Differential node configuration for network maintenance
An operator node is configured to generate a visualization of the configurations of nodes communicatively coupled to the operator node via a network. The operator node scans target nodes in a network and identifies a set of attributes describing various configuration properties of each node. The operator node compares corresponding attributes across nodes and determines for each attribute a measure of variance. The variance for each attribute is displayed in a grid view, allowing a user to observe the level of similarity or dissimilarity of each attribute across the target nodes of the network. The operator node also defines and implements a policy describing a set of configuration properties with which target nodes must comply. The operator node determines if one or more target nodes is in violation of the policy, displays a differential visualization associated with each policy failure event, and enables an operator to re-configure target nodes accordingly.
1 . A computer-implemented method for configuring one or more target nodes communicatively coupled to an operator node in a network comprising:
generating, by the operator node, a differential visualization interface for display by a hardware display and illustrating 1) a difference between a first set of system attributes of a first node at a current time and at a previous time and 2) a second set of system attributes of the first node common between the current time and the previous time, the differential visualization interface including a time interface element that enables a user to select the previous time from a plurality of previous times such that a first type of highlighting is used to highlight attributes of the first node present at the current time but not the previous time and such that a second type of highlighting is used to highlight attributes of the first node that were present at the previous time but not the current time, the differential visualization interface organizing displayed system attributes into categories comprising at least hardware attributes, port attributes, and file attributes that are associated with a set of system attributes;
in response to receiving a request from the user, at the operator node, identifying one or more attributes of the first node that trigger a policy failure event by, in aggregate, exceeding a policy violation severity threshold, and re-configuring the identified one or more attributes of the first node by re-configuring the one or more attributes to mirror a target system attribute of the first set of system attributes and the second set of system attributes; and
in response to re-configuring one or more attributes of the first node, updating, by the operator node, the displayed differential visualization to indicate a change in variance associated with the system attribute by highlighting each of the one or more re-configured attributes within the displayed differential visualization such that an opacity of each highlight varies based at least in part on how recently a corresponding attribute was re-configured.
2 . The method of claim 1 , wherein the differential visualization interface indicates a high variance between values of a system attribute using a first indicator and a low variance between values of the system attribute using a second indicator different from the first indicator.
3 . The method of claim 2 , wherein the first indicator comprises a first color and wherein the second indicator comprises a second color.
4 . The method of claim 2 , wherein the first indicator comprises a first icon type and wherein the second indicator comprises a second icon type.
5 . The method of claim 1 , wherein the differential visualization interface further indicates a violation of a configuration policy associated with one or more of the system attributes at one or both of the current time and the selected previous time.
6 . The method of claim 5 , wherein the differential visualization interface further indicates a severity of the violation of the configuration policy.
7 . The method of claim 1 , wherein the request from the user is received via a second interface element displayed within the differential visualization interface.
8 . A non-transitory computer-readable storage medium storing executable computer instructions that, when executed by a processor, cause the processor to perform steps comprising:
generating, by the operator node, a differential visualization interface for display by a hardware display and illustrating 1) a difference between a first set of system attributes of a first node at a current time and at a previous time and 2) a second set of system attributes of the first node common between the current time and the previous time, the differential visualization interface including a time interface element that enables a user to select the previous time from a plurality of previous times such that a first type of highlighting is used to highlight attributes of the first node present at the current time but not the previous time and such that a second type of highlighting is used to highlight attributes of the first node that were present at the previous time but not the current time, the differential visualization interface organizing displayed system attributes into categories comprising at least hardware attributes, port attributes, and file attributes that are associated with a set of system attributes;
in response to receiving a request from the user, at the operator node, identifying one or more attributes of the first node that trigger a policy failure event by, in aggregate, exceeding a policy violation severity threshold, and re-configuring the identified one or more attributes of the first node by re-configuring the one or more attributes to mirror a target system attribute of the first set of system attributes and the second set of system attributes; and
in response to re-configuring one or more attributes of the first node, updating, by the operator node, the displayed differential visualization to indicate a change in variance associated with the system attribute by highlighting each of the one or more re-configured attributes within the displayed differential visualization such that an opacity of each highlight varies based at least in part on how recently a corresponding attribute was re-configured.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein the differential visualization interface indicates a high variance between values of a system attribute using a first indicator and a low variance between values of the system attribute using a second indicator different from the first indicator.
10 . The non-transitory computer-readable storage medium of claim 9 , wherein the first indicator comprises a first color and wherein the second indicator comprises a second color.
11 . The non-transitory computer-readable storage medium of claim 9 , wherein the first indicator comprises a first icon type and wherein the second indicator comprises a second icon type.
12 . The non-transitory computer-readable storage medium of claim 8 , wherein the differential visualization interface further indicates a violation of a configuration policy associated with one or more of the system attributes at one or both of the current time and the selected previous time.
13 . The non-transitory computer-readable storage medium of claim 12 , wherein the differential visualization interface further indicates a severity of the violation of the configuration policy.
14 . The non-transitory computer-readable storage medium of claim 8 , wherein the request from the user is received via a second interface element displayed within the differential visualization interface.
15 . An operator management system comprising:
a non-transitory computer-readable storage medium storing executable instructions that, when executed, perform steps comprising:
generating, by the operator node, a differential visualization interface for display by a hardware display and illustrating 1) a difference between a first set of system attributes of a first node at a current time and at a previous time and 2) a second set of system attributes of the first node common between the current time and the previous time, the differential visualization interface including a time interface element that enables a user to select the previous time from a plurality of previous times such that a first type of highlighting is used to highlight attributes of the first node present at the current time but not the previous time and such that a second type of highlighting is used to highlight attributes of the first node that were present at the previous time but not the current time, the differential visualization interface organizing displayed system attributes into categories comprising at least hardware attributes, port attributes, and file attributes that are associated with a set of system attributes;
in response to receiving a request from the user, at the operator node, identifying one or more attributes of the first node that trigger a policy failure event by, in aggregate, exceeding a policy violation severity threshold, and re-configuring the identified one or more attributes of the first node by re-configuring the one or more attributes to mirror a target system attribute of the first set of system attributes and the second set of system attributes; and
in response to re-configuring one or more attributes of the first node, updating, by the operator node, the displayed differential visualization to indicate a change in variance associated with the system attribute by highlighting each of the one or more re-configured attributes within the displayed differential visualization such that an opacity of each highlight varies based at least in part on how recently a corresponding attribute was re-configured; and
a processor configured to execute the instructions.
16 . The operator management system of claim 15 , wherein the differential visualization interface indicates a high variance between values of a system attribute using a first indicator and a low variance between values of the system attribute using a second indicator different from the first indicator.
17 . The operator management system of claim 16 , wherein the first indicator comprises a first color and wherein the second indicator comprises a second color.
18 . The operator management system of claim 16 , wherein the first indicator comprises a first icon type and wherein the second indicator comprises a second icon type.
19 . The operator management system of claim 15 , wherein the differential visualization interface further indicates a violation of a configuration policy associated with one or more of the system attributes at one or both of the current time and the selected previous time.
20 . The operator management system of claim 19 , wherein the differential visualization interface further indicates a severity of the violation of the configuration policy.