System and method for network incident remediation recommendations

1. A method for analyzing network incidents within a network and providing prioritized remediation recommendations that quantifiably improve performance of the network in client hours, the method comprising:

receiving a stream of network data and computing a plurality of network incidents within the network from the network data, wherein a network incident is a client, infrastructure, or application issue that negatively affects a subset of clients in the network, wherein each network incident has a set of symptoms that relate to possible root-causes, and wherein network incidents are measurable in client incident hours, client incident hours being a cumulative duration of a network incident aggregated across all affected clients;

collecting all the network incidents related to a particular network issue over a time period and aggregating client incident hours across a collection of network incidents by grouping the network incidents according to root-cause symptoms;

based on the analysis of the client incident hours, generating and displaying a list of remediation recommendations that quantifiably improve the performance of the network in client hours, wherein each remediation recommendation includes a systemic issue in the network, a remediation to resolve the systemic issue, and a quantified expected benefit from implementing the remediation; and

generating a network incident graph by superimposing a client-hours distribution over a network graph, wherein nodes in the network incident graph represent physical network entities or logical network groupings, wherein edges represent a relationship between the nodes, and wherein weights of the nodes represent cumulative client hours associated with that node.

2. The method of claim 1 , wherein the quantified expected benefit from implementing the remediation is quantified in client incident hours.

3. The method of claim 1 , wherein the list of remediation recommendations is prioritized on based a total number of client-hours associated with that systemic issue.

4. The method of claim 1 , wherein the list of remediation recommendations is prioritized based on actionability, wherein actionability is defined as how quickly a particular remediation may be applied.

5. The method of claim 1 , further comprising: analyzing the network incident graph to identify localized areas with systemic issues.

6. The method of claim 5 , wherein analyzing the network incident graph comprises identifying connected components of the network incident graph that have a significant amount of client-hours associated therein.

7. The method of claim 5 , wherein analyzing the network incident graph includes using a highest weighted node algorithm to identify structures in the network incident graph.

8. The method of claim 5 , wherein analyzing the network incident graph includes using a most connected node algorithm to identify structures in the network incident graph.

9. The method of claim 5 , wherein analyzing the network incident graph includes using a node cluster with highest density algorithm to identify structures in the network incident graph.

10. The method of claim 1 , further comprising: receiving user input selecting a remediation recommendation from the list of remediation recommendations.

11. The method of claim 10 , further comprising: implementing the user input selected remediation recommendation from the list of remediation recommendations.

12. The method of claim 1 , further comprising: without user input automatically implementing the suggested remediations onto infrastructure or application elements.

13. A system for analyzing network incidents within a network and providing prioritized remediation recommendations that quantifiably improve performance of the network in client hours, the system comprising:

a memory device storing instructions thereon that when executed by one or more processors, causes one or more of the one or more processors to:

receive a stream of network data and compute a plurality of network incidents within the network from the network data, wherein a network incident is a client, infrastructure, or application issue that negatively affects a subset of clients in the network, wherein each network incident has a set of symptoms that relate to possible root-causes, and wherein network incidents are measurable in client incident hours, client incident hours being a cumulative duration of a network incident aggregated across all affected clients;

collect all the network incidents related to a particular network issue over a time period and aggregate client incident hours across a collection of network incidents by grouping the network incidents according to root-cause symptoms;

based on the analysis of the network incident hours, generate and display a list of remediation recommendations that quantifiably improve the performance of the network in client hours, wherein each remediation recommendation includes a systemic issue in the network, a remediation to resolve the issue, and a quantified expected benefit from implementing the remediation; and

generate a network incident graph by superimposing a client-hours distribution over a network graph, wherein nodes in the network incident graph represent physical network entities or logical network groupings, wherein edges represent a relationship between the nodes, and wherein weights of the nodes represent cumulative client hours associated with that node.

14. The system of claim 13 , wherein the quantified expected benefit from implementing the remediation is quantified in client incident hours.

15. The system of claim 13 , wherein the list of remediation recommendations is prioritized based on a total number of client-hours associated with that issue.

16. The system of claim 13 , wherein the list of remediation recommendations is prioritized based on actionability, wherein actionability is defined as how quickly a particular remediation may be applied.

17. The system of claim 13 , further comprising: analyzing the network incident graph to identify localized areas with systemic issues.

18. The system of claim 17 , wherein analyzing the network incident graph comprises identifying connected components of the network incident graph that have a significant amount of client-hours associated therein.

19. The system of claim 17 , wherein analyzing the network incident graph includes using a highest weighted node algorithm to identify structures in the network incident graph.

20. The system of claim 17 , wherein analyzing the network incident graph includes using a most connected node algorithm to identify structures in the network incident graph.

21. The system of claim 17 , wherein analyzing the network incident graph includes using a node cluster with highest density algorithm to identify structures in the network incident graph.

22. The system of claim 17 , wherein the memory device storing instructions thereon that when executed by the one or more processors, causes one or more processors to:

receive user input selecting a remediation recommendation from the list of remediation recommendations.

23. The system of claim 22 , wherein the memory device storing instructions thereon that when executed by the one or more processors, causes one or more processors to:

implement the user input selected remediation recommendation from the list of remediation recommendations.

24. The system of claim 13 , wherein the memory device storing instructions thereon that when executed by the one or more processors, causes one or more processors to: without user input, automatically implementing the suggested remediations onto one or more infrastructure or application elements.

25. A system for analyzing network incidents within a network and providing prioritized remediation recommendations that quantifiably improve performance of the network in client hours, the system comprising:

a memory device storing instructions thereon that when executed by one or more processors, causes the one or more processors to:

receive network data and compute a plurality of network incidents from the network data, wherein a network incident is a client, infrastructure, or application issue that negatively affects a subset of clients in the network;

collect all the network incidents related to a particular network issue over a time period and group the network incidents according to root-cause symptoms;

generate a network incident graph by superimposing groups of network incidents over a network graph, wherein nodes in the network incident graph represent physical network entities or logical network groupings, wherein edges represent a relationship between the nodes, and wherein weights of the nodes represent a size of the network incident group associated with that node;

analyze the network incident graph to identify localized areas with systemic issues; and

based on the analysis of the network incident graph, generate and display a list of remediation recommendations that quantifiably improve the performance of the network in client hours, wherein each remediation recommendation includes a systemic issue in the network, a remediation to resolve the issue, and a quantified expected benefit from implementing the remediation.