Providing an integrated service assurance environment for a network

[0002] The present invention relates to service assurance environments and more particularly to an integrated service assurance environment for a network.

[0003] A network system architecture enables multiple applications like voice, data and video to be mixed over the network that comprises switching nodes and communications links. Networks for these applications generally have been designed for a particular type of application, such as teleconferencing applications. Different types of applications, however, have diverse requirements.

[0004] “Quality of Service” or “QoS” parameters in part define these requirements. In the case of ATM networks, such parameters may include errored cell ratio (ECR), cell loss ratio, fixed delay and delay variation parameters. Applications may also indicate a set of parameters called a “traffic contract” that relates to the bandwidth required from the network. The Errored Cell Ratio (ECR) value is the ratio of the ATM cells in error to all the ATM cells sent during some interval. The remaining parameters are described later. Each application may have a maximum or minimum acceptable value for each parameter and a requested value for each parameter.

[0005] As previously indicated, networks are implemented with switching nodes and communications links. The communications links typically have been based upon conventional telephony transmission systems and comprised fiber optic, microwave or wireline links. Fiber optic links transfer typically an error rate of 10.sup.-9; microwave and wireline connections, 10.sup.-7. More recently, communications links have begun to comprise terrestrial and satellite mobile wireless communications links and cable television systems. Each of these communications links are prone to introducing errors at significantly greater rates.

[0006] Some present ATM networks attempt to overcome such errors by implementing a transformation process in the form of a correction, or data manipulation, technique at each switching node on a “per-communications link” basis. That is, the network is designed such that certain links operate with a transforming process that is not alterable on a dynamic basis. For example, it is fairly common that satellite systems have a single error correcting code that operates over the entire bit stream passing over the link, notwithstanding the specific application. Using error correcting codes, such as forward error correction (FEC) codes, requires significant amounts of redundant information to be sent with each block of bits wherein a “block” may comprise a partial ATM cell, a single ATM cell or a plurality of ATM cells. This redundant information adds “overhead” to the transfer. This, in turn, reduces the bandwidth available for transporting an ATM cell. To be effective, an error correcting code must also match the anticipated error burst characteristics of the transmission system; systems that are subject to longer bursts require larger codewords or interleaving or both. Interleaving adds significant amounts of fixed delay to that already present in the transmission system. Such fixed delays manifest themselves, for example, as awkward conversation and user discomfort in a teleconferencing application or even as motion sickness and disorientation in a virtual reality application.

[0007] Despite the foregoing efforts, network failures are inevitable, and there is a need of monitoring network performance for the purpose of maintaining a predetermined agreed upon QoS.

[0008] A method providing service assurance for a network to maintain an agreed upon Quality of Service. First, an alarm is generated to indicate a status of a network. The generation of the alarm comprises selecting a parameter of network to be monitored; determining a triggering level of the parameter; monitoring the parameter of an occurence of the triggering level; and initiating alarm notification upon the monitored occurrence of the triggered level. Network event information is then dispatched upon generation of the alarm and is subsequently mapped. The data collected on the status of the network is then manipulated by concatenating the data collected on a network into a master file; reformatting the data into a standarized format; translating the data to key codes; sorting the data according to predetermined criteria; and concatenating the sorted data together. The data is then stored in a database. Thereafter, network availability is conveyed graphically.

[0009] The invention will be better understood when consideration is given to the following detailed description thereof. Such description makes reference to the annexed drawings wherein:

[0010] FIG. 1 is a schematic diagram of a hardware implementation of one embodiment of the present invention;

[0011] FIG. 2 illustrates an embodiment of the present invention which provides service assurance for a network;

[0012] FIG. 3 illustrates one embodiment of the present invention for dispatching network event information of a network with service assurance capabilities;

[0013] FIG. 4 illustrates an embodiment of the present invention for assigning time-based identifiers to data stored in a database;

[0014] FIG. 5 is a flowchart illustrating an embodiment of the present invention for collecting data;

[0015] FIG. 6 is a flowchart that provides an overview of a data collection process of one embodiment of the present invention;

[0016] FIG. 7 illustrates an embodiment of the present invention for retrieving and relocating event and performance data of a network with service assurance capabilities;

[0017] FIG. 8 illustrates operation of the main data acquisition script (get_data.pl) for each entry in the configuration file (get_data.cfg) during data acquisition in accordance with one embodiment of the present invention;

[0018] FIG. 9 illustrates an exemplary configuration of an architecture of the present invention for manipulating data using a Patroller and an Event Controller and Manager;

[0019] FIG. 10 depicts an embodiment of the present invention which generates an alarm to indicate a status of a network for service assurance purposes;

[0020] FIG. 11 illustrates an embodiment of the present invention used to develop a database;

[0021] FIG. 12 illustrates an exemplary database configuration chart of an embodiment of the present invention;

[0022] FIG. 13 illustrates an exemplary report indicating required table space allotments in a database;

[0023] FIG. 14 depicts an exemplary report which lists statistics relating to the data in the database in accordance with one embodiment of the present invention;

[0024] FIG. 15 is an exemplary report indicating times to load various amounts of data in accordance with an exemplary embodiment of the present invention;

[0025] FIG. 16 depicts an embodiment of the present invention which graphically conveys availability in a network with service assurance capabilities

[0026] FIG. 17A depicts a main ad hoc screen for navigating when making an ad hoc request for a report in accordance with an embodiment of the present invention;

[0027] FIG. 17B illustrates a graphical user interface for selecting a report type in accordance with one embodiment of the present invention;

[0028] FIG. 18 illustrates a form which receives report criteria in accordance with one embodiment of the present invention;

[0029] FIG. 19 illustrates exemplary batch reporting requirements in accordance with one embodiment of the present invention;

[0030] FIG. 20 lists generic report types;

[0031] FIG. 21 shows exemplary ad hoc reporting requirements in accordance with one embodiment of the present invention;

[0032] FIG. 22 illustrates sample metric information in accordance with an embodiment of the present invention;

[0033] FIG. 23 depicts a line graph report in accordance with one embodiment of the present invention;

[0034] FIG. 24 shows a line graph report in accordance with one embodiment of the present invention;

[0035] FIG. 25 depicts a comparison box-plot report in accordance with an embodiment of the present invention;

[0036] FIG. 26 illustrates a trend box-plot report in accordance with an embodiment of the present invention;

[0037] FIG. 27 depicts a bar graph report in accordance with an embodiment of the present invention;

[0038] FIG. 28 shows an availability spectrum report in accordance with an embodiment of the present invention;

[0039] FIG. 29 illustrates an exception spectrum report in accordance with an embodiment of the present invention;

[0040] FIG. 30 depicts an exception test report in accordance with an embodiment of the present invention;

[0041] FIG. 31 illustrates an embodiment of the present invention which maps events on a network with service assurance capabilities; and

[0042] FIG. 32 depicts an exemplary data/directory structure in accordance with one embodiment of the present invention.

[0043] A preferred embodiment of a system in accordance with the present invention is preferably practiced in the context of a personal computer such as an IBM compatible personal computer, Apple Macintosh computer or UNIX based workstation. A representative hardware environment is depicted in FIG. 1, which illustrates a typical hardware configuration of a workstation in accordance with a preferred embodiment having a central processing unit 110, such as a microprocessor, and a number of other units interconnected via a system bus 112. The workstation shown in FIG. 1 includes a Random Access Memory (RAM) 114, Read Only Memory (ROM) 116, an I/O adapter 118 for connecting peripheral devices such as disk storage units 120 to the bus 112, a user interface adapter 122 for connecting a keyboard 124, a mouse 126, a speaker 128, a microphone 132, and/or other user interface devices such as a touch screen (not shown) to the bus 112, communication adapter 134 for connecting the workstation to a communication network (e.g., a data processing network) and a display adapter 136 for connecting the bus 112 to a display device 138. The workstation typically has resident thereon an operating system such as the Microsoft Windows NT or Windows/95 Operating System (OS), the IBM OS/2 operating system, the MAC OS, or UNIX operating system. Those skilled in the art will appreciate that the present invention may also be implemented on platforms and operating systems other than those mentioned.

[0044] A preferred embodiment is written using JAVA, C, and the C++ language and utilizes object oriented programming methodology. Object oriented programming (OOP) has become increasingly used to develop complex applications. As OOP moves toward the mainstream of software design and development, various software solutions require adaptation to make use of the benefits of OOP. A need exists for these principles of OOP to be applied to a messaging interface of an electronic messaging system such that a set of OOP classes and objects for the messaging interface can be provided.

[0045] OOP is a process of developing computer software using objects, including the steps of analyzing the problem, designing the system, and constructing the program. An object is a software package that contains both data and a collection of related structures and procedures. Since it contains both data and a collection of structures and procedures, it can be visualized as a self-sufficient component that does not require other additional structures, procedures or data to perform its specific task. OOP, therefore, views a computer program as a collection of largely autonomous components, called objects, each of which is responsible for a specific task. This concept of packaging data, structures, and procedures together in one component or module is called encapsulation.

[0046] In general, OOP components are reusable software modules which present an interface that conforms to an object model and which are accessed at run-time through a component integration architecture. A component integration architecture is a set of architecture mechanisms which allow software modules in different process spaces to utilize each others capabilities or functions. This is generally done by assuming a common component object model on which to build the architecture. It is worthwhile to differentiate between an object and a class of objects at this point. An object is a single instance of the class of objects, which is often just called a class. A class of objects can be viewed as a blueprint, from which many objects can be formed.

[0047] OOP allows the programmer to create an object that is a part of another object. For example, the object representing a piston engine is said to have a composition-relationship with the object representing a piston. In reality, a piston engine comprises a piston, valves and many other components; the fact that a piston is an element of a piston engine can be logically and semantically represented in OOP by two objects.

[0048] OOP also allows creation of an object that “depends from” another object. If there are two objects, one representing a piston engine and the other representing a piston engine wherein the piston is made of ceramic, then the relationship between the two objects is not that of composition. A ceramic piston engine does not make up a piston engine. Rather it is merely one kind of piston engine that has one more limitation than the piston engine; its piston is made of ceramic. In this case, the object representing the ceramic piston engine is called a derived object, and it inherits all of the aspects of the object representing the piston engine and adds further limitation or detail to it. The object representing the ceramic piston engine “depends from” the object representing the piston engine. The relationship between these objects is called inheritance.

[0049] When the object or class representing the ceramic piston engine inherits all of the aspects of the objects representing the piston engine, it inherits the thermal characteristics of a standard piston defined in the piston engine class. However, the ceramic piston engine object overrides these ceramic specific thermal characteristics, which are typically different from those associated with a metal piston. It skips over the original and uses new functions related to ceramic pistons. Different kinds of piston engines have different characteristics, but may have the same underlying functions associated with it (e.g., how many pistons in the engine, ignition sequences, lubrication, etc.). To access each of these functions in any piston engine object, a programmer would call the same functions with the same names, but each type of piston engine may have different/overriding implementations of functions behind the same name. This ability to hide different implementations of a function behind the same name is called polymorphism and it greatly simplifies communication among objects.

[0050] With the concepts of composition-relationship, encapsulation, inheritance and polymorphism, an object can represent just about anything in the real world. In fact, one's logical perception of the reality is the only limit on determining the kinds of things that can become objects in object-oriented software. Some typical categories are as follows:

[0051] Objects can represent physical objects, such as automobiles in a traffic-flow simulation, electrical components in a circuit-design program, countries in an economics model, or aircraft in an air-traffic-control system.

[0052] Objects can represent elements of the computer-user environment such as windows, menus or graphics objects.

[0053] An object can represent an inventory, such as a personnel file or a table of the latitudes and longitudes of cities.

[0054] An object can represent user-defined data types such as time, angles, and complex numbers, or points on the plane.

[0055] With this enormous capability of an object to represent just about any logically separable matters, OOP allows the software developer to design and implement a computer program that is a model of some aspects of reality, whether that reality is a physical entity, a process, a system, or a composition of matter. Since the object can represent anything, the software developer can create an object which can be used as a component in a larger software project in the future.

[0056] If 90% of a new OOP software program consists of proven, existing components made from preexisting reusable objects, then only the remaining 10% of the new software project has to be written and tested from scratch. Since 90% already came from an inventory of extensively tested reusable objects, the potential domain from which an error could originate is 10% of the program. As a result, OOP enables software developers to build objects out of other, previously built objects.

[0057] This process closely resembles complex machinery being built out of assemblies and sub-assemblies. OOP technology, therefore, makes software engineering more like hardware engineering in that software is built from existing components, which are available to the developer as objects. All this adds up to an improved quality of the software as well as an increased speed of its development.

[0058] Programming languages are beginning to fully support the OOP principles, such as encapsulation, inheritance, polymorphism, and composition-relationship. With the advent of the C++ language, many commercial software developers have embraced OOP. C++ is an OOP language that offers a fast, machine-executable code. Furthermore, C++ is suitable for both commercial-application and systems-programming projects. For now, C++ appears to be the most popular choice among many OOP programmers, but there is a host of other OOP languages, such as Smalltalk, Common Lisp Object System (CLOS), and Eiffel. Additionally, OOP capabilities are being added to more traditional popular computer programming languages such as Pascal.

[0059] The benefits of object classes can be summarized, as follows:

[0060] Objects and their corresponding classes break down complex programming problems into many smaller, simpler problems.

[0061] Encapsulation enforces data abstraction through the organization of data into small, independent objects that can communicate with each other. Encapsulation protects the data in an object from accidental damage, but allows other objects to interact with that data by calling the object's member functions and structures.

[0062] Subclassing and inheritance make it possible to extend and modify objects through deriving new kinds of objects from the standard classes available in the system. Thus, new capabilities are created without having to start from scratch.

[0063] Polymorphism and multiple inheritance make it possible for different programmers to mix and match characteristics of many different classes and create specialized objects that can still work with related objects in predictable ways.

[0064] Class hierarchies and containment hierarchies provide a flexible mechanism for modeling real-world objects and the relationships among them.

[0065] Libraries of reusable classes are useful in many situations, but they also have some limitations. For example:

[0066] Complexity. In a complex system, the class hierarchies for related classes can become extremely confusing, with many dozens or even hundreds of classes.

[0067] Flow of control. A program written with the aid of class libraries is still responsible for the flow of control (i.e., it must control the interactions among all the objects created from a particular library). The programmer has to decide which functions to call at what times for which kinds of objects.

[0068] Duplication of effort. Although class libraries allow programmers to use and reuse many small pieces of code, each programmer puts those pieces together in a different way. Two different programmers can use the same set of class libraries to write two programs that do exactly the same thing but whose internal structure (i.e., design) may be quite different, depending on hundreds of small decisions each programmer makes along the way. Inevitably, similar pieces of code end up doing similar things in slightly different ways and do not work as well together as they should.

[0069] Class libraries are very flexible. As programs grow more complex, more programmers are forced to reinvent basic solutions to basic problems over and over again. A relatively new extension of the class library concept is to have a framework of class libraries. This framework is more complex and consists of significant collections of collaborating classes that capture both the small scale patterns and major mechanisms that implement the common requirements and design in a specific application domain. They were first developed to free application programmers from the chores involved in displaying menus, windows, dialog boxes, and other standard user interface elements for personal computers.

[0070] Frameworks also represent a change in the way programmers think about the interaction between the code they write and code written by others. In the early days of procedural programming, the programmer called libraries provided by the operating system to perform certain tasks, but basically the program executed down the page from start to finish, and the programmer was solely responsible for the flow of control. This was appropriate for printing out paychecks, calculating a mathematical table, or solving other problems with a program that executed in just one way.

[0071] The development of graphical user interfaces began to turn this procedural programming arrangement inside out. These interfaces allow the user, rather than program logic, to drive the program and decide when certain actions should be performed. Today, most personal computer software accomplishes this by means of an event loop which monitors the mouse, keyboard, and other sources of external events and calls the appropriate parts of the programmer's code according to actions that the user performs. The programmer no longer determines the order in which events occur. Instead, a program is divided into separate pieces that are called at unpredictable times and in an unpredictable order. By relinquishing control in this way to users, the developer creates a program that is much easier to use. Nevertheless, individual pieces of the program written by the developer still call libraries provided by the operating system to accomplish certain tasks, and the programmer must still determine the flow of control within each piece after it's called by the event loop. Application code still “sits on top of” the system.

[0072] Even event loop programs require programmers to write a lot of code that should not need to be written separately for every application. The concept of an application framework carries the event loop concept further. Instead of dealing with all the nuts and bolts of constructing basic menus, windows, and dialog boxes and then making these things all work together, programmers using application frameworks start with working application code and basic user interface elements in place. Subsequently, they build from there by replacing some of the generic capabilities of the framework with the specific capabilities of the intended application.

[0073] Application frameworks reduce the total amount of code that a programmer has to write from scratch. However, because the framework is really a generic application that displays windows, supports copy and paste, and so on, the programmer can also relinquish control to a greater degree than event loop programs permit. The framework code takes care of almost all event handling and flow of control, and the programmer's code is called only when the framework needs it (e.g., to create or manipulate a proprietary data structure).

[0074] A programmer writing a framework program not only relinquishes control to the user (as is also true for event loop programs), but also relinquishes the detailed flow of control within the program to the framework. This approach allows the creation of more complex systems that work together in interesting ways, as opposed to isolated programs, having custom code, being created over and over again for similar problems.

[0075] Thus, as is explained above, a framework basically is a collection of cooperating classes that make up a reusable design solution for a given problem domain. It typically includes objects that provide default behavior (e.g., for menus and windows), and programmers use it by inheriting some of that default behavior and overriding other behavior so that the framework calls application code at the appropriate times.

[0076] There are three main differences between frameworks and class libraries:

[0077] Behavior versus protocol. Class libraries are essentially collections of behaviors that you can call when you want those individual behaviors in your program. A framework, on the other hand, provides not only behavior but also the protocol or set of rules that govern the ways in which behaviors can be combined, including rules for what a programmer is supposed to provide versus what the framework provides.

[0078] Call versus override. With a class library, the code the programmer instantiates objects and calls their member functions. It's possible to instantiate and call objects in the same way with a framework (i.e., to treat the framework as a class library), but to take full advantage of a framework's reusable design, a programmer typically writes code that overrides and is called by the framework. The framework manages the flow of control among its objects. Writing a program involves dividing responsibilities among the various pieces of software that are called by the framework rather than specifying how the different pieces should work together.

[0079] Implementation versus design. With class libraries, programmers reuse only implementations, whereas with frameworks, they reuse design. A framework embodies the way a family of related programs or pieces of software work. It represents a generic design solution that can be adapted to a variety of specific problems in a given domain. For example, a single framework can embody the way a user interface works, even though two different user interfaces created with the same framework might solve quite different interface problems.

[0080] Thus, through the development of frameworks for solutions to various problems and programming tasks, significant reductions in the design and development effort for software can be achieved. A preferred embodiment of the invention utilizes HyperText Markup Language (HTML) to implement documents on the Internet together with a general-purpose secure communication protocol for a transport medium between the client and the Newco. HTTP or other protocols could be readily substituted for HTML without undue experimentation. Information on these products is available in T. Berners-Lee, D. Connoly, “RFC 1866: Hypertext Markup Language—2.0” (November 1995); and R. Fielding, H, Frystyk, T. Bemers-Lee, J. Gettys and J. C. Mogul, “Hypertext Transfer Protocol—HTTP/1.1: HTTP Working Group Internet Draft” (May 2, 1996). HTML is a simple data format used to create hypertext documents that are portable from one platform to another. HTML documents are SGML documents with generic semantics that are appropriate for representing information from a wide range of domains. HTML has been in use by the World-Wide Web global information initiative since 1990. HTML is an application of ISO Standard 8879; 1986 Information Processing Text and Office Systems; Standard Generalized Markup Language (SGML).

[0081] To date, Web development tools have been limited in their ability to create dynamic Web applications which span from client to server and interoperate with existing computing resources. Until recently, HTML has been the dominant technology used in development of Web-based solutions. However, HTML has proven to be inadequate in the following areas:

[0082] Poor performance;

[0083] Restricted user interface capabilities;

[0084] Can only produce static Web pages;

[0085] Lack of interoperability with existing applications and data; and

[0086] Inability to scale.

[0087] Sun Microsystem's Java language solves many of the client-side problems by:

[0088] Improving performance on the client side;

[0089] Enabling the creation of dynamic, real-time Web applications; and

[0090] Providing the ability to create a wide variety of user interface components.

[0091] With Java, developers can create robust User Interface (UI) components. Custom “widgets” (e.g., real-time stock tickers, animated icons, etc.) can be created, and client-side performance is improved. Unlike HTML, Java supports the notion of client-side validation, offloading appropriate processing onto the client for improved performance. Dynamic, real-time Web pages can be created. Using the above-mentioned custom UI components, dynamic Web pages can also be created.

