IP Library Granted Patent US 9,009,307
Granted Patent B2
US 9,009,307 · App. 13/736,606 · Granted Apr 14, 2015

Automated alert management

Inventors: Rohit Jain (Gurgaon Haryana, IN); Vikas Dwivedi (Hyderabad, IN)
Assignee: Bank of America Corporation
H04L67/025G06F11/00H04L43/00H04L41/069H04L41/0604
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,009,307
App. No.
13/736,606
Granted
Apr 14, 2015
Kind
B2
Abstract

Alerts may be received from an event monitoring system that monitors computing resources of a computer system. Based on an alert ruleset, an alert management module may determine whether to provide notification of the alert. If the alert management module decides to provide notification of the alert, then the alert management module may initiate the creation of an issue ticket corresponding to the alert in an issue tracking system. If the alert management module decides not to provide notification of the alert, then the alert management module may discard the alert.

Claims (48)

1. A non-transitory computer-readable storage medium having computer-executable program instructions stored thereon that when executed by a processor cause the processor to perform steps for managing alerts generated by an event monitoring system, the steps comprising:

receiving from an event monitoring system an alert associated with a computing resource of a computer system monitored by the event monitoring system;

determining whether to provide notification of the alert based on at least one rule of an alert ruleset;

based on a decision of whether to provide notification of the alert, either initiating creation of an issue ticket corresponding to the alert in an issue tracking system or discarding the alert;

wherein a rule of the alert ruleset decides whether to provide notification of the alert based on whether the alert is a duplicate alert, and

wherein the rule indicates that the alert is a duplicate alert when a previous alert associated with the computing resource has been received within a predetermined time period prior to the alert and that the alert is not a duplicate alert when the previous alert has not been received within the predetermined time period prior to the alert.

2. The computer-readable storage medium of claim 1 wherein an additional rule of the alert ruleset decides not to provide notification of the alert when an alert type of the alert is not listed in the alert ruleset.

3. The computer-readable storage medium of claim 1 wherein:

an additional rule of the alert ruleset decides whether to provide notification of the alert based on whether the computing resource the alert is associated with is a first type of computing resource or a second type of computing resource; and

the additional rule decides to provide notification of the alert when the computing resource is the first type of computing resource and decides not to provide notification of the alert when the computing resource is the second type of computing resource.

4. The computer-readable storage medium of claim 1 wherein:

an additional rule of the alert ruleset decides whether to provide notification of the alert based on whether a secondary condition associated with the alert is satisfied; and

the additional rule decides to provide notification of the alert when the secondary condition is satisfied and decides not to provide notification of the alert when the secondary condition is not satisfied.

5. The computer-readable storage medium of claim 1 further comprising:

determining whether the issue ticket was created in the issue tracking system;

updating an exception log to include a new exception that indicates the issue ticket was not created in response to a determination that the issue ticket was not created in the issue tracking system; and

providing notification to the support team member of the new exception in the exception log.

6. The computer-readable storage medium of claim 1 wherein a priority is respectively associated with individual alert types included in the alert ruleset.

7. A computer-assisted method for managing alerts generated by an event monitoring system comprising:

receiving from an event monitoring system an alert associated with a computing resource of a computer system monitored by the event monitoring system;

storing the received alert in computer memory;

determining, by a processor, whether to provide notification of the alert based on at least one rule of an alert ruleset;

based on a decision of whether to provide notification of the alert, either initiating, by the processor, creation in the computer memory of an issue ticket corresponding to the alert in an issue tracking system or discarding, by the processor, the alert;

wherein a rule of the alert ruleset decides whether to provide notification of the alert based on whether the alert is a duplicate alert; and

wherein the rule decides that the alert is a duplicate alert when a previous alert associated with the computing resource has been received within a redetermined time period prior to the alert and decides that the alert is not a duplicate alert when the previous alert has not been received within the predetermined time period prior to the alert.

8. The method of claim 7 wherein an additional rule of the alert ruleset decides not to provide notification of the alert when an alert type of the alert is not listed in the alert ruleset.

9. The method of claim 7 wherein:

an additional rule of the alert ruleset decides whether to provide notification of the alert based on whether the computing resource the alert is associated with is a first type of computing resource or a second type of computing resource; and

the additional rule decides to provide notification of the alert when the computing resource is the first type of computing resource and decides not to provide notification of the alert when the computing resource is the second type of computing resource.

10. The method of claim 7 wherein:

an additional rule of the alert ruleset decides whether to provide notification of the alert based on whether a secondary condition associated with the alert is satisfied; and

the additional rule decides to provide notification of the alert when the secondary condition is satisfied and decides not to provide notification of the alert when the secondary condition is not satisfied.

11. The method of claim 7 further comprising:

determining, at the processor, whether the issue ticket was created in the issue tracking system;

updating, using the processor, an exception log to include a new exception that indicates the issue ticket was not created in response to a determination that the issue ticket was not created in the issue tracking system; and

providing, using the processor, notification to the support team member of the new exception in the exception log.

12. An apparatus for managing alerts comprising:

a processor; and

a memory configured to store computer-readable instructions that, when executed by the processor, cause the processor to perform a method comprising:

receiving from an event monitoring system an alert associated with a computing resource of a computer system monitored by the event monitoring system;

determining whether to provide notification of the alert based on at least one rule of an alert ruleset; and

based on a decision of whether to provide notification of the alert, either initiating creation of an issue ticket corresponding to the alert in an issue tracking system or discarding the alert;

wherein a rule of the alert ruleset decides whether to provide notification of the alert based on whether the alert is a duplicate alert; and

wherein the rule decides that the alert is a duplicate alert when a previous alert associated with the computing resource has been received within a predetermined time period prior to the alert and decides that the alert is not a duplicate alert when the previous alert has not been receive within the predetermined time period prior to the alert.

13. The apparatus of claim 12 wherein an additional rule of the alert ruleset decides not to provide notification of the alert when an alert type of the alert is not listed in the alert ruleset.

14. The apparatus of claim 12 wherein:

an additional rule of the alert ruleset decides whether to provide notification of the alert based on whether the computing resource the alert is associated with is a first type of computing resource or a second type of computing resource; and

the additional rule decides to provide notification of the alert when the computing resource is the first type of computing resource and decides not to provide notification of the alert when the computing resource the alert is associated with is the second type of computing resource.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 8, 2013
From: JAIN, ROHIT; DWIVEDI, VIKAS
To: BANK OF AMERICA CORPORATION
Reel/Frame 029589/0893 →
Continuity (1)
Related Publication 20140195670A1 · Jul 10, 2014