Granted Patent B2

US 9,021,464 · App. 11/831,089 · Granted Apr 28, 2015

Abstract

Claims (39)

1. A method for correlating configuration change data to an application installation/removal event for a computer system, the method comprising:

retrieving configuration change data records for the computer system, wherein the retrieved configuration change data records are not known to be associated with an application installation/removal event;

identifying the application installation/removal event based on an installed application list of the computer system that identifies currently installed applications on the computer system;

determining correlation criteria;

automatically identifying a plurality of the configuration change data records as being associated with the identified application installation/removal event based on the determined correlation criteria and a characteristic of the configuration change data records; and

identifying issues based on the identified configuration change data records that could lead to a problem event in the computer system before the problem event occurs.

2. The method of claim 1 , wherein identifying the application installation/removal event comprises:

retrieving an identification of currently installed software components of the computer system; and

comparing the retrieved identification of currently installed software components to a previously generated identification of installed software components to identify the application/removal event.

3. The method of claim 2 , wherein an operating system of the computer system maintains records of currently installed software components and wherein retrieving an identification comprises retrieving the records of currently installed software components and wherein comparing the retrieved identification is followed by saving the retrieved identification of currently installed software components as the previously generated identification of installed software components.

4. The method of claim 3 , the operating system comprises a Windows® operating system and wherein the records of currently installed software components are maintained by an Add/Remove program feature of the operating system.

5. The method of claim 2 , wherein the method further comprises an operating system of the computer system generating the configuration change data records.

6. The method of claim 5 , wherein the method further comprises a configuration management program generating a portion of the configuration change data to track configuration changes that are not tracked by the operating system.

7. The method of claim 5 , wherein the configuration change data tracks changes including file changes, directory changes and/or registry changes.

8. The method of claim 7 , wherein the retrieved identification of currently installed software components includes an identification of directory locations of uninstall programs associated with the respective installed software components and wherein ones of the configuration change data records include an identification of a directory location and/or a parent of the directory location associated with the respective ones of the configuration change data records and wherein automatically identifying includes automatically identifying ones of the configuration change data records having a directory location and/or a parent of the directory location corresponding to the directory location of the uninstall program of the identified application installation/removal event as being associated with the identified application installation/removal event.

9. The method of claim 8 , wherein retrieving an identification and comparing the retrieved identification are carried out at a time and wherein the time is associated with the identified application installation/removal event and ones of the configuration change data records have an associated time wherein automatically identifying includes automatically identifying ones of the configuration change data records having an associated time corresponding to the time associated with the identified application installation/removal event as being associated with the identified application installation/removal event.

10. The method of claim 9 , wherein determining correlation criteria includes determining a time period range to be used in automatically identifying ones of the configuration change data records having an associated time corresponding to the time associated with the identified application installation/removal event as being associated with the identified application installation/removal event.

11. The method of claim 2 , wherein identifying the application installation/removal event comprises identifying a plurality of application installation/removal events and wherein retrieving an identification and comparing the retrieved identification are repeatedly carried out responsive to detection of execution of an application install or an application uninstall by the operating system and/or at scheduled times to identify the plurality of application installation/removal events.

12. The method of claim 2 , wherein determining correlation criteria includes identifying a directory tree range criterion and/or a registry key tree range criterion to be used in automatically identifying the plurality of configuration change data records, wherein the directory and/or registry tree range criteria comprise directory sub-tree data structure criteria.

13. The method of claim 12 , wherein determining correlation criteria includes prompting a user to provide the correlation criteria before automatically identifying the plurality of configuration change data records.

14. The method of claim 13 , wherein prompting the user includes prompting the user for a desired level of risk that an individual configuration change data record will incorrectly be associated with the identified application installation/removal event and wherein the directory tree range criterion and/or registry key tree range criterion are decreased for lower desired levels of risk and increased for higher desired levels of risk.

15. The method of claim 2 , wherein automatically identifying is preceded by receiving a correlation request from a user and wherein automatically identifying is carried out responsive to the received correlation request.

16. The method of claim 15 , wherein identifying the application installation/removal event comprises identifying a plurality of application installation/removal events and wherein automatically identifying comprises automatically identifying groups of the configuration change data records as being associated with respective ones of the plurality of application installation/removal events and wherein automatically identifying is followed by reporting the identified groups to the user.

17. A computer system including a processor configured to carry out the method of claim 16 .

18. A computer program product for correlating configuration change data to an application installation/removal event for a computer system, the computer program product comprising computer program code embodied in a non-transitory computer readable medium, the computer program code comprising program code configured to carry out the method of claim 16 .

19. A computer system for correlating configuration change data to an application installation/removal event for a computer system, comprising:

a configuration change database stored on a memory coupled to the computer system that includes a plurality of configuration change data records for the computer system, ones of which track changes on the computer system, wherein the plurality of configuration change data records are not known to be associated with an application installation/removal event;

an installed application list stored on a memory coupled to the computer system that identifies currently installed applications on the computer system;

an applications historical database stored on a memory coupled to the computer system that includes identifications of application install/removal events for the computer system over a period of time;

correlation criteria for use in correlating the configuration change data records with the application install/removal events;

an application control engine executing on a processor of the computer system that is configured to install and/or remove applications and to update the installed application list; and

a logic engine executing on a processor of the computer system that is configured to generate the identifications of application install/removal events based on the installed application list and to identifying a plurality of the configuration change data records as being associated with the identified application installation/removal events based on the correlation criteria and a characteristic of the configuration change data records and identify issues based on the identified configuration change data records that could lead to a problem event in the computer system before the problem event occurs.

20. A computer program product for correlating configuration change data to an application installation/removal event for a computer system, the computer program product comprising:

a non-transitory computer-readable storage medium having computer-readable program code embodied in said medium, said computer-readable program code comprising:

computer-readable program code that retrieves configuration change data records for the computer system, wherein the retrieved configuration change data records are not known to be associated with an application installation/removal event;

computer-readable program code that identifies the application installation/removal event based on an installed application list of the computer system that identifies currently installed applications on the computer system;

computer-readable program code that determines correlation criteria;

computer-readable program code that automatically identifies a plurality of the configuration change data records as being associated with the identified application installation/removal event based on the determined correlation criteria and a characteristic of the configuration change data records; and

computer-readable program code that identifies issues based on the identified configuration change data records that could lead to a problem event in the computer system before the problem event occurs.

Assignments (12)