[0092] Sun's Java language has emerged as an industry-recognized language for “programming the Internet.” Sun defines Java as: “a simple, object-oriented, distributed, interpreted, robust, secure, architecture-neutral, portable, high-performance, multithreaded, dynamic, buzzword-compliant, general-purpose programming language. Java supports programming for the Internet in the form of platform-independent Java applets.” Java applets are small, specialized applications that comply with Sun's Java Application Programming Interface (API) allowing developers to add “interactive content” to Web documents (e.g., simple animations, page adornments, basic games, etc.). Applets execute within a Java-compatible browser (e.g., Netscape Navigator) by copying code from the server to client. From a language standpoint, Java's core feature set is based on C++. Sun's Java literature states that Java is basically, “C++ with extensions from Objective C for more dynamic method resolution.”

[0093] Another technology that provides similar function to JAVA is provided by Microsoft and ActiveX Technologies, to give developers and Web designers wherewithal to build dynamic content for the Internet and personal computers. ActiveX includes tools for developing animation, 3-D virtual reality, video and other multimedia content. The tools use Internet standards, work on multiple platforms, and are being supported by over 100 companies. The group's building blocks are called ActiveX Controls, small, fast components that enable developers to embed parts of software in hypertext markup language (HTML) pages. ActiveX Controls work with a variety of programming languages including Microsoft Visual C++, Borland Delphi, Microsoft Visual Basic programming system and, in the future, Microsoft's development tool for Java, code named “Jakarta.” ActiveX Technologies also includes ActiveX Server Framework, allowing developers to create server applications. One of ordinary skill in the art readily recognizes that ActiveX could be substituted for JAVA without undue experimentation to practice the invention.

[0094] Overall Architecture

[0095] One embodiment of the present invention is composed of multiple software programs which are linked together to create an architecture which is capable of monitoring a network for events and checking system functions and resources. Such events can include alarms, faults, alerts, etc. Other embodiments of the present invention may each include an individual software program.

[0096] Reports on system performance, errors, etc. can be generated and output. For example, the reports may depict to operators/administrators of the network what is happening inside the network in real-time. This allows the administrators to respond to problems before disruptions to service occur.

[0097] Accordingly, FIG. 2 illustrates an embodiment of the present invention which provides service assurance for a network. In operation 200, an alarm is generated to indicate a status of a network. Network event information of the network is dispatched in operation 202 upon generation of the alarm after which the network event information is mapped in operation 204. The data collected on the status of the network is manipulated and stored in a database. See operations 206 and 208. In operation 210, availability of the network is conveyed graphically.

[0098] Collector

[0099] A collector may be used to collect system information including events and performance data and route pertinent portions of the system information to a notifier. program which informs a system administrator of the system information. One example of a collector is Netcool® manufacture by Micromuse Inc., whose headquarters are located at 139 Townsend St., San Francisco, Calif. 94107.

[0100] Notifier

[0101] In one aspect of the present invention, a notifier may form part of the architecture or may stand alone. The notifier is a configurable decision engine that determines how to dispatch system information to users. Notification actions can include initiating alphanumeric pages, trouble tickets, log messages, and external scripts. The notifier is integrated closely with the collector and is able to forward alerts to specific individuals based on the contents of the alert and the time/day it was. The notifier also allows an alert to trigger more than one type of notification. This enables functionality like creating a trouble ticket before paging so that the trouble ticket number can be sent along with an alphanumeric page.

[0102] The notifier creates integration between the Collector, and any of a number of other programs which may include an alphanumeric paging program and/or a trouble tickets generation program. Preferably, the notifier can be modified to integrate with existing systems. The notifier may be written in the PERL language.

[0103] Accordingly, FIG. 3 illustrates one embodiment of the present invention for dispatching network event information of a network with service assurance capabilities. In operation 300, a network is monitored for an event. Thereafter, in operation 302, at least one notification action is generated based upon the occurrence of the event. The notification action may include an alphanumeric page, an e-mail message, a resolution script, a remedy trouble ticket, and/or a log message. Further, the notification action may be transmitted in operation 304 to notify a recipient about the occurrence of the event.

[0104] In one aspect of the present invention, the step of generating the notification action further includes the steps of: determining the type of event that occurred, and generating at least one notification action associated with the determined type of event. Further, the order in which notification actions are generated upon the occurrence of the event may be based upon the determined type of event.

[0105] In another aspect of the present invention, the step of transmitting the notification action may further include the steps of: determining characteristics of the occurred event, selecting at least one recipient for receiving the notification action based upon the determined characteristics of the occurred event, and transmitting the notification action to the selected recipient.

[0106] In still yet another aspect of the present invention, the step of transmitting the notification action may further include the step of determining the time of occurrence of the occurred event. Such selection of the recipient for receiving the notification action may be further based upon the occurrence time of the occurred event. In addition, the occurred event may be compared to a list of scheduled events such that the generation of the notification action may be inhibited when the occurred event matches of the listed scheduled events.

[0107] Automation Programs

[0108] Automations are a configurable function in the collector. Automations enhance the collector's functionality by adding intelligence and/or automating tasks. Exemplary automations include:

[0109] Fault/Resolution Pairing—each resolution alert received (e.g. Link Up) will trigger an automation to try and find its corresponding fault notification (Link Down, which would have been generated earlier) by matching the node and the problem uniquely. When a F/R pair is found, the resolution alert is removed and the fault alert is cleared (no longer a “critical” or “warning” status). Additional information can be added to the alert including the duration of the fault.

[0110] Event and Notification Logging—when a notification is sent out by the notifier, an automation can update the alert for which a notification was generated to indicate what action was taken (page, trouble ticket number, logged, etc;).

[0111] Maintenance—all cleared alerts can be removed from the event list after a specified period, reducing distractions from the operators.

[0112] Data Acquisition

[0113] In another embodiment of the present invention, Data Acquisition scripts are programs which coordinate the collection and transfer of application logs to a central location. Data Acquisition can be used so that log files containing performance statistics gathered by a monitoring program can be transferred to a central server for processing by the Performance Data Manipulator (see below). The Data Acquisition scripts may be written in PERL

[0114] Performance Data Manipulator (PDM)

[0115] In an embodiment of the present invention, a PDM is a script that processes log files that have been collected by Data Acquisition in order to load the data into a database. The PDM converts the log files from formats specific to a particular monitoring program into a common format. PDM then formats the file based on data warehousing techniques which include converting nodes and performance metrics to key codes which are stored in the database. The coded data file is then bulk loaded into the database. The PDM may be written in PERL.

[0116] Database Data Warehouse design

[0117] An embodiment of the present invention includes a database schema for storing and reporting on network element performance data. The schema should be built for the efficient storage, processing, and aging of performance data.

[0118] Time Key Preloader

[0119] The Time Key Preloader is a script that supports the efficient loading of data in the database. In prior art database systems, due to the use of “key codes” in the design of databases a unique time key needed to be created for each entry stored in the database. The original solution to this was to create a time key every time an entry was received. This is inefficient. One embodiment of the present invention includes the Time Key Preloader which pre-generates time keys for every second, minute, five minutes, and/or hour, etc. of the day all at once using a direct interface to the database. Thus, the time key for the time an alert or metric is received becomes associated with the alert or performance metric. The Time Key Preloader may be written in PERL.

[0120] FIG. 4 illustrates an embodiment of the present invention for assigning time-based identifiers to data stored in a database. First, prior to receiving data, a plurality of time-based identifiers are generated in operation 400. Next, in operation 402, the time-based identifiers are saved. Upon receipt of data in operation 404, one of the appropriate time-based identifiers is assigned to the received data in operation 406. In operation 408, the received data is stored with the assigned time-based identifier in a database.

[0121] In one aspect of the present invention, the time-based identifiers are generated for every second, minute, and hour of every day at once. The time-based identifiers may be generated using an interface to the database. Further, the time-based identifiers may be stored in a database separate from that in which the data is stored.

[0122] In yet another aspect of the present invention, the received data relates to a parameter of a network. Further, the data may be stored for service assurance purposes on the network.

[0123] Event Correlator and Manager (ECM)

[0124] One embodiment of the present invention includes an event correlation application which uses behavior models to correlate network conditions, identify critical problems, filter out superfluous events and take appropriate actions. An example of an ECM is NerveCenter manufactured by Seagate Software, 920 Disc Drive, Scotts Valley, Calif. 95067.

[0125] Patroller

[0126] An embodiment of the present invention includes a patroller which discover the environment of a network, continuously surveys related systems, and/or initiates alarms based on preset parameters. An example of a Patroller is BMC Patrol manufactured by BMC Software, BMC Software, Inc., 2101 CityWest Blvd., Houston, Tex. 77042-2827.

[0127] Alarm Definitions

[0128] Alarm Definitions are customizations to an ECM which allow for event correlation and alarm suppression. Preferably, the Alarm Definitions are specific to particular networks in order to add automated intelligence for problem resolution and to reduce unneeded alarm traffic sent to operators.

[0129] Automation Scripts and Knowledge Modules

[0130] Automation scripts allow the automation of application and system management tasks. Automation scripts may monitor application health and perform corrective actions when the status of an application changes. Other functions may include sending SNMP traps when specific conditions are detected in an application or system.

[0131] Reporting Interface Development, Customer Service Integration Module

[0132] One embodiment of the present invention provides the ability to correlate network events to individual customers (or providers in a Managed Network Services world) and notify customer service representatives of known outages affecting customers through a web interface. This allows proactive notification to customers of problems that affect them as well as builds confidence in customers calling to report problems that the provider is aware of.

[0133] Data Collection Overview

[0134] Referring to FIG. 5, in one embodiment of the present invention, an activation signal is received in operation 500. Upon receipt of the activation signal, a signal is transmitted in operation 502 to initiate the retrieving of network performance data and network event data generated from at least one network monitor. Such network monitor is adapted for monitoring a network system and the relocating of the data into a common directory. Then, in operation 504, the signal is transmitted to initiate the manipulation of the data and the loading of the manipulated data into a database.

[0135] In one embodiment, the signal to initiate the manipulating and storing of the data initiates a controller program that transmits a signal to initiate the manipulation of the data. Such controller program transmits a signal to initiate the calculation of statistics from the data, and further transmits a signal to initiate the assigning of key codes to the data.

[0136] In another aspect of the present invention, the controller program also transmits a signal to initiate the sorting of the data, and further transmits a signal to initiate the concatenating of the data. Still yet, the controller program transmits a signal to initiate the loading of the data into the database.

[0137] As an option, the present invention may further transmit a signal to initiate a clean archive program for deleting files from an archive directory, a signal to initiate a table extract program for extracting data from tables stored in the database, a signal to initiate a trigger reporting program for generating reports, a signal to initiate a purge record program for deleting records from the database, and a signal to initiate a database backup program for backing up data stored on the database.

[0138] The following subsections describe an embodiment of the present invention that controls the collection, manipulation and storage of network performance data and network event data of a network with service assurance capabilities and provides an exemplary step-by-step overview of the flow of data from collection to when it's loaded into the database. FIG. 6 is a flowchart that provides an overview of a data collection process of one embodiment of the present invention.

[0139] In this exemplary embodiment, Seagate NerveCenter will be used as the Event Correlator and Manager 600 and BMC Patrol will be used as the Patroller 602.

[0140] Applications

[0141] The data collection is started by the network monitory applications creating their ASCII text data files. These files are generally stored locally on the machines they are running on. Specifics on where these files should be stored are located in the installation & configuration instructions for each application.

[0142] cron

[0143] The cron 604 process daily activates the processing scripts. The .crontab file should be modified on the system which will do the actual processing of the files.

[0144] The cron process starts one script, sa_master_process_control.pl 606, which then begins the rest of the processes

[0145] sa_master_'process_control.pl

[0146] The sa_master_process_control.pl script 606 does not actually move or manipulate any of the data files, but instead starts other scripts which will move and-manipulate the data to the appropriate locations and into the required formats. There are 8 sequential steps to this process, each beginning after the previous has finished. The steps are as follows:

[0147] 1. clean.pl 608

[0148] 2. get_data.pl

[0149] The get_data.pl script 610 is designed to move files from the systems where the data is being collect to the /sa directory structure where it will then be further processed. There are three options that this script can do. The three options are (a) to move files locally on a Unix system, (b) to move files from a remote Unix system, and (c) to move files from a remote NT system.

[0150] The script gets its settings from a configuration file named get_data.cfg 612. The most important part is the configuration section for each application:

[0151] Use the definition above and the example as a guide on adding more applications and host systems.

[0152] For moving files remotely from a Unix system, the UnixRemote.pl script 614 is called using remsh. Once UnixRemote.pl finishes, the verify.cmp file is used to make sure that all the files were properly transferred.

[0153] UnixRemote.pl

[0154] UnixRemote.pl 614 is called using remsh on the system which the files are to be moved. It first deletes the *.old files, which are the data files from the previous day. Then the current data files are renamed to $node_$date_*.$extension. A verify.cmp file is created to later verify that all the files are transferred. The *.$extension files and the verify.cmp file are then transferred to the /sa directory structure, usually by ftp. Once that's done, the old files are archived by change $extension to $extension.old, which flags them for deletion the next day.

[0155] 3. extract 616

[0156] 4. data_manip_wrapper.pl

[0157] The data_manip_wrapper.pl script 618 controls the action manipulation of the data by calling a number of subscripts, each performing it's own function. Each script is called when the previous script has finished.

[0158] data_manip_stage1.pl

[0159] The data_manip_stage1.pl script 620 is the main script which massages the data. If new applications are added, this is the script which will need to be modified. This script takes the individual data files in the /sa directory structure, reads in the data_manip_stage1.cfg configuration files, manipulates the data so that it's in the format defined by data_manip_stage1.cfg, and then outputs files in the form of $element.element.

[0160] calculate_stats.pl

[0161] The calculate_stats.pl script 622 calculates the mean, max, min, sample, and standard deviation for each .element file. The output of the script is $element.element.stage2 and $element.element.stat for each .element file.

[0162] key_codes.pl

[0163] The key_codes.pl script 624 uses perf_metric_tb.ext and network_element_tb.ext to look up the codes associated with the node or element being monitored. It assigns the key code as the name of the file (i.e. keycode.element.stage2 and keycode.element.stat). It also produces perf_metric_time_tb.dat.

[0164] sort_elmnt_files.pl

[0165] The sort_elmnt_files.pl 626 sorts all of the keycode.element.stage2 and keycode.element.stat files and renames them keycode.element.stage2.sorted and keycode.element.stat.sorted.

[0166] union_all.pl

[0167] The union_all.pl script 628 takes the keycode.element.stage2.sorted files and concatenates them into perf_fact_tb.dat and the keycode.element.stat.sorted files and concatenates them into perf_fact_dly_tb.dat.

[0168] move.pl

[0169] The move_all.pl script 630 moves perf_fact_tb.dat, perf_fact_dly_tb.dat and perf_metric_time_tb.dat to /files6/ipsa/data loads/data_files.

[0170] 5. data_2_db.pl 632

[0171] 6. purge_records.pl 634

[0172] 7. bac{acute over (k)}up.pl 636

[0173] 8. trigger_reporting.pl 638

[0174] Call Script

[0175] This script does system calls and utilizes FTP to run other scripts. It calls the scripts in a specific order and logs successes and failures.

[0176] Scripts on other machines

[0177] If scripts need to be run on other machines, FTP should be used. With FTP, a configuration file is needed to house user and password information. Also, an account may have to be set up on that machine to be able to run that script.

[0178] NT Account

[0179] From the NT host:

[0180] Open Microsoft Internet Information Service (IIS), from there open Internet Services Manager

[0181] Right-Click on SA Ftp Site. Click on home directory and make sure this is share, not local. Add path, Network Share path, and make sure that Write and Log Access is accessed.

[0182] In the Security Accounts tab, make sure that the radio button for “Not allow anonymous connections is clicked.

[0183] In the FTP Site tab, make sure that the connections are limited to 1.

[0184] In the Directory Security tab, make sure the radio button for Denied Access is clicked and add the domain for the server that is attempting the FTP.

[0185] UNIX

[0186] The user and password being used to FTP must be supported by the system being accessed.

[0187] FTP example

[0188] Scripts on Local machines

[0189] The local scripts are called with a system call then logged successful or failure.

[0190] System command example

[0191] Order of Scripts Called

[0192] 1. Cleanup Utility 608

[0193] 2. Data Acquisition Utility 610

[0194] 3. Table Extract 616

[0195] 4. Data Manipulation 618

[0196] 5. Data Loader 632

[0197] 6. TPSA_ProcessTheBatchQueue.txt (Reporting SPSS) 638

[0198] 7. Purge Records 634

[0199] 8. Backup 636

[0200] get data.pl script

[0201] The get_data.pl script, along with the get_data.cfg file, retreves data from both local and remote hosts and relocates it in a common directory. The get_data.pl script also uses the UnixRemote.pl script, which resides on the remote UNIX machines from which data is being acquired. A similar script could also be designed for use with remote NT machines. The get_data.cfg file is the configuration file used to define all program specific information and parameters. There are additional variables and settings defined in the SACommon.pm Perl module, which is located in /sa/usr/mod/. In general, SACommon.pm contains global variables and sub-routines.

[0202] Configuration File (get_data.cfg):

[0203] The following is an example of what the configuration file entries look like. Each line is read by get_data.pl and then acted on according to the logic defined in the script.

[0204] The information contained in each entry is unique to the data being retrieved. The “˜” character is used as field delimiter throughout the file. Following is a description of the fields that must be defined for each entry:

[0205] $NodeName—DNS name or alias for the local/remote host from which files need to be collected.

[0206] $Location—Options include “local” or “remote”.

[0207] $SourcePath—Complete source path designating the directory from which data will be retrieved.

[0208] $SourceExt—File extension used to designate which files need to be collected.

[0209] $TargetPath—Complete target path designating the destination directory, on $DestHost, where files should be transferred to.

[0210] $TmpExt

[0211] $MoveMethod

[0212] $Archive

[0213] $ArchivePath

[0214] $ArchiveExt

[0215] $TransferType

[0216] $Platform

[0217] $TargetExt

[0218] $DestHost—DNS name or alias for the host where files will to be transferred to. It is not necessary for the destination host to be the system calling get_data.pl.

[0219] $LogFile

[0220] $UnixRemoteScript

[0221] There is a single variable, $ScriptName, defined locally within get_data.pl. It is recommended for use with the WriteErrorLog and WriteLog sub-routines provided in SACommon.pm. This is a static variable, and should not need to be changed unless the name of the script is changed.

[0222] Data acquisition local and remote

[0223] FIG. 7 illustrates an embodiment of the present invention for retrieving and relocating event and performance data of a network with service assurance capabilities. First, in operation 700, a data file is obtained from a host. The data file includes event data collected on a network and/or performance data collected on the network. In operation 702, a verification control file is created that is associated with the data file. The data file is renamed in operation 704 and copied to a target directory in operation 706. Thereafter, the copying of the renamed data file is verified with the verification control file in operation 708.

[0224] In one aspect of the present invention, information is added to the renamed data file relating to host name, date, and application extension. Further, the type of host is determined from which the data file was obtained. The type of host is selected from a local host and/or a remote host.

[0225] In another aspect of the present invention, a platform of the determined host is determined when the host is determined to be a remote host. Further, the verification control file may be copied with the renamed data file to the target directory. In addition, the data file may be archived.

[0226] In yet another embodiment, previously archived data files may be deleted. Further, a move method may be determined for the data file. A temporary copy of the data file may be created based on the move method. Such move method includes moving the data file and/or copying the data file.

[0227] FIG. 8 illustrates operation of the main data acquisition script (get_data.pl) 800 for each entry in the configuration file (get_data.cfg) 802. As shown in FIG. 8, the main data acquisition script (get_data.pl) reads the configuration file (get_data.cfg) once, at the beginning of processing, and stores necessary information in memory. Specifically, user and password are stored as variables, and the host entries are stored as an array. Each host entry is then processed in order:

[0228] 1. If the data files are local, the get_data.pl script will execute the following steps.

[0229] Remove old archived files. 804

[0230] If the files are to be moved, they are renamed with .tmp. 806

[0231] Parse the system data and reconfigure for file renaming. 808

[0232] Rename the files, add machine name, date and application extension. 810

[0233] Copy the files to the target directory. 812

[0234] Archive the moved files, rename by appending .old to the file name. 814

[0235] 2. If the data files are remote and Unix, the remote shell command is used to run the UnixRemote.pl script, which resides on the remote machines. UnixRemote.pl will execute and perform the following steps remotely.

[0236] Delete old archived files. 816

[0237] If the files are to be moved, they are renamed with .tmp. 818

[0238] Parse the system data and reconfigure for file renaming. 820

[0239] Rename the files, add machine name, date and application extension. 822

[0240] Ftp the files to the target directory and create a verification file. 824

[0241] Archive the moved files, rename by appending old to the file name. 826

[0242] It returns to get_data.pl and get_data.pl continues to execute the verification of the FTP. (To be able to execute FTP commands, the Net::FTP Perl module must be used). 828

[0243] 3. If the data files are remote and the platform is NT, the remote shell command will be used to run a script that will reside on the remote machine. The script will execute the following steps remotely.

