Granted Patent B2

US 9,923,856 · App. 15/018,059 · Granted Mar 20, 2018

Inventors: Jake Seigel (Halifax, CA); Derek Alfred Jury (Beachville, CA)

Assignee: QUEST SOFTWARE INC.

H04L51/26H04L41/06H04L41/0604H04L41/0609H04L51/30H04L67/1097

Abstract

Claims (87)

1. A computer-implemented method, comprising:

receiving, by an agent, a request to select a deputized agent in a group of agents;

determining data associated with a hardware component that is hosting the agent;

sending the data to a selection agent in the group;

receiving a message from the selection agent indicating that the agent has been deputized;

transitioning from a normal mode of operation to a deputized mode of operation;

receiving one or more event logs from other agents in the group;

determining that at least one event log of the one or more event logs has a high priority;

sending the at least one event log having the high priority to the coordinator; and

storing the one or more event logs in a storage device accessible to the hardware component.

2. The computer-implemented method of claim 1 , wherein determining the data associated with the hardware component that is hosting the agent comprises:

determining a processing power of the hardware component in terms of millions of instructions per second (MIPS); and

determining a storage capacity of the storage device that is accessible to the hardware component.

3. The computer-implemented method of claim 1 , wherein determining the data associated with the hardware component that is hosting the agent comprises:

determining an average inter-group communications latency of a first plurality of messages received by the agent from the other agents in the group; and

determining an average ping message latency associated with a second plurality of messages between the agent and the coordinator.

4. The computer-implemented method of claim 1 , further comprising:

receiving, by the agent, a group information message from the coordinator indicating that the agent belongs to a group and identifying the other agents in the group.

5. The computer-implemented method of claim 1 , further comprising:

monitoring, by the agent, a hardware component in a computing system;

determining, by the agent, that an event associated with the hardware component occurred; and

generating, by the agent, an event log based on the event.

6. The computer-implemented method of claim 1 , further comprising:

determining statistics associated with the one or more event logs stored in the storage device, the statistics including a number of event logs stored in the storage device; and

sending the statistics to the coordinator.

7. The computer-implemented method of claim 1 , further comprising:

receiving a resume message from the coordinator;

transitioning from the deputized mode of operation to the normal mode of operation;

sending the one or more event logs stored in the storage device to the coordinator; and

sending a newly generated event log to the coordinator.

8. One or more non-transitory computer-readable media storing instructions that are executable by one or more processors to perform operations comprising:

receiving, by an agent, a request to select a deputized agent in a group of agents;

determining data associated with a hardware component that is hosting the agent;

sending the data to a selection agent in the group;

receiving a message from the selection agent indicating that the agent has been deputized;

transitioning from a normal mode of operation to a deputized mode of operation;

receiving one or more event logs from other agents in the group;

determining that at least one event log of the one or more event logs has a high priority;

sending the at least one event log having the high priority to the coordinator; and

storing the one or more event logs in a storage device accessible to the hardware component.

9. The one or more non-transitory computer-readable media of claim 8 , wherein determining the data associated with the hardware component that is hosting the agent comprises:

determining a processing power of the hardware component in terms of millions of instructions per second (MIPS); and

determining a storage capacity of the storage device that is accessible to the hardware component.

10. The one or more non-transitory computer-readable media of claim 8 , wherein determining the data associated with the hardware component that is hosting the agent comprises:

determining an average inter-group communications latency of a first plurality of messages received by the agent from the other agents in the group; and

determining an average ping message latency associated with a second plurality of messages between the agent and the coordinator.

11. The one or more non-transitory computer-readable media of claim 8 , the operations further comprising:

receiving, by the agent, a group information message from the coordinator indicating that the agent belongs to a group and identifying the other agents in the group.

12. The one or more non-transitory computer-readable media of claim 8 , the operations further comprising:

determining statistics associated with the one or more event logs stored in the storage device, the statistics including a number of event logs stored in the storage device; and

sending the statistics to the coordinator.

13. The one or more non-transitory computer-readable media of claim 8 , further comprising:

receiving a resume message from the coordinator;

transitioning from the deputized mode of operation to the normal mode of operation;

sending the one or more event logs stored in the storage device to the coordinator; and

sending a newly generated event log to the coordinator.

14. A server comprising:

one or more processors; and

one or more non-transitory computer-readable media storing instructions that are executable by the one or more processors to:

receiving, by an agent executing on the server, a request to select a deputized agent in a group of agents;

determining data associated with the server;

sending the data to a selection agent in the group;

receiving a message from the selection agent indicating that the agent has been deputized;

transitioning from a normal mode of operation to a deputized mode of operation;

receiving one or more event logs from other agents in the group;

determining that at least one event log of the one or more event logs has a high priority;

sending the at least one event log having the high priority to the coordinator; and

storing the one or more event logs in a storage device accessible to the server.

15. The server of claim 14 , wherein determining the data associated with the server comprises:

determining a processing power of the server in terms of a clock speed and a number of cores; and

determining a storage capacity of the storage device that is accessible to the server.

16. The server of claim 14 , wherein determining the data associated with the server comprises:

determining an average inter-group communications latency of a first plurality of messages received by the agent from the other agents in the group; and

determining an average ping message latency associated with a second plurality of messages between the agent and the coordinator.

17. The server of claim 14 , the operations further comprising:

receiving, by the agent, a group information message from the coordinator indicating that the agent belongs to a group and identifying the other agents in the group.

18. The server of claim 14 , the operations further comprising:

determining statistics associated with the one or more event logs stored in the storage device, the statistics including a number of event logs stored in the storage device; and

sending the statistics to the coordinator.

19. The server of claim 14 , further comprising:

receiving a resume message from the coordinator;

transitioning from the deputized mode of operation to the normal mode of operation;

sending the one or more event logs stored in the storage device to the coordinator; and

sending a newly generated event log to the coordinator.

20. The server of claim 14 , further comprising:

determining statistics associated with the one or more event logs stored in the storage device, the statistics including a type of each of the event logs stored in the storage device and a number of event logs of each type stored in the storage device; and

sending the statistics to the coordinator.

Assignments (26)

Continuity (1)