 (en) * 2011-10-05 2013-04-11 Oracle International Corporation Dynamic regulation of temperature changes using telemetry data analysis
CN103365762A (en) * 2012-04-06 2013-10-23 鸿富锦精密工业(深圳)有限公司 Server and environment parameter recording method of server
EP2839347A1 (en) * 2012-04-16 2015-02-25 KK Wind Solutions A/S A data acquisition system and a method of acquiring data from a wind turbine
US8913880B1 (en) * 2013-06-23 2014-12-16 Nice-Systems Ltd. Method and apparatus for managing video storage
EP2882201A1 (en) * 2013-12-04 2015-06-10 Thomson Licensing Method of automatically and near-real-time managing data acquisition policies of remote data sources based upon manipulation of data representation during data analysis
US9983918B2 (en) * 2015-10-30 2018-05-29 Oracle International Corporation Continuous capture of replayable database system workload
US10101049B2 (en) 2015-11-12 2018-10-16 Oracle International Corporation Determining parameters of air-cooling mechanisms
US9979675B2 (en) 2016-02-26 2018-05-22 Microsoft Technology Licensing, Llc Anomaly detection and classification using telemetry data
US10635992B2 (en) 2016-06-03 2020-04-28 Oracle International Corporation Reducing bandwidth requirements for telemetry data using a cross-imputability analysis technique
CN107589320B (en) * 2016-07-08 2021-01-26 台达电子企业管理(上海)有限公司 Wave recording method and wave recording device of power module
US10796242B2 (en) * 2016-08-25 2020-10-06 Oracle International Corporation Robust training technique to facilitate prognostic pattern recognition for enterprise computer systems
US11126465B2 (en) * 2017-03-23 2021-09-21 Microsoft Technology Licensing, Llc Anticipatory collection of metrics and logs
CN107277164B (en) * 2017-07-21 2020-09-11 重庆市端峰科技有限公司 Remote intelligent monitoring system for children
US10623429B1 (en) * 2017-09-22 2020-04-14 Amazon Technologies, Inc. Network management using entropy-based signatures
US10669164B2 (en) 2018-01-31 2020-06-02 Oracle International Corporation Using waste heat from a data center cooling system to facilitate low-temperature desalination
US10599343B2 (en) 2018-04-06 2020-03-24 Oracle International Corporation Proactively resilvering a striped disk array in advance of a predicted disk drive failure
US10664324B2 (en) 2018-05-30 2020-05-26 Oracle International Corporation Intelligent workload migration to optimize power supply efficiencies in computer data centers
US11341588B2 (en) 2019-09-04 2022-05-24 Oracle International Corporation Using an irrelevance filter to facilitate efficient RUL analyses for utility system assets
US11367018B2 (en) 2019-12-04 2022-06-21 Oracle International Corporation Autonomous cloud-node scoping framework for big-data machine learning use cases
US11460500B2 (en) 2020-02-07 2022-10-04 Oracle International Corporation Counterfeit device detection using EMI fingerprints
US11255894B2 (en) 2020-02-28 2022-02-22 Oracle International Corporation High sensitivity detection and identification of counterfeit components in utility power systems via EMI frequency kiviat tubes
US11275144B2 (en) 2020-03-17 2022-03-15 Oracle International Corporation Automated calibration of EMI fingerprint scanning instrumentation for utility power system counterfeit detection
US11948051B2 (en) 2020-03-23 2024-04-02 Oracle International Corporation System and method for ensuring that the results of machine learning models can be audited
US11822036B2 (en) 2021-10-07 2023-11-21 Oracle International Corporation Passive spychip detection through time series monitoring of induced magnetic field and electromagnetic interference
US11740122B2 (en) 2021-10-20 2023-08-29 Oracle International Corporation Autonomous discrimination of operation vibration signals
US12001254B2 (en) 2021-11-02 2024-06-04 Oracle International Corporation Detection of feedback control instability in computing device thermal control
US11729940B2 (en) 2021-11-02 2023-08-15 Oracle International Corporation Unified control of cooling in computers

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3818458A (en) 1972-11-08 1974-06-18 Comress Method and apparatus for monitoring a general purpose digital computer
US5500940A (en) * 1994-04-25 1996-03-19 Hewlett-Packard Company Method for evaluating failure in an electronic data storage system and preemptive notification thereof, and system with component failure evaluation
US5682328A (en) 1996-09-11 1997-10-28 Bbn Corporation Centralized computer event data logging system
US5819066A (en) * 1996-02-28 1998-10-06 Electronic Data Systems Corporation Application and method for benchmarking a database server
US5991708A (en) 1997-07-07 1999-11-23 International Business Machines Corporation Performance monitor and method for performance monitoring within a data processing system
US6148338A (en) 1998-04-03 2000-11-14 Hewlett-Packard Company System for logging and enabling ordered retrieval of management events
US6223148B1 (en) 1995-12-18 2001-04-24 Ikos Systems, Inc. Logic analysis system for logic emulation systems
US6269412B1 (en) 1997-05-13 2001-07-31 Micron Technology, Inc. Apparatus for recording information system events
US6874105B2 (en) 1998-10-30 2005-03-29 International Business Machines Corporation Operation graph based event monitoring system

