Correlation of metrics monitored from a virtual environment

1. A method for detecting correlations between metrics monitored from a virtual environment, comprising:

monitoring a plurality of network operation metrics of network devices in the virtual environment;

detecting a plurality of network operation metric irregularities for the network devices exceeding a threshold;

selecting a first network operation metric irregularity from the plurality of network operation metric irregularities;

identifying a time frame of the first network operation metric irregularity for analysis;

selecting a second network operation metric irregularity from the plurality of network operation metric irregularities; and

comparing the first network operation metric irregularity and the second network operation metric irregularity to determine a correspondence between the first network operation metric irregularity and the second network operation metric irregularity using a comparison engine and based on a predetermined analysis method.

2. A method as in claim 1 , further comprising determining a degree of correlation between the first network operation metric irregularity and the second network operation metric irregularity based on the comparing of the first network operation metric irregularity and the second network operation metric irregularity.

3. A method as in claim 1 , wherein the time frame comprises a first time frame and the method further comprises identifying a second time frame of the second network operation metric irregularity for analysis.

4. A method as in claim 3 , wherein analyzing correspondence further comprises chronologically analyzing the correspondence between the first network operation metric irregularity and the second network operation metric irregularity such that a point in the first time frame is compared against a same absolute point in time from the second time frame.

5. A method for correlating network operation metrics monitored from network devices operating in a virtual environment, comprising:

collecting operation data for at least one metric for the network devices using a data collector;

maintaining a time stamp of the operation data using a timer;

monitoring the operation data for operation data exceeding a threshold using a monitoring device;

identifying a metric related to the operation data exceeding the threshold;

creating a list of metrics exceeding the threshold;

selecting a plurality of metrics from the list of metrics for comparison;

identifying a time frame for the comparison from at least one of the plurality of metrics; and

comparing the plurality of metrics for correlation during the time frame identified using a processor.

6. A method as in claim 5 , further comprising:

identifying a start time of when the operation data exceeded the threshold; and

displaying the start time to a user via a display device.

7. A method as in claim 6 , further comprising:

displaying a preview of graphs of the plurality of metrics selected from the list of metrics; and

enabling the user to select at least one of the plurality of metrics for full-view display of a graph simultaneously with the preview of the graphs.

8. A method as in claim 7 , further comprises:

displaying a baseline sleeve of the at least one of the plurality of metrics selected for full-view display in the full-view display; and

enabling the user to graphically identify a time frame on the full-view display for correlation with at least one other of the plurality of metrics.

9. A method as in claim 8 , further comprising:

displaying the metric and a preview of the time frame identified for the metric on the full-view display in a correlation window;

enabling the user to select a correlation method from a plurality of correlation methods;

selecting the at least one other of the plurality of metrics to correlate with metric displayed in the correlation window;

displaying the selected at least one other of the plurality of metrics in a comparison window;

determining a percentage of correlation between the metric displayed in the correlation window and the metric displayed in the comparison window based on a selected correlation method and using a processor; and

displaying the percentage of correlation to the user via the display device.

10. A system for correlating network operation metrics monitored from network devices operating in a virtual environment, comprising:

a problem isolation server in communication with the network devices and configured to receive operation data for at least one metric for the network devices;

a timer configured to maintain a time stamp for the operation data received on the problem isolation server;

a data collector in communication with the problem isolation server configured to collect metric identifications and associated time stamps of operation data breaching a baseline sleeve in a metrics list;

a comparison engine configured to compare operation data from a plurality of metric identifications;

an analysis module configured to analyze the compared operation data from the plurality of metric identifications to determine correlations between the plurality of metric identifications.

11. A system as in claim 10 , further comprising display module configured to graphically display the at least one of the plurality of metric identifications in a network device operation graph and to enable a user to drag one or more selected metrics from the metrics list to a correlation window.

12. A system as in claim 11 , further comprising a baseline module configured to monitor normal network device operation to determine the baseline sleeve and to display the baseline sleeve on the network device operation graph simultaneously with the graphically displayed at least one of the plurality of metric identifications.

13. A system as in claim 12 , further comprising a time slider configured to adjust a time view of the network device operation graph by sliding the time view forward or backward in time, wherein sliding the displayed time view forward or backward comprises redrawing the network device operation graph and the baseline sleeve to accurately depict characteristics of the metric displayed on the network device operation graph during the adjusted time view.

14. A system as in claim 13 , further comprising a graphical time selection module configured to enable graphical selection of one or more time frames from the network device operation graph.

15. A system as in claim 10 , further comprising a ranking module configured to rank the plurality of metric identifications according to a degree of correlation.