[0244] Delete old archived files. 830

[0245] If the files are to be moved, they are renamed with .tmp. 832

[0246] Parse the system data and reconfigure for file renaming. 834

[0247] Rename the files, add machine name, date and application extension. 836

[0248] Ftp the files to the target directory and create a verification file. 838

[0249] Archive the moved files, rename by appending .old to the file name. 840

[0250] It returns to get_data.pl and get_data.pl continues to execute the verification of the FTP. (To be able to execute FTP commands, the Net::FTP Perl module must be used). 842

[0251] Data Manipulation Scripts

[0252] The scripts contained in the general function of data manipulation are: data_manip_stage1.pl. calculate_stats.pl, key_codes.pl, sort_elmnt_files.pl, union_all.pl and move_all.pl. The combination of these scripts takes the data from /sa/dev/dat/process, manipulates it and performs mathematical computations on it then moves it to the /files6/ipsa/data_loads/data_files so that the SQL loader can load it into the database.

[0253] Detailed Description of Modules

[0254] data_manip_stage.pl

[0255] The data_manip_stage1.pl script is the main script which manipulates the data. If new applications are added, this will need to be modified. This script takes the individual data files in the configuration files, manipulates the data so that it is in the format defined by data_manip_stage1.cfg and then outputs files in the form of <element>.element. This manipulation of data has several steps:

[0256] Filters out records that contain metrics we do not use for reporting,

[0257] Filters out fields we do not use for reporting

[0258] Reorders the fields we do want into the order <element>, <metric>, <instance>, <date-time stamp>, <value>

[0259] Converts raw metric names to standard metric names (according to a table)

[0260] Converts Date Time Stamps to Standard

[0261] calculate_stats.pl

[0262] The calculate_stats.pl script calculates the mean, maximum, minimum, sample size, and standard deviation for each metric in each *.element file. The output of the script is <element>.element.stage2 and <element>.element.stat for each .element file. The format of the *.stat files is <element>, <metric>, <instance>, <min>, <max>, <mean>, <standard dev>, <sample size>.

[0263] key_codes.pl

[0264] The key_codes.pl script uses perf_metric_tb.ext and network_element_tb.ext to look up the codes associated with the node or element being monitored. It assigns the key code to the name of the file in place of the element name (i.e. <keycode>.element.stage2 and <keycode>.element.stat). It also produces perf_metric_time_tb.dat, which is a list of all of the unique date-time stamps appearing in the raw data and their corresponding epoch times (the number of seconds since Jan 1, 1970)

[0265] sort_elmnt_files.pl

[0266] The sort_elmnt_files.pl sorts all of the <keycode>.element.stage2 and <Keycode>.element.stat files and renames them <keycode>.element.stage2.sorted and <keycode>.element.stat.sorted.

[0267] union_all.pl

[0268] The union_all.pl script takes the <keycode>.element.stage2.sorted files and concatenates them into perf_fact_tb.dat and the <keycode>.element.stat.sorted files and concatenates them into perf_fact_dly_tb.dat.

[0269] move_all.pl

[0270] The move_all.pl script moves perf_fact_tb.dat, perf_fact_dly_tb.dat and perf_metric_time_tb.dat to /files6/ipsa/data_loads/data_files.

[0271] Data Manipulator Sample Raw Data

[0272] Patroller Data

[0273] Event Correlation and Manager Data

[0274] Desired Metrics and their Standard or Derive Metrics

[0275] Data Loader

[0276] The purpose of the data loader in the SA toolkit is to perform recommended operations on the gathered event data before it is loaded into the database. Primarily, the raw data files need to be concatenated, reformatted, translated to key codes, and sorted. In addition, the data loader will also perform statistical calculations on the data for daily “roll-up” reports to be loaded into the database.

[0277] Body Section

[0278] Patroller Data

[0279] Performance data from Patroller collectors is in the following text log file format:

[0280] After parsing and reordering, the format is:

[0281] <element>, <metric name>, <instancename>, <date time>, <metric value>

[0282] Finally, the element name and metric name must be translated to their corresponding key codes and the date time must be converted to the format consistent with the database:

[0283] 16838, 236998718,6293,54

[0284] Event Correlator and Manager (ECM) Data

[0285] Performance data from ECM collectors is in the following text log file format: (note: fields in italics are do not have values for poll data):

[0286] . . . a sample file (found in /opt/seasoft/userfiles/logs/ifdata.log)

[0287] After parsing and reordering, the format is:

[0288] <element>, <metric name>, <instance name>, <datetime>, <metric value>

[0289] Finally, the element name and metric name must be translated to their corresponding key codes and the date time must be converted to the format consistent with the database:

[0290] 16838, 236998718,6293,54

[0291] High Level Architecture Description

[0292] FIG. 9 illustrates an exemplary configuration of an architecture 900 of the present invention for manipulating data using a Patroller and an ECM.

[0293] Load Config File 902

[0294] Inputs: Configuration file.

[0295] Description: This subroutine will open the configuration file, read in the required values to three arrays and close the configuration file.

[0296] Outputs: Three arrays: @SectionNames, @SectionMarker, @SectionValues. @SectionNames will contain all of the section titles found in the Config file, (SECTION_GENERAL, SECTION_CONCATENATE_FILES, SECTION_REORDER_FIELDS . . . ); @SectionValues will contain each line from the config file (that isn't a section header, a blank line, or a comment) as a single element; @SectionMarker will contain the index number of the last line of each section. This way, you can pull out just the elements of the @SectionValues array that you need for a given functional block.

[0297] Concatenate All Files 904

[0298] Inputs: All log files in the directory sa/prd/dat/process/ECM and sa/prd/dat/process/Patroller. ECM data will have a .nrc extension, Patroller data will have a .pat extension.

[0299] Description: This subroutine will concatenate all files from a given source into one master file. For each file in the directory (/ECM and /Patroller), it will read in each line, and:

[0300] Concatenate to master (actually done last) 906

[0301] Filter to only include desired metrics (delete line if it isn't listed as a desired metric) 908

[0302] Reorder and drop fields (split on “,” and put in proper order: <element>, <metric>, <time>, value). 910

[0303] Format non-standard fields into standard comma separated format. For each element file with a nonstandard field format (such as ECM's dual value fields with a metric=value format), this subroutine will convert these nonstandard fields to standard fields. 912

[0304] Outputs: The files master.nrc and master.pat.

[0305] Generate Element Files 914

[0306] Inputs: Master.nrc and master.pat. (Proper order, comma separated, all text).

[0307] Description: For each master file, this subroutine will read each line, create an element file for each unique element, and write the line to the appropriate file.

[0308] Outputs: The files elementl.elemnrc, felement2.elemnrc, . . . (for all elements found in master.nrc) and the files elementlel.elempat, felement3.elempat (for all elements found in master.pat).

[0309] Convert Date-Time Stamps to Standard 916

[0310] Inputs: Element files. (*.elemnrc, *.elempat, proper order, comma separated, all text)

[0311] Description:. Convert the current date time stamps to a standard format (e.g. the 1999-07-30 15:42:13 format found in Patroller files would be converted to . . . )

[0312] Outputs: Element files.

[0313] Convert to Standard Metric Names 918

[0314] Inputs: Element files. (*.elemnrc, *.elempat, proper order, comma separated, all text).

[0315] Description: For each element file, this function will lookup each metric name in a hash or flatfile. If found, it will convert it to standard. Else, it's already standard.

[0316] Outputs: (Expanded) Element files.

[0317] Sort Element files by Metric Time 920

[0318] Inputs: Element files (*.elemnrc, *.elempat, proper order, comma separated, all text).

[0319] Description: This subroutine will perform and ordered sort on each element file, sorting first by metric, then by time stamp.

[0320] Outputs: Element files.

[0321] Calculate Derived Fields 922

[0322] Inputs: Element files. (*.elemnrc, *.elempat, proper order, comma separated, all text, sorted by metric and timestamp).

[0323] Description: For each element file, this subroutine will read each line and search for all metrics (at a given time) required to calculate derived metrics, calculate the given derived metric, create a new line for this derived metric, and append this line to the end of the file.

[0324] Outputs: Element files.

[0325] Calculate Statistical Data and create Rollup Files 924

[0326] Inputs: Element files. (*.elemnrc, *.elempat, proper order, comma separated, all text, sorted by metric and timestamp, derived metrics at end of file).

[0327] Description: For each element file, this subroutine will

[0328] 1) read each line for a given metric,

[0329] 2) store each value into a temp array,

[0330] 3) calculate min, max, mean, standard dev., and sample size,

[0331] 4) create a new line (<element>, <metric>, <time>, <min>, <max>, <mean>, <stddev>, <n>),

[0332] 5) write this line to a newly created rollup file and

[0333] 6) repeat for the next metric.

[0334] Outputs: Original element files (unchanged), rollup files stats.elemdailypat, stats.elemdailynrc

[0335] Convert all Text Fields to Key Codes 926

[0336] Inputs: Element files (*.elemnrc, *.elempat, proper order, comma separated, all text, sorted by metric and timestamp, derived metrics at end of file), and rollup files.

[0337] Description: For each file, this subroutine will read each line, convert each text field to a key code (according to a lookup table in a hash or file, except for the time field, which will be calculated), and write the line to a temp file. When all lines have been converted, the source file will be deleted, and the temp file will be moved to the source file.

[0338] For each file and for each unique time stamp, create a new line with the new calculated time key cd (<perf_time_key_cd>, <dt>, <day>, <mon>, <yr>, <hour>, <min>, <sec>, <dow>) and write to a file perf_metric_time_tb.dat file. (This file then should be collapsed to remove duplicate time stamps from different elements). 928

[0339] Outputs: (Encoded) element files and rollup files.

[0340] Union All Files of Same Element 930

[0341] Inputs: Element files (*.elemnrc, *.elempat, proper order, comma separated, all key codes, sorted by metric and timestamp, derived metrics at end of file), and rollup files (all key codes)

[0342] Description: This subroutine will concatenate all files of the same element, regardless of collector source (*.pat, *.nrc, . . . ) into a *.elemall files.

[0343] Outputs: All-Element files: felement1.elemall, felement2.elemall, . . .

[0344] Sort Each Element File 932

[0345] Inputs: All-Element files (see A.10)

[0346] Description: This subroutine will sort each file first by metric, then by time stamp.

[0347] Outputs: All-Element files

[0348] Union All Files 934

[0349] Inputs: All-Element files, Rollup files (see A.10)

[0350] Description: This subroutine will concatenate all *elemall files into perf_fact_tb.dat, and all rollup files into perf_fact_daily_tb.dat.

[0351] Outputs: Database load files: perf_fact_tb.dat, perf_fact_daily_tb.dat

[0352] Move Files 936

[0353] Inputs: A files ready to be archived or moved to sql loader (perf_fact_tb.dat, perf_fact_daily_tb.dat, perf_metric_time_tb.dat)

[0354] Description: This subroutine copies and/or moves files to any arbitrary location on a local drive.

[0355] Outputs: Copies and/or moves files to /files6/ipsa/data_loads/data_files/ on twmmdb02.

[0356] Configuration of Event Correlator and Manager

[0357] This section describes how to configure the Event Correlator and Manager (UNIX) to collect performance data. It covers the process of adding property groups, creating polls, and building alarms to collect basic performance statistics from CISCO routers. Although the examples are specific to CISCO routers, the concepts and processes introduced are transitive, and can be used to implement collection for other types of SNMP devices.

[0358] Accordingly, FIG. 10 depicts an embodiment of the present invention which generates an alarm to indicate a status of a network for service assurance purposes. Such purposes can include identifying errors and faults, monitoring system resources, anticipating problems, etc. Once a parameter of a network that is to be monitored is selected in operation 1000, a triggering level of the parameter is determined in operation 1002. In operation 1004, the parameter for an occurrence of the triggering level is monitored. If the triggering level is reached, an alarm is initiated in operation 1006.

[0359] In one aspect of the present invention, the alarm is named for identification purposes. Optionally, the parameter can be adapted to be monitored for a plurality of components of the network. In such an embodiment, a separate alarm notification may be initiated for each of the components upon the monitored occurrence of the triggering level thereon.

[0360] As an option, the alarm notification may be stored upon its initiation. Preferably, the alarm notification is stored until the occurrence of a user action.

[0361] Assumptions:

[0362] The ECM MIB definition for your network hardware has been added to the MIB file.

[0363] Starting the client

[0364] Start the ECM Client as ‘noc’, if it is not already running.

[0365] Using the Server/Connect menu selection, connect to the network management station as (i.e. nsmmws 16) as ‘noc’.

[0366] Using the Server/Resync menu selection, resynchronize the ECM database with the platform database containing managed nodes (i.e. HP NNM).

[0367] Create a new ‘Property Group’

[0368] Property groups allow categorization of managed devices into groups. The groups can be based on device types, location, priority, supported MIBs, business function, or any other useful characteristic. Polls or alarms can be restricted to the members of one or more property groups.

[0369] Select the Admin/Property Group List menu option to open the Property Group List.

[0370] Select the MIB to Group button to open the MIB to Property Group window.

[0371] Select the MIB of interest from those listed in the MIB list. For our example, select MIB-II.

[0372] Type a unique name in the Property Group Name field, and then select OK. For this example, enter “SA_Router_Collection_Group”.

[0373] Adding a property to a property group

[0374] Adding properties to an existing property group enables one to take advantage of the flexibility of property groups. Properties may need to be added if it is desired to:

[0375] Make a property group unique by adding a property that isn't in any other group. By assigning the unique property group to selected devices, you can manage those devices differently from other devices.

[0376] Make polls and/or alarms apply to devices belonging to that property group.

[0377] Monitor a base object on a group of devices when the base object isn't listed as a property in the devices' property group.

[0378] For the purposes of this example, the “lsystem” base object property will be added, defined in the cscoe.asn1 MIB definition; as well as a custom property to make the property group unique.

[0379] From within the Property Group List window, select SA_Router_Collection_Group from the list of groups

[0380] Click inside the New Property field, type the name of the new property, and select Add. For our example, type “SA Router_Collection_Property”.

[0381] Repeat the previous step to add the “lsystem” property.

[0382] Select Save

[0383] Close the Property Group List window

[0384] Assigning property groups

[0385] In the following example, SA_Router_Collection_Group, the property groups created in the previous section, will be assigned to a single router.

[0386] Open the Node Definition window for the device.

[0387] Select the property group you would like associated with this device from the pop-up list in the Group field.

[0388] Select Save, and close the Node Definition window.

[0389] Create a new ‘Poll’

[0390] Open the ‘Polls’ list from the Patroller console using the Admin/Polls . . . menu selection.

[0391] Select ‘Add’ from the Polls window.

[0392] Configure the poll

[0393] Leave ‘Object Type’ as Poll

[0394] Change ‘Name’ to a new name

[0395] Set the desired poll rate.

[0396] Type a new name for the ‘Poll Trigger’. Use a name similar to the name you gave to this poll.

[0397] Leave False Trigger blank

[0398] Leave Property as ‘NO_PROP’

[0399] Select ‘Set Poll Condition’

[0400] (a) Select the ‘Base Object’ from which you want to collect data. This base object directly correlates to the base object of the SNMP MIB.

[0401] (b) Select the desired ‘Attributes’ from the base object and drag them into the ‘Expression’ box using the middle mouse button. For each Attribute selected, change the ‘Rel Op’ field to ‘present’ and click the ‘Add’ button. When all attributes have been selected, click the ‘Apply’ button.

[0402] Poll=lsystemDataPoll

[0403] Poll rate=15 min

[0404] True Trigger=lsystemDataTrigger

[0405] Property=SA_Router_Collection_Property

[0406] Poll condition:

[0407] Base object=lsystem

[0408] lsystem.avgBusy1 present and

[0409] lsystem.avgBusy5 present and

[0410] lsystem.busyPer present

[0411] Create a new “Alarm”

[0412] Open the ‘Alarm Definitions’ list from the Patroller console using ‘Admin-> Alarm Definitions . . . ’ selection.

[0413] Select ‘Add’ from the Alarm window.

[0414] Configure the new Alarm.

[0415] Select a new name for the Logging alarm.

[0416] Select the property of the device group you want to collect data from.

[0417] Select the ‘State Diagram’ button.

[0418] Using the ‘New State’ button, create 2 states called ‘Ground’ and ‘Logging’. The ‘Severity’ of both states should be set to ‘normal’.

[0419] Using the ‘New Transition’ button, create a transition from ‘Ground’ to ‘Logging’. The trigger for this transition should be the name of the ‘Poll Trigger’ you defined in section 3.1.4. Select ‘Apply’. Under ‘Action’ select ‘Log’ and type the name of the log file where you want the data stored in the ‘Arguments’ field . Note: use the name of the trigger with a ‘.log’ extension for the log name. Do not enter a path name as all data is stored in the pre-defined ECM logging directory.

[0420] Create the same transition from ‘Logging’ to ‘Logging’.

[0421] In the ‘Alarm Configuration View’ select ‘On’ and ‘Apply’.

[0422] Note/Caution:

[0423] When designing a logging alarm based on two states (i.e. ground and logging), be aware that a new 5K instance of the alarm may be instantiated and remain in memory for each object within the defined scope. For example, a subobject scoped alarm with two states, ground and logging, created to collect interfaced data from a router would be instantiated once for each interface on all routers in the target property group. Because this alarm contains two states, ground and logging, the alarm remains in memory until manually stopped as it never returns to the ground state. One method of avoiding this unnecessary overhead is to create the logging alarm with only one state, ground, and a single transition from ground to ground.

[0424] Design is Ground to Ground, with a single transition based on the ‘lsystemDataTrigger’ defined in the example poll above.

[0425] Alarm=lsystemDataLogger

[0426] Property=SA_Router_Collection_Property

[0427] Scope=node

[0428] State List:

[0429] Ground-Normal

[0430] Transition List:

[0431] Ground→Ground Trigger=ifDataTrigger

[0432] Action=Log to file:

[0433] Ifdata.log

[0434] Verbose enabled

[0435] Update the Nerve Center Schema files

[0436] The ECM schema file(s) (e.g. ecm_schema.def) are used by the SA data management subsystem to define and upload data into SAS datasets.

[0437] Edit the file ‘/perf/CONFIGS/NERVEC_schema.def’ Add to the end of this file a section for the new data you are collecting. The section should start with a single line to define the new ‘TABLE’ name, multiple lines for the attributes being collected, and a single line indicating the end of the table definition with the label ‘ENDTABLE’.

[0438] Add the ‘TABLE’ line. This line has 5 fields separated by commas.

[0439] Field 1—‘TABLE’ label

[0440] Field 2—Name of new SAS dataset. This field should be no longer than 6 characters.

[0441] Field 3—Name of the ‘Poll Trigger’.

[0442] Field 4—Name of the Alarm.

[0443] Field 5—INDEXED or NONINDEXED. Type INDEXED if this is to be and INDEXED dataset. An INDEXED dataset contains data with multiple instances for a single device. For example, collecting router interface data for each interface on a router would be INDEXED, while collecting CPU data from a single CPU on a router would be NONINDEXED.

[0444] TABLE,NCSWRMON,RMONData,NC_RMONDataLogger,INDEXED

[0445] Add a line for each attributed collected. These lines have 5 fields separated by commas.

[0446] Field 1—Name of the SAS Dataset defined in the ‘TABLE’ line.

[0447] Field 2—New name of the attribute. This name must be 7 characters or less.

[0448] Field 3—Name of the ‘Poll Trigger’.

[0449] Field 4—Name of the Attribute being collected by ECM.

[0450] Field 5—Type of data. (STRING, C2 RATE, GAUGE, INT)

[0451] STRING: Alphanumeric string.

[0452] C2RATE: If the data is a rising counter, the label will tell SAS to convert it to a rate for the interval in which is was collected.

[0453] GAUGE: If the data is already a rate or a percentage. SAS will do no conversion.

[0454] INT: If the data is an integer (Ex: Interface number)

[0455] NCSWRMON,INBITS,RMONData,etherStatsDataSource,STRING

[0456] Add a line to signify the end of the configuration section. This line has 3 fields separated by commas.

[0457] Field 1—‘ENDTABLE’ label

[0458] Field 2—Name of new SAS dataset.

[0459] Field 3—Name of the ECM Alarm.

[0460] ENDTABLE,NCSWRMON,NC_RMONDataLogger

[0461] One embodiment of the present invention, shown in FIG. 11, is used to develop a database. Data is extracted from a source system with an application program in operation 1100. The data is translated into a consistent model in operation 1102. The model contains information selected from one or more of performance metric information, time data, geographic location data, and event data. The modeled data is stored in a database in operation 1104. The data is analyzed in operation 1106 based on the information and the results of the analysis are output. It should be noted that the data may be analyzed before or after storing.