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3818458A (en) 1972-11-08 1974-06-18 Comress Method and apparatus for monitoring a general purpose digital computer
US5500940A (en) * 1994-04-25 1996-03-19 Hewlett-Packard Company Method for evaluating failure in an electronic data storage system and preemptive notification thereof, and system with component failure evaluation
US6223148B1 (en) 1995-12-18 2001-04-24 Ikos Systems, Inc. Logic analysis system for logic emulation systems
US5819066A (en) * 1996-02-28 1998-10-06 Electronic Data Systems Corporation Application and method for benchmarking a database server
US5682328A (en) 1996-09-11 1997-10-28 Bbn Corporation Centralized computer event data logging system
US6269412B1 (en) 1997-05-13 2001-07-31 Micron Technology, Inc. Apparatus for recording information system events
US5991708A (en) 1997-07-07 1999-11-23 International Business Machines Corporation Performance monitor and method for performance monitoring within a data processing system
US6148338A (en) 1998-04-03 2000-11-14 Hewlett-Packard Company System for logging and enabling ordered retrieval of management events
US6874105B2 (en) 1998-10-30 2005-03-29 International Business Machines Corporation Operation graph based event monitoring system

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110185235A1 (en) * 2010-01-26 2011-07-28 Fujitsu Limited Apparatus and method for abnormality detection
US8560894B2 (en) * 2010-01-26 2013-10-15 Fujitsu Limited Apparatus and method for status decision
US20120030522A1 (en) * 2010-02-15 2012-02-02 Kentarou Yabuki Fault cause extraction apparatus, fault cause extraction method, and program recording medium
US8719636B2 (en) * 2010-02-15 2014-05-06 Nec Corporation Apparatus method, and storage medium for fault cause extraction utilizing performance values
US9274869B2 (en) 2010-02-15 2016-03-01 Nec Corporation Apparatus, method and storage medium for fault cause extraction utilizing performance values
US20120144246A1 (en) * 2010-12-02 2012-06-07 Microsoft Corporation Performance monitoring for applications without explicit instrumentation
US9026862B2 (en) * 2010-12-02 2015-05-05 Robert W. Dreyfoos Performance monitoring for applications without explicit instrumentation

Also Published As

Publication number Publication date
US20040078723A1 (en) 2004-04-22
US7020802B2 (en) 2006-03-28

Similar Documents

Publication Publication Date Title
USRE43154E1 (en) Method and apparatus for monitoring and recording computer system performance parameters
Vilalta et al. Predictive algorithms in the management of computer systems
US8046637B2 (en) Telemetry data filtering through sequential analysis
US7577542B2 (en) Method and apparatus for dynamically adjusting the resolution of telemetry signals
US7096499B2 (en) Method and system for simplifying the structure of dynamic execution profiles
US7962611B2 (en) Methods, systems and computer program products for detecting flow-level network traffic anomalies via abstraction levels
US8655623B2 (en) Diagnostic system and method
US11250043B2 (en) Classification of log data
US9152530B2 (en) Telemetry data analysis using multivariate sequential probability ratio test
US20130138419A1 (en) Method and system for the assessment of computer system reliability using quantitative cumulative stress metrics
US11093349B2 (en) System and method for reactive log spooling
US8340923B2 (en) Predicting remaining useful life for a computer system using a stress-based prediction technique
US20170244733A1 (en) Intrusion detection using efficient system dependency analysis
US20090292720A1 (en) Service Model Flight Recorder
JP2019215858A (en) System and method for remotely detecting anomaly
US7076389B1 (en) Method and apparatus for validating sensor operability in a computer system
US7751910B2 (en) High-accuracy virtual sensors for computer systems
US7171586B1 (en) Method and apparatus for identifying mechanisms responsible for “no-trouble-found” (NTF) events in computer systems
CN115880611A (en) Cash receiving loss prevention method, device, equipment and storage medium
Tsai et al. A study of soft error consequences in hard disk drives
US9645875B2 (en) Intelligent inter-process communication latency surveillance and prognostics
US7085681B1 (en) Symbiotic interrupt/polling approach for monitoring physical sensors
CN113132393A (en) Abnormality detection method, abnormality detection device, electronic apparatus, and storage medium
Liew et al. Detecting adversary using Windows digital artifacts
US11042428B2 (en) Self-optimizing inferential-sensing technique to optimize deployment of sensors in a computer system

Legal Events

Date Code Title Description
FEPP Fee payment procedure

Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

FPAY Fee payment

Year of fee payment: 8

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 12TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1553)

Year of fee payment: 12