[0462] In one aspect of the present invention, the data is extracted using a plurality of application programs. Further, the information may include performance metric information, time data, geographic location data, and event data.

[0463] In yet another aspect of the present invention, the results may be outputted by way of reports and charts. Further, identifiers may be assigned to groups of the data. The data can also be stored in a plurality of databases including a first database for development purposes, a second database for testing purposes, and a third database for production purposes.

[0464] Refer to the following sections for more detailed information and additional embodiments.

[0465] Database Design

[0466] The database for the Service Assurance Toolkit can be designed as a data warehouse. This design offers greater performance and flexibility, which will enable the database to evolve in future releases of the Service Assurance Toolkit. The architecture for a successful data warehouse, by which we mean the end-to-end tools and processes, will vary from implementation to implementation. A typical data warehousing architecture should include, as a minimum:

[0467] Multiple extract programs from one or more operational systems, to retrieve the source data for the warehouse.

[0468] A data repository (“Operational Data Store”) containing the extracted data in an appropriate model.

[0469] A tool to analyze and display the data as reports and charts.

[0470] The design of the SA database should also be independent of any relational DBMS. By doing this the SA toolkit will be more portable across platforms and will allow us to better meet client needs. Also, the design of the database may contain all necessary information to meet the requirements laid out in the reporting requirement document. For the SA toolkit, the data model should contain information such as:

[0471] Network element information.

[0472] Performance Metric information.

[0473] Detailed time data

[0474] Network element geographic location data

[0475] Network element event data

[0476] The design of the database can utilize surrogate keys to uniquely identify records. This will be done to increase query performance as well as to add flexibility to the database design. However, this adds complexity to the data manipulation because look-ups on the surrogate keys will need to take place.

[0477] Physical Database

[0478] The SA toolkit may be built on the Oracle RDBMS platform. While this is a specific platform, the physical design of the database can be independent of Oracle and portable to the major players in the RDBMS world i.e. Sybase, Informix, DB2, Microsoft, etc.

[0479] Development Environment

[0480] The database environment will have one database for the entire development process. However, for larger networks, more databases can be installed. For example, three databases may be installed—one database each for the devel, test, and production environments.

[0481] The installation and file system structure for the database will follow an Optimal Flexible Architecture (OFA). OFA is a set of 13 guidelines or goals to follow in order to standardize the database environment.

[0482] Database Backup/Recovery

[0483] Backups of the SA database will meet the following requirements:

[0484] The backup script utility may be written in perl. Perl allows scripts to be more portable across hardware platforms.

[0485] The backup utility can be executed by the UNIX cron utility. It could also be executed by the Windows NT AT scheduler if running on the NT platform.

[0486] Cold backups will be run at least once a week. This requires database down time.

[0487] Exports of the database will take place every evening at the end of the nightly batch schedule.

[0488] Database Objects

[0489] All database objects (DDL, scripts, code) will be placed under source control. This will be done to allow for versioning when databases for other environments are implemented. This also places these objects in a centralized location for easy access.

[0490] Data Management, Retention and Volume

[0491] Data Volume

[0492] The estimated volume of detailed data is 2,000,000 rows per day. The physical design of the database will be built to handle this volume while remaining flexible enough to handle a large increase in volume.

[0493] Data Manipulation

[0494] Due to the fact surrogate keys will be used to uniquely identify records, a look-up process needs to occur in the data manipulation process. A perl script will be written to extract surrogate key information from the database to flat files. The data manipulation process will use these files to generate flat files in a format that can be loaded into the database tables.

[0495] During the nightly batch window, all the detailed level data will be rolled up into daily summary data.

[0496] Data Loading

[0497] The detailed records will be loaded in via a perl script which utilizes an SQL*Loader utility. While all of the major RDBMS vendors have some sort of data loading utility, they are all different syntactically. Thus, this script may need to change depending on the type of database. For phase 2, the detailed data may be loaded once a day during the nightly batch run.

[0498] Daily rollup data will also be loaded via the load script at the same time the detail records are loaded. This is possible because all of the data manipulation is occurring outside of the RDBMS.

[0499] Data Retention

[0500] Phase 2 recommends detailed level data to be retained for 40 days and daily rollup data retained for 13 months. A perl script will be written to purge this data once is has expired. This process will run nightly, before the actual loading of the data occurs.

[0501] Database Developer

[0502] The purpose of this section is to outline the steps taken to install a Database Developer portion of the present invention on a server. The following examples will teach how to install the Database Developer on both a Windows NT Workstation and a HP 9000 Server. This section should also be applicable to install the Database Developer on different servers. “Dbse” throughout the description of the present invention denotes a database program.

[0503] Minimum System Requirements

[0504] The minimum system requirements should be determined before installation of the Database Developer. Exemplary minimum system requirements are:

[0505] Each Client Workstation

[0506] 90 MHz processor

[0507] 32 Mb RAM, 1 Gb hard disk

[0508] 60-680 Mb available disk space (depending on the components you choose to install

[0509] Windows NT 4.0/95

[0510] SQL*Net Client 2.3.4

[0511] TCP/IP Adapter

[0512] SQL*Plus 3.3.4

[0513] CD-ROM drive

[0514] On the Server (for each Repository created).

[0515] 125 Mb in the SYSTEM tablespace

[0516] 20-330 Mb in other tables for the Repository data

[0517] 16-28 Mb available RAM for the System Global Area

[0518] Pre-Installation Steps

[0519] Verify the system requirements are met at each client workstation

[0520] Verify the Server is correctly installed and accessible on the network

[0521] Verify the database instance you wish to use has been created and functions correctly

[0522] Client Installation

[0523] 1. Log on to the client workstation as a user with administrative privileges but not as an administrator

[0524] 2. Close all other applications

[0525] 3. Insert the Database Developer media into a media reading device, (e.g., insert a CD into the CD-ROM drive)

[0526] 4. In the Installation Settings dialog box:

[0527] a) Type the name of the license owner for this product

[0528] b) Select DEFAULT_HOME for Home Name

[0529] c) Select English for Home Language

[0530] d) Click OK

[0531] 5. Select Yes in all Update message boxes to update out-of-date products

[0532] 6. Select No in all Up to Date message boxes to avoid reinstalling products

[0533] 7. Select OK in all General Information and System Support Files message boxes to acknowledge message

[0534] 8. Select OK to acknowledge the products that will be installed

[0535] 9. Select OK to acknowledge that Installation is complete

[0536] 10. Configure SQL*Net as follows:

[0537] a) Click Start→Programs→SQL for Windows NT→SQL Net Easy Configuration

[0538] b) Choose Add Database Alias and click OK

[0539] c) In the Choose Database Alias box, type the database alias you wish to use and click OK

[0540] d) Choose TCP/IP in the Choose Protocol dialog box and click OK

[0541] e) In the Choose Protocol/Server Name and Database Instance dialog box:

[0542] i. Type the name of the server where the database is located

[0543] ii. In the Database Instance field, type the name of the database

[0544] iii. Click OK, click Yes

[0545] f) Select Exit SQL*Net Easy Configuration, click OK

[0546] g) Click OK

[0547] Activities at the Database Server

[0548] 1. Log on to the UNIX Server that holds the database

[0549] 2. Start the database instance, if not already running

[0550] 3. Verify that TNS Listener is running

[0551] 4. Log onto SQL*Plus as system

[0552] 5. In SQL*Plus, verify that the procedural option has been installed

[0553] a) Execute the following SQL statement:

[0554] SQL> create or replace procedure test as x varchar2(10)

[0555] 2 begin

[0556] 3 if x is null then null

[0557] 4 end if

[0558] 5 end

[0559] 6 /

[0560] Warning: Procedure created with compilation errors.

[0561] SQL> drop procedure test;

[0562] Procedure dropped.

[0563] b) If the SQL statement returns an error (as above), continue to step c. Otherwise go to step 5.

[0564] c) Run the following SQL script to install the option where dbse_home is the location where dbse is installed (C:\DBSNT):

[0565] SQL>@dbse_home/rdbms/73/admin/catproc.sql

[0566] 6. Create two tablespaces, one for Repository Data and another for Repository Index, of size 100 Mb each

[0567] 7. Create one tablespace for small rollback segments (recommended four rollback segments @ 10 Mb each)

[0568] 8. Create one large tablespace for the rollback statement used during installation. The size of this rollback segment should be as big as possible (recommended at least 100 Mb). In this tablespace, create one rollback segment and put it online (this rollback segment and tablespace can be removed after install)

[0569] 9. Take all rollback segments offline except the SYSTEM rollback segment and the one created in step 8

[0570] 10. Check the size of the SYSTEM tablespace. You will need at least 125 Mb of free space for the installation.

[0571] 11. Create the Repository owner and grant connection and resource roles

[0572] 12. Check the settings in the INITxxx.DBA (where xxx is the name of the database) file and change if necessary.

[0573] 13. If any changes were made to INITxxx.DBA in the previous step, shut down and restart the database. Make sure to close any SQL*Plus windows that are open. Once the database is restarted successfully, exit Server Manager

[0574] Activities at the Client

[0575] 1. Log on to the Client Workstation as a user with administrative privileges but not as an administrator

[0576] 2. Log on to the database using SQL*Plus

[0577] 3. Create a role called OWNER

[0578] a) Execute the following SQL statement where home is the directory where the Database Developer was installed:

[0579] SQL>home\repadm20\utl\ckrorole.sql

[0580] b) Issue all privileges that apply to the Repository owner

[0581] 4. Grant the role created in step 3 to the Repository owner

[0582] 5. Close any SQL*Plus windows that are open

[0583] 6. Start the Repository Administration Utility

[0584] 7. Connect as the Repository owner

[0585] 8. Click the View Privileges button and verify the required system privileges and roles are granted for the Repository owner. If privileges and roles are correct, continue by clicking Cancel

[0586] 9. Click the View Tablespace button to check whether the SYSTEM tablespace is fragmented. If the SYSTEM tablespace is not fragmented, continue by clicking Cancel

[0587] 10. Click the View Parameters button to verify the parameters are set correctly. If they are correct, continue by clicking Cancel

[0588] 11. Click the Install button on the Repository Administration Utility window

[0589] 12. Choose Small, Medium, or Large in the Repository Size box according to the expected initial size of the Repository and click the Estimate button

[0590] 13. Click the Pre-Check button to view a list of system privileges. Insure all privileges have a check mark under the “Has Privilege?” column. If so, continue by clicking OK

[0591] 14. Click the Tablespace button to view all available tablespaces. Insure there is sufficient space in each tablespace. If so, continue by clicking Cancel

[0592] 15. Assign tablespaces for indexes by using the dropdown lists under Index Tablespaces and for tables using the dropdown lists under Table Tablespaces using the tablespaces created in step 6

[0593] 16. Start installation by clicking on the Start button. NOTE: expect this step to take 2-3 hours

[0594] 17. When you see the message box saying Operation Complete, click OK, then Cancel

[0595] 18. Examine the log files to ensure that there are no errors and warnings. These files can be deleted if they contain no errors or warnings and all post-installation procedures run correctly

[0596] 19. Delete temporary tablespace/rollback segment

[0597] 20. Put all other rollback segments online

[0598] Automatic Startup and Shutdown of Database

[0599] This section will outline the steps to setup automatic database startup and shutdown procedures on a HP 9000 server. This process is operating system dependent, but a similar procedure should be applicable for other servers. Consult the correct installation guide for the exact process for the particular server you are working with.

[0600] Required Files

[0601] The following files are required for automatic startup and shutdown. Some of the files will be created in the process, some are already created, while others are symbolic links.

[0602] /sbin/init.d/dbse

[0603] This file contains the main script for the database startup and shutdown. It can be created from /sbin/init.d/template. This script will start the database with the command su - dbse -c dbstart and shut it down with the command su - dbse -c dbstop.

[0604] /etc/rc.config.d/dbse

[0605] This file contains assignment statements that will enable automatic startup and shutdown procedures. It will be created during configuration.

[0606] /etc/rc1.d/K100bse->/sbin/init.d/dbse

[0607] This file is a link to the /sbin/init.d/dbse script. Depending on the three-digit number after the “K”, the script will be executed in ascending order at shutdown. The value after “K” should be as small as possible so the database is one if the first processes to be shutdown.

[0608] /etc/rc2.d/S990dbse->/sbin/init.d/dbse

[0609] This file is a link to the /sbin/init.d/dbse script. Depending on the three-digit number after the “S”, the script will be executed in ascending order at startup. The value after “S” should be as large as possible so the database is one if the first processes to be shutdown.

[0610] /etc/dbstab

[0611] This file defines which databases are started automatically. The dbse installer creates this file. It simply needs to be modified. If the database is created manually, this file needs to be created.

[0612] Create /sbin/init.d/dbse script

[0613] Make a copy (but do not remove) /sbin/init.d/template and name it /sbin/init.d/dbse.

[0614] Create /etc/rc.config.d/dbse file

[0615] Create a file named dbse in the /etc/rc.config.d/ directory. In this file, include the following assignment statements:

[0616] DBSE_START=1

[0617] Export DBSE_START

[0618] Edit the /etc/dbstab file

[0619] This file will already be created if the installer program is used to create the database. This file includes all database that are to be started automatically at system boot. An entry for each database instance will be listed in this file in the format where Y indicates automatic startup and shutdown is activated and N indicates it is not activated:

[0620] DBSE_SID:DBSE_HOME: {Y|N}

[0621] For each database in which you want to invoke automatic startup and shutdown, make changes as necessary to activate automatic startup and shutdown.

[0622] Create a link from /sbin/rc1.d/Kxxxdbse to /sbin/init.d/dbse

[0623] The scripts in the directory /sbin/rc1.d are executed when the system is shut down. Scripts are executed in ascending order determined by the three-digit number after the “K” (where the number is xxx of the filename Kxxxdbse). This number defines ordering between all scripts located in the /sbin/rc1.d directory. Number the script as low as possible in order to ensure that dbse is shut down before any other processes.

[0624] Create a link from /sbin/rc2.d/Sxxxdbse to /sbin/init.d/dbse

[0625] The scripts in the directory /sbin/rc2.d are executed when the system is started. Scripts are executed in ascending order determined by the three-digit number after the “S” (where the number is xxx of the filename Sxxxdbse). This number defines ordering between all scripts located in the /sbin/rc2.d directory. Number the script as high as possible in order to ensure that dbse is shut down before any other processes.

[0626] /sbin/init.d/dbse

[0627] Manual Startup and Shutdown of Database

[0628] This section will outline the processes to start and stop a database on a HP 9000 server. It will also outline the process to start and stop a Listener Service. This process should be applicable for different versions of UNIX and databases on various other types of servers.

[0629] Database Startup Procedure

[0630] The following steps can be used when starting a database in UNIX version HP UX 10.2. To verify that the database has been started properly, see the section below entitled “Verifying the database is started/stopped.”

[0631] 1. Log on to UNIX as system user

[0632] 2. Enter system user's password

[0633] 3. Check environment table to be sure that the DBSE_SID is set to the database instance that you wish to start→env

[0634] 4. Start Server Manager→svrmgrl

[0635] 5. Connect to the system user→connect /as sysdba

[0636] 6. Start the database→startup

[0637] 7. Exit Server Manager→exit

[0638] Database Shutdown Procedure

[0639] The following steps can be used when stopping a database in UNIX. To verify that the database has been stopped properly, see section five below.

[0640] 1. Log on to UNIX as system user

[0641] 2. Enter system user's password

[0642] 3. Check environment table to be sure that the DBSE_SID is set to the database instance that you wish to start→env

[0643] 4. Start Server Manager→svrmgrl

[0644] 5. Connect to the system user→connect /as sysdba

[0645] 6. Start the database→shutdown

[0646] 7. Exit Server Manager→exit

[0647] Verifying the database is started/stopped

[0648] It is possible to check if the database is started or stopped after completing the steps above. To do so, follow these steps.

[0649] 1. At the command line type→ps-ef|grep system_user (where system_user is the system user's name that you are logged on as)

[0650] 2. Look for an entry such as the following→ora_pmon_SID (where SID is the database instance name)

[0651] If you find an entry such as the one above, the database is running. If not, the database is shutdown. If you do not get the expected results, redo the database startup or shutdown procedure set forth above.

[0652] Listener

[0653] The Listener is a utility that handles database connection requests. It may have a service for all databases. If a database is started while the Listener is already running, it may be necessary to restart the Listener.

[0654] a. Check if Listener is started for the database instance

[0655] At the UNIX prompt, enter the command lsnrctl status. Under the heading “Services Summary . . . ”, check that there is an entry reading “SID has 1 service handler(s).” (where SID is the desired database instance). If there is an entry for the desired SID, then the Listener is started. Otherwise the listener is not started.

[0656] b. Start the Listener

[0657] To start the listener, type lsnrctl start at the UNIX prompt. After this has completed, verify the listener is started by following the steps above in section 6.1.

[0658] c. Stop the Listener

[0659] It is recommended to stop the listener when the server is shutdown. To do this type lsnrctl stop at the UNIX prompt.

[0660] Database Configuration

[0661] FIG. 12 illustrates an exemplary database configuration chart. Table 3 provides a key to FIG. 12.

[0662] Environment: Development Location: Development database Server

[0663] Database Cold Backup

[0664] This section will describe the required files needed to run cold_backups. It will outline the recommended steps to configure cold_backups (written in Perl) to run on a database. Finally, this section will discuss how to execute the script. The location of the cold_backups script can be anywhere in the database's directory system.

[0665] Required files/directories

[0666] The following list of files and directories need to be created before cold_backups will run. These files are described bellow and common naming conventions are given. Also, an OFA directory structure location is specified.

[0667] System Identification (SID) File

[0668] This file should contain a list of one or more system ids, dbse home, and dbse base. Every system id will be shutdown, backed up, and restarted. The values of this file are also used to set the correct environment of the SID. The format of this file must be of the form: SID,DBSE_HOME,DBSE_BASE. There are no spaces between fields. Also, it is important that there are no blank lines in this file. A common naming convention for this file is cold_sids. The file is best housed with other files related to the backup.

[0669] SQL*Plus Script File

[0670] This script will generate a complete list of files that need to be backed up. A common naming convention is unix_script.sql. This file will be located in the directory specified for sql scripts.

[0671] Password Script

[0672] The contents of this file can be found in Appendix B or in O:\Performance\QoSM\Product Development\Database\Doc\getpass. This script allows the user's password to be used within the script without hard-coding the password into it. A common naming convention is getpass. This file should be housed in the unix directory. NOTE: the password is not encrypted so it is important that an unauthorized user does not execute this script at the command line. Also, if the password scripts is used within another script it is important the password is not echoed to the screen.

[0673] Backup Directory

[0674] The backup directory will store the backup files. The naming convention for this directory is {SID}_cold where SID is the system id. The file is best housed in the current directory (described below in “Current Directory”).

[0675] Configuration of Variables

[0676] Directory paths and file names are hard coded in the cold_backups script. Therefore it is recommended to configure these variables to suit the file structure of the particular database the backup is to be performed on. The following are variables that need to be specified for the system in which the script is run on. These variables are grouped together at the beginning of the script. Look for the commented section entitled “Variable List” to locate the variables within the script.

[0677] Current Directory ($Current_Dir)

[0678] This variable is set to the directory location in which the backup directory (described above in “Backup Directory”), log file (described below in “Log”), system id file (described above in System Identification (SID) File), and temporary directory (created during execution of the backup and deleted after its completion) are kept. This directory can be placed anywhere.

[0679] SID File ($SID_File)

[0680] This file, described above in System Identification (SID) File, is located in the current directory. This file contains a list of system ids and environment variables for all databases that need to be backed up. The files has a strict format that must be followed for the script to run in the cron.

[0681] Script File ($Script_File)

[0682] This file is described above in “SQL*Plus Script File.”

[0683] Log ($Log)

[0684] This file contains messages and errors generated from cold_backup. A common naming convention is cold.log. The log file is created in the current directory (see section 4.2 above) by cold_backups. The log file will be kept in an archived form, also in the current directory, for one previous backup and it will be named *.old where * represents the filename you designate as the log file.

[0685] User ($User)

[0686] This variable designates which user has export privileges.

[0687] Mail Program ($Mailer)

[0688] This variable is set to a command line mail program. The mail program is used to notify the Database Administrator of problems occurred during execution of the backup or to inform the Administrator of a successful backup.

[0689] File Mount Point ($Mount_point)

[0690] This variable is set to the directory structure mount point.

[0691] DBA ($DBA)

[0692] This variable is set to the Database Administrator that is responsible for getting email messages.

[0693] How to Execute

[0694] Manually

[0695] The cold_backups script can be run manually by having a user execute the script. Since the backup requires that the database be shutdown, inform all database users of the downtime. Expect up to fifteen minutes for the backup. In order to run the script manually go to the directory where the script is located. Check the permissions, and set if necessary. At the command line, type cold_backups. The script will run without user interaction. The script is complete when the prompt returns.

[0696] Crontab

[0697] It is possible to schedule the backup using the UNIX crontab. To create a new crontab or to edit an existing one, type crontab -e at the UNIX command line. To list the entries in the crontab, type crontab -l at the command line. Entries in the crontab file are lines of six fields separated by spaces or tabs. An asterisk (*) in fields one through five indicates all legal values. Values can be separated by commas (for a list of values) or hyphens (for inclusive range). The fields are as follows:

[0698] By using the crontab, it is possible to schedule daily, weekly, or monthly backups during non-peak hours. Since the backup requires that the database be shutdown, inform all database users of the expected downtime. Expect up to fifteen minutes for the backup. Check the permissions of cold_backups before the first backup and set if necessary.

[0699] The following is an entry of a crontab. The cold_backups script will be backed up at. 2:30am daily.

[0700] /files2/db/dev/backup1/cold backups>crontab-1

[0701] 30 2* * * /files2/db/vendor/dbse/admin/general/unix/cold_backups/cold_backups

[0702] If both fields are specified in an entry, they are cumulative. For example:

[0703] 0 0 1,15*1/files2/db/vendor/dbse/admin/general/unix/cold_backups/cold_backups

[0704] This crontab entry runs at midnight on the first and fifteenth of each month, as well as every Monday. To specify days in only one field, set the other field to asterisk (*). For example:

[0705] 0 0 * *1/files2/db/vendor/dbse/admin/general/unix/cold_backups/cold_backups

[0706] This crontab entry runs only on Mondays.

[0707] Database Export Backup

[0708] This section will describe the files needed to run export_backups. It will outline the recommended steps to configure export_backups (written in Perl) to run on a database. Finally, this section will discuss how to execute the script. The location of the export_backups script should be in admin/general/unix (following OFA standards).

[0709] The export_backups script performs a full database export on a database by using an export utility. This script is meant to run daily and the backup files are stored in a cycle that can be configured to suit the needs of the client. For an explanation of the backup cycle and naming convention, see the sections below entitled “Configuration of Backup Cycle” and “How to Execute.”

[0710] Required files/directories

[0711] The following list of files and directories need to be created before export_backups will run. These files are described bellow and common naming conventions are given. Also an OFA directory structure suggestion is given.

[0712] System Identification (SID) File

[0713] This file should contain a list of one or more system ids and the corresponding values of dbse home and dbse base. Every system id listed in this file will be backed up using the export utility. The values in this file are also used to correctly set the environment variables. The format of this file will be: SID,DBSE_HOME,DBSE_BASE. There are no spaces, only commas, separating the fields. Also, it is important that there are no blank lines in this file. A common naming convention for this file is export_sids. The file is best housed in the current directory (described below in “Current Directory”).

[0714] Day File

[0715] This file will contain the current day number of the backup cycle. The backup cycle is commonly four weeks in length but it can be set at any interval (see section five below on configuration of cycle variables). The day file will contain an integer between one and the maximum day number of the cycle (29 for a four-week cycle). It is important that there are no blank lines in this file. The user will need to create this file before the initial execution of the backup and after that the file will update itself. It is a good idea to have the day number correspond to the current weekday. For example, a one in the day file will correspond with Sunday and a four will correspond with Wednesday. A common naming convention is day_file.dat. This file is best housed in the current directory (described below in “Current Directory”).

[0716] Password Script

[0717] This script needs to be configured for the system. This script allows the user's password to be used within the script without hard-coding the password into it. A common naming convention is getpass. This file should be located in \admin\general\unix. NOTE: the password is not encrypted so it is important that an unauthorized user does not execute this script at the command line. Also, if the password scripts is used within another script it is important the password is not echoed to the screen.

[0718] Backup Directory

[0719] The backup directory will store the backup files. The naming convention for this directory is {SID}_exp where SID is the system id. The file is best housed in the current directory (described below in “Current Directory ”).

[0720] Configuration of Variables

[0721] Directory paths and file names are hard coded in the export_backups script. Therefore it is recommended to configure these variables to suit the file structure of the particular database the backup is to be performed on. The following are variables that need to be specified for the system in which the script is run on. These variables are grouped together at the beginning of the script. Look for the commented section entitled “Variable List” to locate the variables within the script.

[0722] Current Directory ($Current_Dir)

[0723] This variable is set to the directory location in which the backup directory (described above in “Backup Directory”), log file (described below in “Log”), SID file (described above in “System Identification (SID) File”), and day file (described above in “Day File”) are kept. This directory can be placed anywhere.

[0724] Day File ($Day_File)

[0725] This file is described above in “Day File”.

[0726] SID File ($SID_File)

[0727] This file is described above in “System Identification (SID) File.”

[0728] Log ($Export_Log)

[0729] This file contains messages and errors generated from export_backup. A common naming convention is export.log. During execution, the log file is opened and the entries will be appended to the existing file. If the file does not exist, the script will create a new log file with the name you designate here. Old log files will be kept in an archived form, also in the current directory, and will contain the logged entries for an entire backup cycle. The archived file will be named *.yyyymmmdd (as in 2001Dec31) where * represents the filename you designate as the log file. The archive will occur if the day file contains the last day of the cycle.

[0730] User ($Exp_User)

[0731] This variable designates which user has export privileges.

[0732] Mail Program ($Mailer)

[0733] This variable is set to a command line mail program. The mail program is used to notify the Database Administrator of problems occurred during execution of the backup or to inform the Administrator of a successful backup.

[0734] DBA ($DBA)

[0735] This variable is set to the Database Administrator that is responsible for getting email messages.

[0736] Configuration of Backup Cycle

[0737] The backup cycle can be changed to suit the particular requirements for the database. There are six cycle variables in the script that need to be configured if the cycle is changed. They are located in the top portion of the script in a section entitled “Cycle Variables” immediately following the “Variable List” described above in section four. The values of these variables are used to name the backup file and to determine the schedule for when the backup files rollover.

[0738] Maximum Day Files ($maxday)

[0739] This variable should be set to the maximum number of daily backup files that are kept minus one. For example, if seven daily backups are kept, this value should be set to six. The naming scheme for the daily backup files is such that day00 is the current day's backup and day06 is six days ago.

[0740] Week Ending Day ($week_start)

[0741] This variable is a string and should be set to the three letter abbreviation of the week day name in which you want the weekly backup files to rollover. For example, if you want the week backup files to roll over on Sundays you would set this variable to “Sun”.

[0742] Maximum Week Files ($maxweek)

[0743] This variable should be set to the maximum number of weekly backup files that are kept minus one. On the week ending date, the weekly backup files will be rolled back and day07 will become week01. For example, if you want to keep four weekly backup files, this variable should be set to three.

[0744] Maximum Cycle Days ($maxcycledays)

[0745] This variable should be set to the total number of days in the backup cycle plus one. The value of this variable will be the largest possible value that is in the day file (see section 3.2 above). For a four-week cycle, the maximum cycle days variable should be set to twenty-nine (4 weeks*7 days per week+1 day=29 cycle days). A value of fifty-seven would represent an eight week cycle (8*7+1=57). When the value in the day file is the same as the maximum cycle days variable the cycle backup will occur.

[0746] Cycle Increment ($inc_value)

[0747] Weekly backups will be kept in longer cycle increments for long term storage. The value of this variable should be set to the increment value. This variable comes into effect when rolling back the week files (described in section 5.3). For example, if you want to keep backups in four-week intervals (starting at the last weekly backup) you would set this variable to four.

[0748] Maximum Cycle Files ($maxcycle)

[0749] This variable should be set to the maximum number of backup files that are kept minus the cycle increment value. For example, if you want to keep backup files for fifty-two weeks (one year) and your increment value is four, the value of this variable should be forty-eight. If the day in the day file is equal to the maximum cycle days, the weekly backup files will be rolled back in increments designated by the increment cycle variable. For example, week04 would become week12 if the increment value were eight.

[0750] How to Execute

[0751] Manually

[0752] The export_backups script can be run manually by having a user execute the script. Since the backup requires that the database be shutdown, inform all database users of the downtime. Expect up to fifteen minutes for the backup. In order to run the script manually go to the directory where the script is located. Check the permissions, and set if necessary. At the command line, type export_backups. The script will run without user interaction. The script is complete when the prompt returns.

[0753] Crontab

[0754] It is possible to schedule the backup using the UNIX crontab. To create a new crontab or to edit an existing one, type crontab -e at the UNIX command line. To list the entries in the crontab, type crontab -l at the command line. Entries in the crontab file are lines of six fields separated by spaces or tabs. An asterisk (*) in fields one through five indicates all legal values. Values can be separated by commas (for a list of values) or hyphens (for inclusive range). The fields are as follows:

[0755] By using the crontab, it is possible to schedule daily, weekly, or monthly backups during non-peak hours. Since the backup requires that the database be shutdown, inform all database users of the expected downtime. Expect up to fifteen minutes for the backup. Check the permissions of export_backups before the first backup and set if necessary.

[0756] Data Loading Script

[0757] The script data_loader is used to load comma delimited data from a text file into a Database by using SQL*Loader. The script can create a control file for this process if one is needed. This script can be run from the cron to load data into many tables, or it can be run from the command line on a single table. It is also possible to do a data re-load using data_loader. The script performs error checking and reports via email to a specified administrator of success or failure. The script may be written in Perl.

[0758] Configuration

[0759] Environment Variables

[0760] Environment variables relevant to the Database need to be set. Specifically, the following environment variables need to be set: DBSE_SID, DBSE_HOME, DBSE_BASE, HOME, and PATH (to include the location of the dbse bin directory and the directory that holds the scripts used by this procedure). To configure these variables, look for the section in the code entitled setting environment variables. Set the values of $SID, $Home, and $Base. Verify that the path is correct when setting the PATH environment variable.

[0761] Directory Structure

[0762] A directory structure should be set up to house the different types of files required and produced by data_loader. The six types of files required include data files (*.dat), control files (*.ctl), log files (*.log), bad files (*.bad), data definition files (*.ddl), and archived files (files from the previous five categories).

[0763] File Names

[0764] The files used/created by the data_loader script should have a standardized format. The log files (.log) and bad files (.bad) are named with a date stamp to make the files unique for archiving purposes. The current format of the date stamp is ddMonYYYY. The value of $Date_stamp should be changed to suit the frequency of the data loading. The naming convention should be table_name.date_stamp.extension or in the case of the log file generated by the data_loader script data_loader.date_stamp.log. The data files (.dat) should be named table_name.dat. However, after loading is complete all data files are copied to the archive directory and renamed with a date stamp as in the manner described above. The control files (.ctl) will be named table_name.ctl and will never have a date stamp because they are not archived. The ddl files should be named index_name.ddl.

[0765] SQL Scripts and Stored Procedures

[0766] This script uses a variety of SQL scripts and stored procedures. The scripts should be located in their own directory (following the OFA directory structure). Set $SQL_dir to this directory location. In order for these scripts to function properly, the table owner must have the ability to select from any table (grant select any table table_owner). The SQL scripts and stored procedures used by data_loader are as follows:

[0767] Input and Output Files

[0768] Required Files

[0769] table_list (file containing a list of tables to load—used if no table is indicated at run time)

[0770] table_name.dat (comma delimitated file containing data to load into table_name)

[0771] index_name.ddl (used to create indexes that were dropped)

[0772] table_name.date_stamp.dat (copy of table_name.dat after load for archiving purposes)

[0773] Files Generated

[0774] data_loader.date_stamp.log (log file generated by data_loader)

[0775] table_name.idx (generated by the SQL script get_index, it is deleted at the end of the script—see section 0)

[0776] table_name.ctl (file is generated by SQL script create_ctl if a ‘-c’ is indicated at run time—see section 0)

[0777] table_name.date_stamp.log (log file generated by SQL*Loader—see section 0 for an explanation of the date stamp)

[0778] table_name.date_stamp.bad (bad file generated by SQL*Loader—see section 0 for an explanation of the date stamp)

[0779] table_name.dirload (file generated by SQL script get_direct_load, it is deleted if the files has zero size—see section 0 for an explanation)

[0780] Messaging

[0781] The data_loader script will send email to an administrator to report success or failure of the data loading process. Set $Mailer to the text string that will execute the mailer in command line mode. Set $DBA to the email address of the administrator.

[0782] Users

[0783] The data_loader script will need to log on to SQL*Plus and SQL*Loader a number of times for a variety of purposes. A variable name should be set for each schema name that will be utilized. Do not hard-code the schema password in the script. Instead use getpass.

[0784] Options with SQL*Loader

[0785] The following options are used with SQL*Loader:

[0786] control=$Control_file (see section 0)

[0787] log=$Log_file (see section 0)

[0788] bad=$Bad_file (see section 0)

[0789] skip=$Skip_number (default is zero, only changes if doing reload, see section 0)

[0790] errors=100

[0791] direct=TRUE

[0792] silent=ALL

[0793] Options Executing data_loader

[0794] data_loader

[0795] Get tables to be loaded from file (table_list)

[0796] Do not create a control files

[0797] Skip zero records while loading

[0798] data_loader-c schema_name

[0799] Get tables to be loaded from file (table_list)

[0800] Create control files for all tables

[0801] schema_name is the owner of the tables

[0802] Skip zero records while loading

[0803] data_loader -t table_name

[0804] Table to be loaded is table_name

[0805] Do not create control file

[0806] Skip zero records while loading

[0807] data_loader -r table_name skip_number

[0808] Table to be loaded is table_name

[0809] Do not create control file

[0810] Skip skip_number records while loading

[0811] Procedure

[0812] The following is the procedure the data_loader script follows to load data into a database.

[0813] Scripts

[0814] The following is the scripts reference above are used by data_loader. The bolded lines should be configured to the particular system being used.

[0815] Data Loading Parameter Reporting

[0816] FIG. 13 illustrates an exemplary report indicating required table space allotments in a database. FIG. 14 depicts an exemplary report which lists statistics relating to the data in the database. FIG. 15 is an exemplary report indicating times to load various amounts of data. See the section entitled “REPORTING” below for more information about creating and using such reports.

[0817] Data Loading Archive Cleaner

[0818] The script clean_archives is used to delete files from the archive directory used by the data loading script data_loader. The script can use the Perl Module DataManip to compute the date stamp of the files that are to be deleted. This module can be obtained from the Perl web site (http://www.perl.com/pace/pub). The files put in the archive directory by the data loading script data_loader will have a date stamp in the file name. This script will compute a date x days ago. It will then delete all the files in the archive directory that match that date. Depending on the frequency of data loading, the date stamp may include a time stamp as well. It may be more feasible to delete the archived files that match the day and not the time.

[0819] Configuration

[0820] Variables

[0821] $Archive_dir (this variable will represent the location where the archive files are located)

[0822] $Days (this variable will represent the number of days ago to compute, default is seven)

[0823] Executing clean_archives

[0824] clean_archives [days]

[0825] If a number days is a parameter, it will computer days number of days ago and delete those files

[0826] If no date is passed, the default of seven days is used

[0827] Procedure

[0828] The following is the procedure the clean_archives script follows to remove files from the archive directory:

[0829] Purge Records Script

[0830] The script purge_records is used to delete records from a Database. The script runs a PL/SQL script that deletes records from tables after a certain length of time. This script can be run from the cron or from the command line. The script performs error checking and reports via email to a specified administrator of success or failure. This script may be written in Perl.

[0831] Configuration

[0832] Environment Variables

[0833] Environment variables relevant to the Database need to be set. Specifically, the following environment variables need to be set: DBSE_SID, DBSE_HOME, DBSE_BASE, HOME, and PATH (to include the location of the dbse bin directory and the directory that holds the scripts used by this procedure). To configure these variables, look for the section in the code entitled setting environment variables. Set the values of $SID, $Home, and $Base. Verify that the path is correct when setting the PATH environment variable.

[0834] Directory Structure

[0835] A directory structure should be set up to house the files generated by purge_records. See section 0 for a list and description of these files.

[0836] File Names

[0837] The files used/created by the purge_records script should have a standardized naming format. The log file generated by the purge_records script will be named purge.log. This file will hold a months worth of log entries. At the first day of the month, it will be renamed purge.log.date_stamp. The current format of the $Date_stamp is MonYYYY, however $Date_stamp can be changed if more frequent archiving of the log file is necessary.

[0838] The file generated by the SQL Script is called purge.sql.log. This file is the spooled output of the SQL Script. It will be checked for errors/exceptions. If none are found, it is deleted. If there are errors found, it is renamed purge.sql.log.date_stamp with the date stamp format as described above.

[0839] SQL Script

[0840] This script uses a SQL script called purge_records. The scripts should be located in its own directory (following the OFA directory structure). Set $SQL_dir to this directory location. The SQL script used by purge_records is as follows:

[0841] Output Files

[0842] Files Generated

[0843] purge.sql.log (log file generated by SQL script purge_records)

[0844] purge.log (log files generated by this script)

[0845] Messaging

[0846] The purge_records script will send email to an administrator to report success or failure of the purging process. Set $Mailer to the text string that will execute the mailer in command line mode. Set $DBA to the email address of the administrator.

[0847] Users

[0848] The purge_records script will need to log on to SQL*Plus to execute the SQL script purge_records. A variable name should be set to the schema that owns the tables that are going to be purged. Do not hard-code the schema password in the script. Instead use getpass.

[0849] Executing purge_records

[0850] The purge_records script does not accept any parameters. It can be run from the command line or from the cron. To execute the script, type purge_records.

[0851] Procedure

[0852] The following is the procedure the purge_records script follows to load data into a database.

[0853] Scripts

[0854] The following is the scripts reference above are used by purge_records. The bolded lines should be configured to the particular system you are using.

[0855] Database Table Data Extractor

[0856] The script table_extract is used to extract data from a Database table and write it to a flat file in a comma delimitated format. The purpose of this script is to extract the data from non-fact tables. Therefore, there not all tables can be extracted. The script can be configured to extract data from as many tables as required. The script may be written in Perl.

[0857] Configuration

[0858] Environment Variables

[0859] Environment variables relevant to the Dbse Database need to be set. Specifically, the following environment variables need to be set: DBSE_SID, DBSE_HOME, DBSE_BASE, HOME, and PATH (to include the location of the dbse bin directory and the directory that holds the scripts used by this procedure). To configure these variables, look for the section in the code entitled setting environment variables. Set the values of $SID, $Home, and $Base. Verify that the path is correct when setting the PATH environment variable.

[0860] Users

[0861] The table_extract script will need to log on to SQL*Plus to execute the SQL script table_extract. A variable name should be set to the schema that owns the tables that are going to be extracted. Do not hard-code the schema password in the script. Instead use getpass (see below).

[0862] PL/SQL

[0863] For every table that is to be extracted, a corresponding PL/SQL select statement is required. Determine which columns should be extracted and what, if any, filters are applicable.

[0864] d. utput Files

[0865] Files Generated

[0866] table_name.dat (contains data returned from the select statement for table_name in a comma delimitated format)

[0867] Executing table_extract

[0868] table_extract table_name ouput_directory

[0869] Extract data from table_name

[0870] Put file table_name.dat into output_directory

[0871] Procedure

[0872] The following is the procedure the table_extract script follows to extract data from a database into a text file.

[0873] Scripts

[0874] The following is the script reference above this is used by purge_records. The bolded lines should be configured to the particular system you are using.

[0875] getpass (Born Shell)

[0876] FIG. 16 depicts an embodiment of the present invention which graphically conveys availability in a network with service assurance capabilities. In operation 1600, report parameters are selected relating to availability of monitored elements, services, and processes of a network. A database is polled in operation 1602 for data that matches the report parameters. A graph is generated in operation 1604 from the data that matches the report parameters. In operation 1606, the generated graph is displayed to graphically represent the monitored elements, services, and processes of the network.

[0877] In one aspect of the present invention, the step of selecting the report parameters further includes the steps of selecting at least one metric class parameter relating to the activity of the network, selecting a graph type parameter, and selecting at least one report criteria parameter relating to the activity of the network. The generated graph may be of the selected graph type parameter.

[0878] In another aspect of the present invention, a selectable list of metrics parameters, a selectable list of graph type parameters, and a selectable list of report criteria may be displayed. Further, the graph type parameter may be dependant upon the selected metric class parameter. The report criteria parameter may also be dependant upon the selected graph type parameter.

[0879] In one embodiment, the graph type parameter may be a line graph, a bar graph, a boxplot graph, and/or a spectrum graph. In addition, the graph may displayed via a browser.

[0880] More details follow.

[0881] IPSA Batch and Ad hoc Reporting

[0882] This section provides an overview of the IPSA reporting process. It sequencially covers the procedures for implementing both batch reporting and web-based ad hoc reporting. The following files and directories are used:

[0883] IPSA_StartSPSS.cmd Located anywhere, it is used to start the reporting process (see Configuration). Instantiates two SPSS processes (spssw.exe, spsswin.exe) and IPSA_SPPS.exe

[0884] <SABATCH> Batch queue file location, as specified in the IPSA_StartSPSS.cmd file (see Configuration).

[0885] IPSA_BatchQueue.txt Queue file that, if present, is passed to SPSS and contains batch report specifications. This file is deleted after being read by IPSA_SPSS.exe. See Adhoc.doc and graphs.doc for content explanations.

[0886] <SAADHOC> Adhoc queue file location, as specified in <SARPHME>\InputQueue\IPSA_Reporting_Config.txt (see Configuration).

[0887] IPSA_AdhocQueue.txt Queue file passed to SPSS that contains ad hoc report parameters. This file is created by the web interface (<WWW ROOT>\cgi-binadhoc.pl) and deleted after use by IPSA_SPSS.exe. See Adhoc.doc and graphs.doc for content explanations.

[0888] IPSA_AdHocQueue_Working_<instance>.txt

[0889] Adhoc working file with a unique IPSA_SPSS.exe instance number, <instance>, that is defined in IPSA_StartSPSS.cmd (see Configuration).

[0890] IPSA_ProcessTheBatchQueue.txt The presence of this file notifies IPSA_SPSS.exe to read <SABATCH>\IPSA_BatchQueue.txt and pass it to SPSS. This file is polled for every five seconds.

[0891] <SARPHME> The reporting home directory, as specified in the IPSA_StartSPSS.cmd file (see Configuration). All files needed to generate reports are located within this directory.

[0892] \InputQueue IPSA_SPSS.exe configuration and control files.

[0893] IPSA_Reporting_Config.txt

[0894] IPSA_SPSS.exe configuration file. Includes database location and login information, output directories and image format specification for the generated graphs (see Configuration).

[0895] IPSA_ControlQueue.txt Contains commands to be issued to IPSA_SPSS.exe during execution. Used for terminating the process.

[0896] Batch Request

[0897] Overview

[0898] To enable report generation, execute IPSA_StartSPSS.cmd. Both SPSS and a VB file-polling application are invoked in the form of IPSA_SPSS.exe, sppssw.exe, and spsswin.exe. These are processes that can be monitored using Window NT Task Manager. With report criteria specified in <SABATCH>IPSA_BatchQueue.txt, create the file <SAADHOC>IPSA_ProcessTheBatchQueue.txt. The contents of this file are unimportant, as only its presence is polled for. IPSA_SPSS.exe reads the contents of IPSA_BatchQueue.txt and passes it to SPSS. Graphs are generated in <SAWEB>\Batch\Daily\ as well as an HTML file that points to the images.

[0899] Multiple graphs will be generated if, for example, 100 elements are reported on and the maximum number of elements per axis has been set to 10. In this case, 10 graphs would be generated and the HTML file would link to each of them. To terminate the application, alter <SARPHME>\InputQueue\IPSA_ControlQueue.txt as stated in the “Controlling IPSA_SPSS during execution” section of this document.

[0900] Installation

[0901] Run SetupVisualBasicRuntime\Setup.exe to install needed Visual Basic runtime components to your system. The installation directory that you choose must be specified in IPSA_StartSPSS.cmd if you plan to use the command file.

[0902] Configuration

[0903] IPSA_StartSPSS.cmd is often used to start the reporting process. This command file changes to the IPSA installation directory and executes IPSA_SPSS.exe, passing three modifyable parameters:

[0904] If this method is not used, the processes must be killed using Windows Task Manager (see 3.4). IPSA_ControlQueue.txt is deleted after use.

[0905] note: Currently the only command that IPSA_SPSS recognizes is “SAQUIT=yes” (see above).

[0906] note: This file currently resides in <SARPHME>\InputQueue\ but can be reconfigured to exist in the queue directory for multiple instances of IPSA_SPSS.exe.

[0907] Output

[0908] A table of contents for the generated graphs is created in <SAWEB>\Batch\Daily\<date>_INFO, as well as the graph image files. This table of contents is viewable in a web browser.

[0909] <SARPHME>\Logs\ will contain a log file named IPSA_VB_SPSS.log if any errors are encountered.

[0910] Updating the Setup Program

[0911] From the Visual Basic IDE, open the IPSA_SPSS.VBP project file. Make any needed code changes, then create IPSA_SPSS.EXE from the File menu. Close the IDE. From the Visual Basic program group, start the Application Setup Wizard. Open the IPSA_VB_SPSS.SWT template file and follow the prompts to create the setup program, answering “no” to all questions related to “remote automation components”. When prompted, choose a destination output directory and create the setup files.

[0912] Once the setup program has been created, edit the SETUP.LST file in the destination output directory that you chose. Towards the end of the text, change all solitary occurrences of “SPSS” to “IPSA” (see below). Save and close the file when completed.

[0913] File9=1,,IPSA_SPSS.ex_,IPSA_SPSS.exe,$(AppPath),,,9/29/1999 16:14:09,153088, 1.0.0.0,“ ”,“IPSA”,“$(AppPath)\IPSA_SPSS.exe”

[0914] Ad hoc Request

[0915] Overview

[0916] The ad hoc reporting works in a manner practically identical to the batch reporting. A queue file is created with report parameters contained within it and IPSA_SPSS.exe polls for its presence. Once found, the report parameters are passed to SPSS, where the graphs are created. The only real difference is that the queue file is not created by hand, it is generated from a web-based interface. The presence of the EPSA_AdhocQueue.txt file is the trigger for the report generation. This is analogous to the IPSA_ProcessTheBatchFile.txt file from batch reporting.

[0917] Requirements

[0918] HTML 3.2 compliant web browser (e.g. Netscape Navigator 3.0 or higher, MS Internet Explorer 4.0 or higher).

[0919] adhoc.pl file located in the cgi-bin directory of a web server

[0920] adhoc.setup.txt file located in the same directory as adhoc.pl (above)

[0921] Navigation

[0922] From the main Ad hoc screen 1700 located at http://<web_server>/cgi-bin/adhoc.pl, choose a metric class from the selection list and click Next 1702 (see FIG. 17A). If multiple graph types 1710 are available for the chosen metric, they are displayed next (see FIG. 17). After choosing a graph type, enter report criteria into the form (see FIG. 18). Exemplary fields include Title 1800, Element 1802, Location, etc. Specify multiple elements 1804 or locations 1806 by either typing their name in the entry field or selecting them from the drop-down list and clicking “Add”. Acceptable wildcards are “*” for “all” and “?” for “zero or one”. Choose multiple metrics by holding the CTRL key down while selecting each desired metric.

[0923] Click on Submit to create or update <SAADHOC>\IPSA_AdhocQueue.txt. IPSA_SPSS.exe reads its contents and pass the parameters to SPSS. The generated graphs are created in <SAWEB>\Adhoc\<date>_INFO and returned to the user via the browser. Upon graph generation, IPSA_AdhocQueue.txt is deleted.

[0924] Reporting Requirements Phase 2

[0925] The tables shown in FIGS. 19-22 detail the Batch Reports recommended, the eight generic report types, and the Adhoc requirements. The remainder of this section references these matrices several times. In particular, FIG. 19 illustrates exemplary batch reporting requirements. FIG. 20 lists some of the generic report types. FIG. 21 shows exemplary ad hoc reporting requirements. FIG. 22 illustrates sample metric information.

[0926] FIGS. 19-22 provide historical record of collected performance data and network events. Exception reporting is limited to views of events that occurred in real-time and does not include finding exceptions in the historical data by analyzing past data.

[0927] Batch Reporting

[0928] Daily batch report processing will be scheduled to occur at 1:00 am using Windows NT WinAT to execute SPSS reporting scripts.

[0929] Daily batch processing will include both performance and event reporting operations.

[0930] Examples of the eight generic report types referenced in this document and in FIGS. 19-22 can be found in FIGS. 23-30.

[0931] Daily performance reporting processing tasks

[0932] Import all ECM and Patroller comma-separated-value files into DBSE using SQL Loader. The data files will be moved to the data repository (i.e. data_feeds directory) by either the Patroller History Propagator or the Solaris cron facility (for ECM files).

[0933] Generate and publish (save) the 34 html-based report files listed in the matrix shown in FIGS. 19-22. The reports will be published to the documents directory of the web server.

[0934] Calculate daily roll-up statistics for each different metric collected and store the rolled-up statistics.

[0935] Delete expired daily detail data (metric records older than 40 days months).

[0936] Delete expired rolled-up data (rolled-up records older than 13 months).

[0937] Daily event reporting processing tasks

[0938] Analyze all availability-type events. These events include any event specified as an event signifying an outage. An event will be received when an object goes down and comes back up. These event pairs must be located, and an outage duration calculated.

[0939] Using the result of the above analysis, record an event for each day of the outage with an accurate daily outage duration.

[0940] Generate and publish the 4 exception reports listed in FIGS. 19-22.

[0941] Generate and publish the Network Availability, Process Availability and Service Availability reports listed in FIGS. 19-22.

[0942] Delete expired events data (event records older than 13 months).

[0943] Build and publish a daily web page with links to the 6 html event reports.

[0944] Other daily processing tasks (applies to both event and performance data)

[0945] Build and publish a daily web page with links to the 34 performance reports, the 4 exception reports, and the 2 availability reports. This page, and all batch reports must be available by 6 am the next day.

[0946] Delete expired html report files (older than 7 days)

[0947] Ad-Hoc Reporting

[0948] A web-based ad-hoc capability is required to produce reports of the same eight generic report types as the batch reports.

[0949] The adhoc utility should present a menu hierarchy as shown in the Adhoc Reports table of FIG. 21. In this table, the expressions <element name>, <element location> and <instance> can be input by the user in the following forms:

[0950] A single name, location, or instance (i.e. “nsmmrt03”)

[0951] A list of names, locations, or instances (i.e. “nsmmrt03,nsmmrt04”)

[0952] A variation of either a single name or list of names using * as a multi-character wildcard.

[0953] A variation of either a single name or list of names using ? as a single-character wildcard.

[0954] Once the online menu/form is completed by the user, a “Submit” button should execute a database query with the selected choices. The “Submit” button should also validate any data that is entered if applicable, for proper format (not for valid content, however).

[0955] The query should be able access detail and rolled-up data as recent as midnight the previous day. The previous day's detail and rolled-up data should be available for adhoc queries after 6 am the next day.

[0956] FIGS. 23-30 show simple examples of each of the eight recommended report types.

[0957] Graph Explanations and Requirements

[0958] This section is an overview of what the graphs, such as those found in FIGS. 23-30, are and what they do. There will be some tips as to how to change certain properties if needed, how to run the graphs from the script, and other useful information.

[0959] Graphs

[0960] Running graphs from the script

[0961] To run the graph from the script the script (macro) open and the script that passes in the parameters. The pairs that go together are:

[0962] !xygrph.sps & callxy.sps: xy-line graphs for daily details

[0963] !bargrph.sps & callbar.sps: bar graphs for daily availability

[0964] !bxgrph.sps & callbx.sps: boxplots for daily comparisons and monthly trends

[0965] !spect.sps & callsp.sps: spectrum graphs for event exceptions and daily availability (high level and detail)

[0966] To run these scripts (macros), first you need to have the macro window open (the file with the !name) and go under the menu bar Run>All. This will run a define on the macro. After the processor is done running the define, switch over to the call file (i.e. callxy.sps) and select only the area that has the parameters. (There are little headers in this file that describe what each parameter set will accomplish when sent to the macro) Then under the menu bar Run>Selection. This will then pass the parameters to the macro and produce the graph in an output window.

[0967] Exporting graphs manually from the output window

[0968] To export a graph using what is in the output window, first click on the graph to select the graph area. Go under the menu File>Export which will bring up a dialog box. Select in the drop down box if you wish to export charts only, the document as a whole, or the document (no charts). If you are just exporting a JPEG, charts only would be a good selection. If you wish to export a Windows Bitmap (BMP) then select the document as a whole. This will export the HTML file and the BMP. (It is easier to view a BMP in a HTML file because the BMP file will launch a paint program just to view it) Then after deciding on what you are going to export, click on the options button next to the drop down box and here you can make selections as to size, resolution, etc. Those optimal settings will be detailed later for each graph. Click OK to get back to the main dialog box. Next set the path for the exported chart by clicking on Browse. The path to the web server is O:\ipsa\product development\reporting\Web\WWWRoot.

[0969] Select your path, click OK, and then export the document. It should then be able to be viewed on twmmnt02.

[0970] Chart Properties

[0971] To change the chart properties (on IGRAPHs) and set it to a CHARTLOOK, double click on the graph in the output viewer. This will activate it into interactive mode. Go up to Format>Chart Properties in the menu bar and make necessary changes in the tabbed dialog box. Some changes include: Text size (the title and subtitle text size seems not to take in the CHARTLOOK option when set here—FYI), Font, Symbol attributes (shape, color, fill, etc), Axis attributes (line width, tick marks), colors (for legends, shapes, etc), and other features that need to be changed. After changing what you want, click Apply to view changes and OK to exit the dialog box. Then go to the menu bar Format>Chartlook and click on Save As with the “as displayed” feature highlighted in the box to the left. Save the chartlook to a location that can be called from the macro. This chartlook should then set the settings for the next graphs run with the /CHARTLOOK=‘file’ subcommand in the IGRAPH syntax.

[0972] XY-Line Graph (See FIGS. 23-24)

[0973] What it shows

[0974] The xy-line graph reports the daily details for CPU Utilization (for routers, Unix, and NT),Interface Utilization and Response Time for routers, Memory Utilization (for Unix and NT), Network I/O (for Unix and NT), Memory Utilization (Unix and NT), and eventually Reponse time for FTP, SMTP, NNTP, and HTTP.

[0975] Parameters

[0976] In the parameter call:

[0977] The possible variables to pass in are as follows:

[0978] ELMNM (the element name) any elmnt_nm located in the Network_Elmnt_Tb. With our test data we have these elements available: nsmmrt03, gfinmnt03, nsmmws16, nsmmrt04, nsmmrt05, nsmmrt06, and nsmmrt07.

[0979] ELMTY (the element type) any elmnt_type_cd located in the Network_Elmnt_Tb. With our test data we have these types available: RT (router), UX (Unix) and NT (NT).

[0980] ELMLOC (the element location) any elmnt_city_nm located in the Elmnt_Loc_Tb.

[0981] METRCNM (the metric name) any metric_nm located in the Perf_Metric_Tb. With our test data we have these metrics available: CpuBusy_Percent, InterfaceUtilization_Percent, InterfaceUtilization_BPS, CpuUtilization_Percent, MemoryFree_Pages, NetworkTraffic_PPS, DiskBusy_Percent, CpuProcessorTime_Percent, MemoryFree_Mbytes, and DiskTime_Percent. Other metric names include FtpResponseTime_Seconds, SmtpResponseTime_Seconds, NntpResponseTime_Seconds, and HttpResponseTime_Seconds.

[0982] STRTYR (the year) any perf_yr located in the Perf_Metric_Time_Tb.

[0983] STRTMON (the month) any perf_mon located in the Perf_Metric_Time_Tb. With our test data we usually use 06 for the month of June. NOTE: Begin each one digit month with a zero!

[0984] STRTDAY (the day) any perf_day located in the Perf_Metric_Time_Tb. With our test data we usually use 30 for the day. NOTE: Begin each one digit day with a zero!

[0985] NUMDAYS (the number of days the data will include) any number valid (note that most graphs will be cluttered if too many days are spanned with the exception of a monthly detail graph set up specifically to handle that number of cases). For this DAILY graph, use the number 1.

[0986] SARPHME (path) This sets up the path to where certain files (if needed) can be saved or referenced from.

[0987] SADSN (DSN name) This specifies the DSN name used in the GET.

[0988] SAUID (User ID name) This specifies the User ID name used in the GET.

[0989] SAPWD (Password) This specifies the password used in the GET.

[0990] SASRVER (Server Name) This specifies the server used in the GET.

[0991] Manual Settings

[0992] For optimal output for the xy-line graph these settings should be made: (in the chart options in Export dialog box)

[0993] Resolution: 200×200

[0994] Size: 6×6 (or between 4×4 to 6×6)

[0995] Format: YCC Color

[0996] Quality: 100%

[0997] Color Translation: Normal

[0998] Operation: Progressive

[0999] Chartlook

[1000] This graph calls the chartlook line.clo found in the O:\ipsa\product development\reporting\spss\templates directory.

[1001] Bar Graph (See FIG. 27.)

[1002] What it shows

[1003] The bar graph reports the daily availability for Network, Services, and Processes.

[1004] It calculates the percentage of the availability for all of the elements, representing them as bars with the percentage displayed within the bars.

[1005] Parameters

[1006] In the parameter call:

[1007] The possible variables to pass in are the same as the xy-line graph except for:

[1008] EVENT (the event) any valid event_string_txt that is located in the Events_Fact_Tb.

[1009] Manual Settings

[1010] For optimal output for the bar graph these settings should be made: (in the chart options in Export dialog box)

[1011] Resolution: 200×200

[1012] Size: 3×3

[1013] Format: YCC Color

[1014] Quality: 100%

[1015] Color Translation: Normal

[1016] Operation: Progressive

[1017] Chartlook

[1018] This graph calls the chartlook bar.clo found in the O:\ipsa\product development\reporting\spss\templates directory.

[1019] Boxplot Graph (See FIGS. 25-26.)

[1020] What it shows

[1021] The boxplot graph reports daily comparisons and monthly trends.

[1022] Parameters

[1023] In the parameter call:

[1024] The possible variables to pass in are the same as the xy-line graph except for:

[1025] ELMNM (element name) any valid elmnt_nm from the Network_Elmnt_Tb. It is given one or more names in the daily comparison and only one name for the monthly trend.

[1026] Manual Settings

[1027] For optimal output for the bar graph these settings should be made: (in the chart options in Export dialog box)

[1028] Resolution: 200×200

[1029] Size: 3×3

[1030] Format: YCC Color

[1031] Quality: 100%

[1032] Color Translation: Normal

[1033] Operation: Progressive

[1034] ***NOTE: The monthly boxplot can be exported with these settings, but will NOT turn out very well. This type of graph will not have readable fonts until (hopefully) the next version of SPSS.

[1035] Chartlook

[1036] This graph calls the chartlook box.clo found in the O:\ipsa\product development\reporting\spss\templates directory.

[1037] Exception Text Report (See FIG. 30)

[1038] Spectrum Graph (See FIGS. 28-29.)

[1039] What it shows

[1040] This can make three chart types: Daily exception spectrums (for routers, Unix, and NT), Daily Availability Spectrums (High Level overview) for ALL Network, Service, and Process events, and Daily Availability Spectrums (Low Level overview) for EACH event under Network, Service, and Process detailing the elements that the event occurred upon.

[1041] Parameters

[1042] In the parameter call:

[1043] The possible variables to pass in are the same as in the graphs detailed earlier, except for:

[1044] AVAIL (availability type) valid parameters include ‘Network’, ‘Service’, or ‘Process’. This selects ALL events under these specifications, not just a single event type.

[1045] Manual Settings

[1046] For optimal output for the spectrum graph these settings should be made: (in the chart options in Export dialog box)

[1047] Resolution: 200×200

[1048] Size: 4.5×4.5

[1049] Format: YCC Color

[1050] Quality: 100%

[1051] Color Translation: Normal

[1052] Operation: Progressive

[1053] Chartlook

[1054] The exception graph calls the chartlook exception.clo and the availability graphs call the chartlook avail.clo found in the O:\ipsa\product development\reporting\spss\templates directory.

[1055] Adhoc Web Demo

[1056] The Ad hoc web demo demonstrates an HTML-based front end to the SA reporting tool. It allows the user to submit ad hoc reporting criteria from a user-friendly interface. This data is picked up by SPSS and the generated graph is displayed in the browser.

[1057] Requirements:

[1058] HTML 3.2 compliant web browser (e.g. Netscape Navigator 3.0 or higher, MS Internet Explorer 4.0 or higher).

[1059] adhoc.pl file located in the cgi-bin directory of a web server

[1060] adhoc.setup.txt file located in the same directory as adhoc.pl (above)

[1061] <wwwroot>/BatchTest/ directory containing SPSS graphs

[1062] Overview:

[1063] From the main Ad hoc screen, a metric class is chosen and the Next button is clicked. If multiple graph types are available for the chosen metric, they are displayed to the user. After a graph type is chosen, the report criteria can be entered into the form that is displayed. Submitting the data will display a graph for the specified data.

[1064] Note: in this demo, only a minimal number of graphs exist, so only strict attention to detail will grant a valid report being displayed. If a report is requested that does not exist, the user will be told that no data points exist for the given criteria. Either use the “back” button to edit your criteria, or follow the hyperlink to create a new report query.

[1065] Bar Graph

[1066] Choose the Service Availability metric class

[1067] Title: <anything or nothing>

[1068] Element(s): gfmmnt03 nsmmrt03 nsmmrt04 nsmmrt05 nsmmrt06 nsmmrt07

[1069] Location: Minneapolis (default example)

[1070] Event: DNS Service Failed (default)

[1071] Press Submit

[1072] Box Plots

[1073] Daily Comparison Box Plot

[1074] Choose the Network Element Performance metric class

[1075] Choose Daily Comparison Boxplot

[1076] Title: <anything or nothing>

[1077] Elements: nsmmrt03 nsmmrt04 nsmmrt05

[1078] Metric(s): CPU Busy (%)

[1079] Location: Minneapolis (default)

[1080] Element Type: Router (default)

[1081] Press Submit

[1082] Monthly Trend Box Plot

[1083] Choose the Network Element Performance metric class

[1084] Choose Monthly Trend Boxplot

[1085] Title: <anything or nothing>

[1086] Elements: *

[1087] Metric(s): CPU Busy (%)

[1088] Location: Minneapolis (default)

[1089] Element Type: Router (default)

[1090] Press Submit

[1091] Exception Graphs

[1092] Daily Event Exceptions

[1093] Choose the Events metric class

[1094] Choose Daily event exceptions from the Occurrence and Availability menu

[1095] Title: <anything or nothing>

[1096] Location: Minneapolis (default)

[1097] Choose from any of the following three combinations:

[1098] Element(s): gfmmnt03

[1099] Element Type: NT

[1100] Element(s): nsmmrt03 nsmmrt04 nsmmrt05

[1101] Element Type: Router

[1102] Element(s): nsmmws16

[1103] Element Type: Unix

[1104] High Level Daily Event Exceptions

[1105] Choose the Events metric class

[1106] Choose High Level Daily event exceptions from the Occurrence and Availability menu

[1107] Title: <anything or nothing>

[1108] Location: Minneapolis (default)

[1109] Event Type: Network or Service

[1110] Choose the Events metric class

[1111] Choose Low Level Daily event exceptions from the Occurrence and Availability menu

[1112] Title: <anything or nothing>

[1113] Location: Minneapolis (default)

[1114] Event: DNS Service Failed or SMTP Service Failed

[1115] XY Line Graph

[1116] Choose the Network Element Performance metric class

[1117] Choose the Detail XY Line Graph report type

[1118] Title: <anything or nothing>

[1119] Element(s): nsmmrt03

[1120] Location: Minneapolis (default)

[1121] Metric(s): CPU Busy (%)

[1122] Element Type: Router (default)

[1123] Press Submit

[1124] IPSA_StartSPSS.cmd

[1125] Located anywhere, it is used to start the reporting process (see Configuration). Instantiates two SPSS processes (spssw.exe, spsswin.exe) and IPSA_SPPS.exe

[1126] <SABATCH>

[1127] Batch queue file location, as specified in the IPSA_StartSPSS.cmd file (see Configuration).

[1128] IPSA_BatchQueue.txt

[1129] Queue file that, if present, is passed to SPSS and contains batch report specifications. This file is deleted after being read by IPSA_SPSS.exe. See Adhoc.doc and graphs.doc for content explanations.

[1130] <SAADHOC>

[1131] Adhoc queue file location, as specified in <SARPHME>\InputQueue\IPSA_Reporting_Config.txt (see Configuration).

[1132] IPSA_AdhocQueue.txt

[1133] Queue file passed to SPSS that contains ad hoc report parameters. This file is created by the web interface (<WWW ROOT>\cgi-bin\adhoc.pl) and deleted after use by IPSA_SPSS.exe. See Adhoc.doc and graphs.doc for content explanations.

[1134] IPSA_AdHocQueue_Working_<instance>.txt

[1135] Adhoc working file with a unique IPSA_SPSS.exe instance number, <instance>, that is defined in IPSA_StartSPSS.cmd (see.Configuration).

[1136] IPSA_ProcessTheBatchQueue.txt

[1137] The presence of this file notifies IPSA_SPSS.exe to read <SABATCH>\IPSA_BatchQueue.txt and pass it to SPSS. This file is polled for every five seconds.

[1138] <SARPHME>

[1139] The reporting home directory, as specified in the IPSA_StartSPSS.cmd file (see Configuration). All files needed to generate reports are located within this directory.

[1140] \InputQueue

[1141] IPSA_SPSS.exe configuration and control files.

[1142] IPSA_Reporting_Config.txt IPSA_SPSS.exe configuration file. Includes database location and login information, output directories and image format specification for the generated graphs (see Configuration).

[1143] IPSA_ControlQueue.txt

[1144] Contains commands to be issued to IPSA_SPSS.exe during execution. Used for terminating the process.

[1145] adhoc.pl

[1146] Adhoc.pl is a CGI utility that builds HTML forms used for gathering ad hoc reporting information. This information is stored in a directory relative to $output_dir_root of the form YYYYMMDD_INFO in a text file defined by $output_file. This text file is opened, locked, and updated then closed and unlocked. A Visual Basic application feeds this queue file to SPSS to generate a report and creates an HTML file with links to the graph(s). The name of this HTML file is determined by appending the unique id generated from &unique_id onto the end of the report title and storing this in the text file. A link to this file is provided at process completion. Adhoc.pl may be written in Perl.

[1147] The report data that is created from this script includes

[1148] bar graph

[1149] trend box plot

[1150] comparison box plot

[1151] detail xy line graph

[1152] daily event exceptions

[1153] daily event exceptions (high level)

[1154] daily event exceptions (low level)

[1155] Configuration

[1156] $output_dir_root—absolute path (including trailing slash) to the directory that the script should publish the data in. Note that backslashes (\) must be escaped (e.g. $output_dir_root=“c:\\InetPub\\wwwroot\\”;).

[1157] $output_dir_from_web_root—relative path (including trailing slash) from web root of the directory where the reports will be published. Used for creating the link to the user when report data entry is completed (e.g. $output_dir_from_web_root=“/Adhoc/”;).

[1158] $output_file—the name of the file to be generated from the script that contains all of the SPSS report information.

[1159] Adding a new report type

[1160] In it's current state the script would require a modification to each of its primary subroutines to accommodate a new graph type. The changes are as follows:

[1161] The section of the main routine commented as “write data to file” would need to have a new elsif block that validated the form values and called a subroutine to print the values to the text file in a format similar to the others.

[1162] Add another elsif block to choose_metric that checks the metric_class form value and calls a subroutine to either generate the appropriate HTML form or display a report type selection page—both of which would need to be written.

[1163] Add another elsif block to choose_report that calls the subroutine to create the HTML form.

[1164] Modify print_metric_options if a new metric class is needed.

[1165] As noted above, create a subroutine to generate the HTML form to gather report data from the user.

[1166] Adhoc

[1167] Lists, enclosed by parentheses and space delimited, are supported for the ELMNM, ELMLOC, and the METRCNM parameters.

[1168] Additionally

[1169] Wild cards, the “%” character for matching zero to many characters, and the “_” character for matching a single character, are supported for the ELMNM and the ELMLOC parameters

[1170] # This is a comment; each request begins with a line that contains only the “@{“ characters

[1171] # and each request ends with a line that only contains the “}@” characters

[1172] # any line beginning with the “#” character is considered a comment line

[1173] ECM Internal Reporting

[1174] This section out lines the procedure for generating internal alarm and poll reports from the Event Correlator and Manager.

[1175] Assumptions:

[1176] ECM is installed on NT.

[1177] User has Administrator rights on server in question.

[1178] Procedure only works on NT versions of ECM

[1179] Basic Procedure

[1180] a. Turn on ECM client and log in to ECM server in question.

[1181] b. Once interface is enabled and client has fully logged into server, click on Admin and then Report List.

[1182] c. The Report List dialog will open.

[1183] d. Click on NC Alarm Definition Report and then click Run.

[1184] e. Once the report is generated click the print icon and the report will be generated at your default printer.

[1185] f. Close the NC Alarm Definition Report.

[1186] g. Go back to the ECM client and click on the NC Poll Report.

[1187] h. Next click Run.

[1188] i. Print this report and exit the system.

[1189] Analysis

[1190] This process generates line item reports of the user [re]defined alarms/polls in ECM. These are generated through a proprietary format of Seagate's Crystal Reports, and are possible due to the existence of the database that sits behind the ECM installation on NT systems. These reports can be modified externally through a copy of Crystal Reports, and can be added to through the ECM interface.

[1191] IIS (Internet Information Server) 3.0

[1192] Start Services

[1193] Open the control panel (Start>Settings>Control Panel)

[1194] Click on Services

[1195] Select “IIS Admin Service” and “World Wide Web Publishing Services” and click on the start button.

[1196] Set Root Directory

[1197] Create a folder to be your home directory. (i.e. We set one up called ‘WWWRoot’ in the path C:\Data\WWWRoot)

[1198] Open Microsoft Management Console (Start>Programs>Windows NT 4.0 Option Pack>Microsoft Internet Information Server>Internet Service Manager)

[1199] Open the Internet Information Server folder and then twmmnt02

[1200] Right click on Default Web Site and drag down to Properties

[1201] Go into the ‘Home Directory’ tab and change the ‘local path’ to the name of the root directory that you created

[1202] Settings

[1203] Open the Microsoft Management Console again

[1204] Right click on Default Web Site again and under Properties change these settings:

[1205] Web Site Tab-

[1206] Change description name as desired (Service Assurance Web Site).

[1207] Change IP address to your own (149.122.57.21—it also happens to be in the drop down box)

[1208] Check ‘enable logging’ and under properties change the log file directory (C:\data\iislogs)

[1209] Home Directory Tab-

[1210] Change local path if you didn't already when setting up the root directory (C:\data\wwwroot)

[1211] Check ‘directory browsing allowed’ (if your default document isn't directly in the root directory)

[1212] Documents Tab-

[1213] Check ‘enable default document’ and change it to ‘index.html’

[1214] Right click on Default FTP Web Site and under Properties change these settings:

[1215] Home Directory Tab-

[1216] Change local path to desired location (C:\data\ftproot)

[1217] FTP Site Tab-

[1218] Check ‘enable logging’ and under properties change the log file directory (C:\data\iislogs)

[1219] Change description name as desired (Service Assurance FTP Site).

[1220] Right click on Administration Web Site and under Properties change these settings:

[1221] Web Site Tab-

[1222] Check ‘enable logging’ and under properties change the log file directory (C:\data\iislogs)

[1223] Change description name as desired (Service Assurance Administration Web Site).

[1224] Add a ‘cgi-bin’ folder into the directory where your http pages are located

[1225] Go into the Microsoft Management Console and right click on the cgi-bin folder and go into Properties.

[1226] Under the Directory Tab change the permissions to ‘execute’.

[1227] SPSS Documentation

[1228] Set Up Instructions

[1229] Installing SPSS 8.0

[1230] Follow the setup instructions until you can decide what type of installation you would like. Choose Custom and select all options.

[1231] When you encounter the Personal Installation choice . . . choose it.

[1232] When prompted to install Adobe Acrobat 3.0, choose yes and follow the installation instructions. This will be helpful to view the online tutorials.

[1233] Installing ODBC 3.5 SDK

[1234] Go to the http://www.microsoft.com/data/odbc/download.htm website to download the ODBC 3.5 Software Development Kit (SDK) for Intel. Select ‘Download the ODBC 3.5 SDK for Intel now’ button. Save it to disk when prompted and follow instructions to download the application.

[1235] Go into Windows NT Explorer to find the file (ODBC35IN.exe) that you just saved to disk. Execute it. After done generating your files, find the setup.exe icon. Click on setup.exe to finish the installation process. Choose all options for custom installation choices.

[1236] Downloading SPSS 8.0.1 Update Patch

[1237] Open http://www.spss.com/tech/patches/SP-061198.htm.

[1238] Select 801us.exe (US version).

[1239] Save it to disk.

[1240] Find the downloaded files on your disk and open 801us.exe, click Yes, and then click on Upgrade SPSS 8.0.

[1241] Follow the upgrade instructions.

[1242] Associating a DSN Name With an ODBC Source

[1243] Open the 32-bit ODBC Administrator.

[1244] Programs>Odbc>32-bit ODBC Administrator

[1245] Add a new user data source under the user DSN tab by clicking Add.

[1246] Select a driver for which you want to set up a data source for.

[1247] (In this case—Microsoft ODBC for Dbse)

[1248] Click Finish.

[1249] Enter the Data Source Name. (make up any name)

[1250] Enter the Description. (can be same as Data Source Name)

[1251] Enter your User name.

[1252] Enter the Server. (In this case—IPSA01)

[1253] Once this information is entered you will be brought back to the ODBC Data Source Administrator. Click OK.

[1254] Adding a Database Alias

[1255] Open the SQL Net Easy Configuration.

[1256] Programs>Dbse for Windows NT>SQL Net Easy Configuration

[1257] Click on Add Database Alias and then OK.

[1258] Enter the alias name (In this example: IPSA01)

[1259] Choose the network protocol to be used when you connect to a remote database

[1260] (In this case it is TCP/IP) then click OK.

[1261] Enter the TCP/IP host name (ucmmdb02) and the database instance of the particular database you want to access. (In this example: IPSA01)

[1262] Confirm that you want to add this Database Alias by Clicking Yes.

[1263] This will bring you back to the SQL Net Easy Configuration where you can just click Cancel to exit.

[1264] Checking The Alias Setup

[1265] Find your dbse home (Dbsnt) and open tnsnames.ora through this path:

[1266] C:/Dbsnt/Network/Admin/tnsnames.ora. This is a SQL Net Configuration file which will have the names of the aliases that are set up. The one you just added will most likely be found at the end of the file.

[1267] Getting Started in SPSS

[1268] SPSS Database Capture Wizard

[1269] In SPSS Data Editor go to Edit>Database Capture>New Query to open the ODBC Wizard.

[1270] Choose data source to retrieve data and click Next.

[1271] Drag table onto right box to see fields and click Next. (Can also select a subset of fields here)

[1272] Limit Retrieved Cases page, click Next. (Can select a subset of cases based on conditional expressions in this dialog box)

[1273] Define Variables page, click Next. (Can specify more user friendly variable names here)

[1274] Results page. Change column names into SPSS Syntax to desired names. The names to use are located by opening SQL+ and on the command line typing the table name. i.e.>describe spss_test

[1275] Click on “paste it into syntax editor” button.

[1276] Save query to file with a .spq extension and click Finish.

[1277] This should bring you to the syntax editor which should look something like this:

[1278] (Some syntax tips: In the select area, there is a comma and two spaces separating names. The ‘0’ in “T0” is a zero, not the letter ‘O’. In the variable labels, the short name (8 chars) is listed first with the long name in quotation marks, all separated by one space. The final name ends with one space and a period.)

[1279] Save the syntax file. It will have a .SPS extension.

[1280] Go to Run>All to execute the script. All warnings and errors will pop up in an output window for you to view. Otherwise the table will be shown in the SPSS Data Editor window with the correct column names and data.

[1281] Features of SPSS

[1282] Data Editor:

[1283] Displays contents of the working data file

[1284] Each row is a single case or observation

[1285] Each column is a single variable

[1286] Can enter and edit data in this editor

[1287] Unable to perform calculations or enter formulas here

[1288] Viewer Window:

[1289] Displays tables, statistics and charts

[1290] Opens automatically when you run a command that produces output

[1291] The left pane contains the outline view

[1292] The right pane contains statistical tables, charts and text outputs

[1293] Click on any item in the outline to go directly to the corresponding table or chart

[1294] The open book icon indicates the item is currently visible in the right pane. Double click on the icon to hide the information (closed book icon will appear)

[1295] Change chart positions by highlighting the information and dragging it to desired location in the outline

[1296] Tool Bars:

[1297] Both toolbars on the data editor and viewer window can be used

[1298] Can be moved by clicking on the tool bar (not on a button) and dragging it

[1299] Dialog Boxes:

[1300] Used to display information on variables

[1301] Click left mouse button on variable name, click right mouse button anywhere on the list and select ‘Variable Information’ from the pop-up menu

[1302] Icons next to variable names describe the variable type: Numeric variables (# icon), Short string variables—8 characters or less (‘A’ icon with a (<) less than symbol), and Long string variables—greater than 8 characters (‘A’ icon with a (>) greater than symbol)

[1303] Interactive Chart Dialog Boxes:

[1304] Three variable types:

[1305] 1. Categorical (red, blue, and yellow icon)

[1306] 2. Scale (yellow ruler icon)

[1307] 3. Built-in (white ruler with a yellow circle)

[1308] Entering and Manipulating Data

[1309] Numeric:

[1310] Select cell and enter numeric number. It will then appear in the cell editor.

[1311] Press Enter to record the data.

[1312] If the variable hasn't been named, a unique variable name will be assigned to it.

[1313] Non-numeric:

[1314] Define the variable by double-clicking on the variable name or top of the column. This can also be done by selecting Data>Define Variable in the menu bar.

[1315] Click on Type in the dialog box.

[1316] Select the data type, click Continue, and then click OK.

[1317] Defining Data:

[1318] You can define descriptive values for data values to be used in statistical reports and charts, i.e. one can associate the number 1 with ‘male’ and number 2 with ‘female’.

[1319] Open Data>Define Variable and click on Labels in the dialog box.

[1320] Enter the data value and label.

[1321] Click Add and then click Continue.

[1322] Showing Value Labels:

[1323] Open View>Value Labels or Ctrl-click on the cell you want to enter data into.

[1324] Double click on the value you would like to add.

[1325] The value will be entered and the value label displayed in the cell.

[1326] Reading ASCII Text Data Files:

[1327] Open File>Read Ascii Data>(Fixed Columns or Freefield)

[1328] 1. Fixed format—each variable is in the same column location for each case.

[1329] 2. Freefield—only the order of the variables is important.

[1330] Click Browse to select data file.

[1331] Enter a name for each variable

[1332] Enter a starting and ending column location for the variable. (data values can appear anywhere within the column range)

[1333] If there is more than one line of data for each case, enter the record number for each variable. (this indicates the line number within the case)

[1334] Select a data type and click Add.

[1335] Transforming Data Files:

[1336] Open Transform>Compute.

[1337] Enter name of the target variable.

[1338] Enter numeric expression

[1339] 1. You can paste variables from the source list

[1340] 2. Numbers and operators are on the calculator pad

[1341] 3. Functions are located in the function list

[1342] The new variable will be added to the end of the data file.

[1343] Making Reports in SPSS (Charts)

[1344] Creating a Chart:

[1345] Select Graphs>(type of chart).

[1346] Choose an icon for specified type of chart you want and indicate how your data are organized.

[1347] Click Define.

[1348] Follow the define dialog box and click OK.

[1349] Editing Charts:

[1350] Double click on the chart in the viewer. This will display the chart in a chart window.

[1351] You can edit by using the menu, toolbar, or double-clicking on the object you want to edit.

[1352] 1. In the menu select Chart>(choose selection) and edit in the resulting dialog box.

[1353] 2. Click on chart element, click on a tool in the toolbar, and follow the dialog box that appears.

[1354] 3. Double click on an object to edit in the chart window and an appropriate dialog box will appear.

[1355] Changing scale axis

[1356] Double click on the axis.

[1357] In the dialog box, change the range or values on the axis accordingly.

[1358] Changing color

[1359] Click on the chart element you want to change.

[1360] Click on color tool in the tool bar (crayon shape).

[1361] Select a color and then click Apply.

[1362] Swapping chart axes

[1363] Click on swap axes tool in the toolbar.

[1364] Change chart types

[1365] Open Gallery>(new chart type) in the chart editor.

[1366] Select type of chart in the dialog box that appears and click Replace.

[1367] Select variables for the new chart and click OK.

[1368] Interactive Graphs:

[1369] In the SPSS data editor open Graphs>Interactive>(Choose method) to create a report on the data entered in your table.

[1370] Drag variable names into the axes boxes to compare them and click OK.

[1371] The SPSS Viewer will appear with the graph. Double click on the graph to activate it so you able to interact with the data.

[1372] Several options will appear as buttons around the graph. Activate them by clicking on the appropriate button.

[1373] Assign graph variables to axes and legends with the first button in the corner depicted with a ruler and other items. This can assign variables to various roles in a chart. Variables can be assigned to axes, color, style, and size. You can also change the graph into a 2D or 3D coordinate system in this window. If a 3D coordinate system is chosen a rotation device window will appear to rotate the graph to show the information better.

[1374] The next button to the right is a pull down menu that will change the graph type.

[1375] The Display Chart Manager is the next one over. It gives easy access to all of the separate components that make up the chart. You can select the item and then edit, delete, or hide them.

[1376] There are two buttons that changes the axes orientation to horizontal or vertical.

[1377] On the vertical button row you are able to change colors, lines, and fills, as well as symbol style, symbol size, line style, line weight, and connector style.

[1378] Making Reports in SPSS (Tables)

[1379] To run a procedure, open from the SPSS data editor Statistics>(Select a Category)>(Select a Procedure). i.e. Statistics>Summarize>Frequencies.

[1380] Select variables from source list and use the arrow button to move variables to target lists. Click OK.

[1381] The results will be displayed in the Viewer.

[1382] Pivot Tables:

[1383] Double click on the table in the viewer.

[1384] Select pivoting trays from pivot menu. Pivot>Pivoting Trays.

[1385] Click and drag pivot icon from one dimension (column, row, layer) to another to alter table.

[1386] You can also change order of elements in the table by moving the pivot icons around and swapping them.

[1387] Editing Pivot Tables:

[1388] Changing font or alignment

[1389] Double click on the table.

[1390] Click on table cell or label to modify.

[1391] Use the formatting toolbar to change desired attributes.

[1392] Modifying text

[1393] Double click on the text to modify.

[1394] Edit as you would in a text editor or word processing program.

[1395] (if you change numeric values . . . the row and column totals will not be recalculated)

[1396] Hiding rows and columns

[1397] Double click on the table.

[1398] Ctrl-Alt-Click on the label of the row or column to hide.

[1399] Click the right mouse button and select Hide Category from the pop-up window.

[1400] View>Show All will bring the information back into view.

[1401] Changing data display formats

[1402] Select the column by doing a Ctrl-Alt-Click on the column label.

[1403] Click the right mouse button on the label of the column and select Cell Properties from the pop-up menu.

[1404] Change desired display format. i.e. Change decimals to 0.

[1405] Click OK.

[1406] Customizing tables

[1407] Double click on table.

[1408] Open Format>TableLooks.

[1409] Select a table style.

[1410] To create a new table style, choose a table format close to what you want.

[1411] Click Edit Look button.

[1412] Edit the attributes you wish from the dialog box and click OK.

[1413] Click Save As in TableLooks dialog box to save the new table style.

[1414] Pasting results as metafiles

[1415] Select the item either in the output or contents pane.

[1416] Select Edit>Copy.

[1417] In the other application you are pasting into select Edit>Paste Special.

[1418] Select Picture from the dialog box.

[1419] Pasting results as unformatted text

[1420] Select the item either in the output or contents pane.

[1421] Select Edit>Copy.

[1422] In the other application you are pasting into select Edit>Paste Special.

[1423] Select Unformatted text from the dialog box.

[1424] Layering a Table:

[1425] To collapse a large 2D table into 3D layers double click on the table.

[1426] Select pivoting trays from pivot menu. Pivot>Pivoting Trays.

[1427] Drag any pivot icon from the row or column tray into the layer tray.

[1428] To view the different layers on the table you can either click the arrows on the layer pivot icon in the pivot tray or select a category from the drop down list on the table.

[1429] Export Format and Chart Templates

[1430] Export format controls the export format for output documents. Charts should be exported in a suitable format for inclusion in HTML documents. (i.e. JPEG)

[1431] Pivot tables can be exported as HTML tables, as tab separated text, or as space separated text.

[1432] Text output can be exported as preformatted HTML or space separated text.

[1433] Exported chart names are based on the production job filename, a sequential number, and extension of the selected format. (i.e. PROBJOB1.WMF)

[1434] Use File>Export to change text and chart export options.

[1435] When in the Export Output dialog box, click on the Options button. Then in the JPG Output Filter Setup dialog box, click on the Chart Options button. Some settings to make that will enhance the HTML output are:

[1436] 1. Resloution=200×200 pels/in.

[1437] 2. Size=3×3 in.

[1438] 3. Quality=100%

[1439] 4. Operation=Progressive

[1440] 5. Format=ycc color

[1441] To change production options from production facility menu select Edit>Options after double-clicking on the chart to activate it. Under the Chart tab, change the Aspect Ratio to 1.25 and under the Viewer tab change the Text Output Font to 12 pt. Other options are also available to change in this dialog box.

[1442] Viewer Options:

[1443] Viewer output display options affect only new output produced after you change the settings. Output already displayed in the Viewer is not affected by changes in these settings.

[1444] Initial Output State controls which items are automatically displayed or hidden each time you run a procedure and how items are initially aligned. You can control the display of the following items: log, warnings, notes, titles, pivot tables, charts, and text output (output not displayed in pivot tables). You can also turn the display of commands in the log on or off. You can copy command syntax from the log and save it in a syntax file for use with the automated production facility.

[1445] To change the viewer output display options:

[1446] Open Edit>Options.

[1447] Select the Viewer tab.

[1448] In the initial output state box, make sure that the log, warnings, and notes are all bulleted as ‘contents initially hidden’.

[1449] Click Apply.

[1450] In the Draft Viewer tab of that same dialog box, make sure that in the ‘display output items’ box, log, commands in log, warnings, and notes are not selected (checked).

[1451] Click Apply.

[1452] All output items are displayed left-aligned in the Viewer. Only the alignment of printed output is affected by the justification settings. Centered and right-aligned items are identified by a small symbol above and to the left of the item.

[1453] All of these viewer options that you change will appear in the output window. If you export the object into HTML using the production facility, everything will be displayed regardless of what you changed in the viewer options.

[1454] Chart Templates:

[1455] You can apply many of the attributes and text elements from one chart to another. This allows you to modify one chart, save that chart, and then use it as a template to create a number of other similar charts. For example, if the old chart is a clustered bar chart with bar colors modified to yellow and green and the new chart is a multiple line chart, the lines will be yellow and green.

[1456] To create a new template:

[1457] Create a chart as detailed earlier.

[1458] Edit the chart to contain the attributes you want to save in a template (text format, color/fills, titles, subtitles, etc.) by selecting it and using the chart window.

[1459] Open File>Save Chart Template from the chart window menu. (double-click on the chart to display the chart window)

[1460] To apply a template to a chart already in a chart window:

[1461] Select the chart by double-clicking on it to bring up the chart window.

[1462] Open Format>Apply Chart Template.

[1463] Select a file to use as a template in the dialog box that appears.

[1464] To apply a template using command syntax:

[1465] By applying a chart template using command syntax, you can modify your chart to the set attributes in the template very quickly and easily. This would be helpful when running syntax files to produce customized output in the production facility as well.

[1466] Create or locate a chart template.

[1467] You will need to preserve the default option settings that the template will be modifying. To do so, add the PRESERVE command before applying the template.

[1468] To set the template, use the command SET CTEMPLATE=“filename”. Where file name is the absolute path of the chart template you want to apply.

[1469] Next, add syntax for the chart(s) you wish to include.

[1470] Use the RESTORE command to reset the option settings to what was saved when you issued the PRESERVE command earlier.

[1471] Command Syntax

[1472] A syntax file is a text file that contains commands. You can just type in the commands, but the software can help you build your syntax file by:

[1473] Pasting command syntax from dialog boxes

[1474] Copying syntax from the output log

[1475] Copying syntax from the journal file

[1476] Rules When Editing and Writing Command Syntax

[1477] Keep in mind the following simple rules when editing and writing command syntax:

[1478] Each command must begin on a new line and end with a period (.).

[1479] Most subcommands are separated by slashes (/). The slash before the first subcommand on a command is usually optional.

[1480] Variable names must be spelled out fully.

[1481] Text included within apostrophes or quotation marks must be contained on a single line.

[1482] Each line of command syntax cannot exceed 80 characters.

[1483] A period (.) must be used to indicate decimals, regardless of your Windows regional settings.

[1484] Variable names ending in a period can cause errors in commands created by the dialog boxes. You cannot create such variable names in the dialog boxes, and you should generally avoid them.

[1485] Command syntax is case insensitive, and three-letter abbreviations can be used for many command specifications. You can use as many lines as you want to specify a single command. You can add space or break lines at almost any point where a single blank is allowed, such as around slashes, parentheses, arithmetic operators, or between variable names. For example,

[1486] Creating Command Syntax from Dialog Boxes

[1487] The easiest way to build a command syntax file is to make selections in dialog boxes and paste the syntax for the selections into a syntax window. Then in the syntax window, you can run the pasted syntax, edit it, and save it in a syntax file.

[1488] Open the dialog box and make selections. (i.e. when making a graph or table)

[1489] Click on the Paste button and the command syntax will be pasted directly into the designated syntax window, or if a syntax window isn't open it will create a new syntax window automatically to paste your commands into.

[1490] Using Command Syntax from the Output Log

[1491] You can copy command syntax from the log that appears in the Viewer.

[1492] Open Edit>Options.

[1493] Select the Viewer tab and select ‘Display commands in the log’. (As you run analyses, the commands for your dialog box selections are recorded in the log)

[1494] Open a syntax file by File>New>Syntax.

[1495] In the Output Viewer, double-click on the log item to activate it. (If it is hidden, click on the closed book icon of the log to display it)

[1496] Highlight the syntax you want to copy.

[1497] Edit>Copy.

[1498] In the syntax window choose Edit>Paste.

[1499] Using Command Syntax from the Journal File

[1500] All commands executed during a session are recorded in a journal file named spss.jnl. You can edit the journal file and save it as a syntax file that you can use to repeat a previously run analysis, or you can run it in an automated job with the production facility.

[1501] Open File>Open.

[1502] Locate the journal file spss.jnl (by default located in the temp directory)

[1503] Edit the file to remove any error messages or warnings, indicated by the>sign.

[1504] Save the edited journal file using a different filename (with the extension .sps for a syntax file).

[1505] Defining the Working Data File

[1506] The file that appears in the Data Editor window is the working data file. When you open a data file, it becomes the working data file. All analysis is performed on the working data file, and most analytical commands are unavailable unless you have a working data file.

[1507] The working data file is the data file you build to use in the current session. You can retrieve an SPSS-format data file using GET, which in effect makes a working copy of the specified file. The working data file is not created until SPSS encounters a command (usually a procedure) that causes it to read the data. At this point, SPSS executes all of the preceding data definition and transformation commands and the command that causes the data to be read. The working data file is then available for further transformations and procedures, and it remains available until replaced by a new working data file or until the end of the session.

[1508] Any transformations and statistical analyses you request during a session are performed on the working data file. Transformations performed during a session apply to the working data file only. Changes to the file are lost if the working data file is erased or replaced before you have saved it.

[1509] (***This includes the GET CAPTURE command that retrieves data from a database and converts them to a format that can be used by program procedures. GET CAPTURE retrieves data and data information and builds a working data file for the current session.)

[1510] CONNECT subcommand is required to access any database that has an installed Microsoft ODBC driver. You cannot specify the connection string directly in the syntax window, but you can paste it with the rest of the command from the Results dialog box, which is the last of the series of dialog boxes opened with the Database Capture command from the File menu.

[1511] SELECT specifies any SQL select statement accepted by the database you access.

[1512] Running Command Syntax

[1513] Highlight the commands you want to run in the syntax window.

[1514] Click the Run button (the right-pointing triangle) on the syntax window toolbar.

[1515] OR

[1516] Open Run>(select command).

[1517] 1. All—runs all commands in the syntax window

[1518] 2. Selection—runs the currently selected commands

[1519] 3. Current—runs the command where the cursor is currently located

[1520] 4. To End—runs all commands from the current cursor location to the end of the file

[1521] The Scripting Facility

[1522] The scripting facility allows you to automate tasks, including:

[1523] 1. Automatically customize output in the Viewer.

[1524] 2. Open and save data files.

[1525] 3. Display and manipulate dialog boxes.

[1526] 4. Run data transformations and statistical procedures using command syntax.

[1527] 5. Export chars as graphic files in a number of formats.

[1528] Scripts

[1529] Many scripts are included with the software. You can use these scripts as they are or you can customize them to your needs. If you want to create your own scripts, you can begin by choosing from a number of starter scripts.

[1530] To Create a Script:

[1531] Open New>Script.

[1532] Select a starter script if you want to begin with one.

[1533] If you do not want to use a starter script, click Cancel.

[1534] To Edit a Script:

[1535] Open File>Open.

[1536] Look in j:\myproducts\spss\scripts or j:\myproducts\spss\scripts\starter to find a SPSS Script (*.sbs) to open.

[1537] Modify the script. (The starter scripts are helpful in that they are commented with hints on how to customize the script to your particular needs)

[1538] Save your new script.

[1539] To Run a Script:

[1540] To apply a script to a table, click on the table to select it in the Output Viewer window.

[1541] Open Utilities>Run Script.

[1542] Select the script from the dialog box you wish to execute and click Run.

[1543] File Name: CleanOutput.sbs

[1544] Begin Description

[1545] End Description

[1546] SPSS Autoscript file

[1547] Do not edit the text between HeaderBegin and HeaderEnd

[1548] HeaderBegin

[1549] HeaderEnd

[1550] **********************************************************

[1551] Use this Starter Script if you want to remove items from the Navigator.

[1552] This Starter Script can be modified to delete items based on their type (e.g., Note, Warning, Log, Chart, Pivot, Table, Text, Title, or All)

[1553] This is a modified version of the starter script (Delete Navigator ‘Items.sbs located in the Starter folder) that will delete the Log, Notes, Text and Warnings from the Navigator for better output when making HTML output items.

[1554] Including Scripts in Syntax Documents:

[1555] To have a script run within a syntax document, use the SCRIPT command.

[1556] The syntax is: SCRIPT ‘filename’ [(quoted string)]

[1557] The basic specification is keyword SCRIPT with a filename. The filename is required. The optional quoted string, enclosed in parentheses, can be passed to the script.

[1558] (This particular SCRIPT command will call the cleanoutput.sbs script which is coded to remove all unwanted items from the exported output. It is put at the end of the code so it can remove the items generated by the output of the FREQUENCIES command.)

[1559] Autoscripts

[1560] Autoscripts run automatically when triggered by the creation of a specific piece of output by a given procedure. For example, an autoscript can automatically make the ‘Totals’ row or column in a table into bold typeface and highlighted in the color blue each time a frequency table is created.

[1561] Creating Autoscripts:

[1562] You create an autoscript by starting with the output object that you want to serve as the trigger. For example, to create an autoscript that runs whenever a frequency table is produced, create a frequency table in the usual manner.

[1563] Single-click the table in the Output Viewer to select it.

[1564] Right-click and select Create/Edit Autoscript or use Utilities>Create/Edit Autoscript from the menu.

[1565] (If no autoscript exists for the selected object, a new autoscript is created. If an autoscript already exists, the existing script is displayed).

[1566] Type in code.

[1567] Open Edit>Options to enable or disable the autoscript under the Script tab.

[1568] The Autoscript File

[1569] All autoscripts are saved in a single file. Any new autoscripts you create are also added to this file. The name of the current autoscript file is displayed on the Scripts tab in the Options dialog box. The Options dialog box also displays all of the autoscripts in the currently selected autoscript file, allowing you to enable and disable individual scripts. The default autoscript file is autscript.sbs. You can specify a different autoscript file, but only one can be active at a time.

[1570] The Production Facility

[1571] The production facility helps run programs in an automated mode. It runs unattended and terminates after executing the last command, so you can run other tasks while it runs. This production mode is useful if you often run the same set of analyses like weekly reports.

[1572] Running an Automated Production Job

[1573] Create a command syntax file (in the syntax editor) which is a simple text file containing command syntax.

[1574] Select from the Start menu, Start>Programs>SPSS 8.0 Production Facility.

[1575] Click Add to select the command syntax files you want to include in the production job.

[1576] After you create syntax files and include them in a production job, you can view and edit them from the production facility.

[1577] Save the production job and click the Run button on the tool bar (button with the right arrow) or select Run>Production Job from the menu bar to run the production job. Each production run produces an output file with the same name as the production job and the extension .SPO. i.e. the production job file: PRODJOB.SPP would become PRODJOB.SPO.

[1578] You can then automatically print the results at the end of the production run, specify the location for the production results, export output and charts in external formats, and create user prompts that enable you to use the same syntax files for multiple data files and analyses.

[1579] Production Facility syntax files and INCLUDE Files

[1580] For command files run via the Production Facility or the INCLUDE command, the syntax rules are slightly different:

[1581] Each command must begin in the first column of a new line

[1582] Continuation lines must be indented at least one space

[1583] The period at the end of the command is optional

[1584] If you generate command syntax by pasting dialog box choices into a syntax window, the format of the commands is suitable for any mode of operation.

[1585] Running Production Jobs From a Command Line

[1586] Command line switches enable you to schedule production jobs to run at certain times with scheduling utilities like the one available in Microsoft Plus!. You can run production jobs from a command line with the following switches:

[1587] -r Runs the production job. If the production job has any user prompts, you must supply the requested information before the production job will run.

[1588] -s Runs the production job and suppresses any user prompts or alerts. The default user prompt values are used automatically.

[1589] To get to the command line . . . just open Start>Run. The command line will then appear. Another option is opening up the DOS shell and typing the command in there at the prompt. You should provide the full path for both the production facility (SPSSPROD.EXE) and the production job. Both should be enclosed in quotes with the desired switch last.

[1590] Changing HTML Output Format

[1591] To change what is displayed in the HTML document when it is exported from the automated production facility, several steps need to be followed.

[1592] Write a script that executes the desired commands. Open J:\myproducts\spss\scripts\starter\delete navigator items.sbs and modify the script to your desired specifications using the comments in the code to help you.

[1593] This code only allows you to delete one feature at a time (log, notes, charts, pivot, text, title, warnings, or all items). If you want to remove the log AND notes feature you can:

[1594] 1. Write two different scripts, each deleting one feature and include them both in the syntax file using two SCRIPT commands.

[1595] 2. Modify the one script to accommodate removing both features by redefining one of the variables and calling the remove function twice (this is done so you don't overwrite the first value). In the second function, use the new variable name as the parameter.

[1596] Save the script (or scripts).

[1597] Include the script (or scripts) in the syntax document you want to apply it to by using the SCRIPT command. This will automatically run the script that you created when the syntax command is encountered. The effect is the same as opening the script file in the Script Editor and running it from there. The syntax is SCRIPT ‘filename’.

[1598] i.e. SCRIPT ‘j:\myproducts\spss\scripts\deletetest.sbs’.

[1599] Make sure that this command is located after all of the commands on the working data file. This will ensure that it will run on all of the output you designated.

[1600] Save the syntax file.

[1601] Open the production facility, add the syntax file you just made, and follow the steps outlined earlier to complete the automated production of your new formatted HTML file.

[1602] Other starter scripts are available in the J:\myproducts\spss\scripts\starter directory. Each script supplies code for one or more common procedures and is commented with hints on how to customize the script to your particular needs.

[1603] AT Command

[1604] The AT command schedules commands and programs to run on a computer at a specified time and date. The Schedule service must be running to use the at command. To check this, go into your control panel and open Services. Scroll down to find the scheduler to check its status.

[1605] The syntax for the AT command is as follows.

[1606] Type these command in the command line found by opening Start>Run, or enter it at the prompt in the DOS shell.

[1607] Parameters

[1608] none

[1609] Used without parameters, at lists scheduled commands.

[1610] \\computername

[1611] Specifies a remote computer. If this parameter is omitted, the commands are scheduled on the local computer.

[1612] id

[1613] Is an identification number assigned to a scheduled command.

[1614] \delete

[1615] Cancels a scheduled command. If id is omitted, all the scheduled commands on the computer are canceled.

[1616] \yes

[1617] Forces a yes answer to all queries from the system when deleting scheduled events.

[1618] time

[1619] Specifies the time when command is to run. Time is expressed as hours:minutes in 24-hour notation (00:00 [midnight] through 23:59).

[1620] \interactive

[1621] Allows the job to interact with the desktop of the user who is logged on at the time the job runs.

[1622] \every:date[, . . . ]

[1623] Runs the command on every specified day(s) of the week or month (for example, every Thursday, or the third day of every month). Specify date as one or more days of the week (M,T,W,Th,F,S,Su) or one or more days of the month (using numbers 1 through 31). Separate multiple date entries with commas. If date is omitted, the current day of the month is assumed.

[1624] \next:date[, . . . ]

[1625] Runs the specified command on the next occurrence of the day (for example, next Thursday). Specify date as one or more days of the week (M,T,W,Th,F,S,Su) or one or more days of the month (using numbers 1 through 31). Separate multiple date entries with commas. If date is omitted, the current day of the month is assumed.

[1626] “command”

[1627] Is the Windows NT command, program (.EXE or .COM file) or batch program (.BAT or .CMD file) to be run. When the command requires a path as an argument, use the absolute path, that is, the entire pathname beginning with the drive letter. If command is on a remote computer, specify the server and sharename, rather than a remote drive letter. You may use quotation marks around the command, whether you are using at at the command line or in a batch file. If the command includes switches that are used by both the command and at, you must enclose command in quotation marks. If the command is not an executable (.EXE) file, you must precede the command with cmd /c; for example cmd /c dir>c:\test.out.

[1628] The AT command requires you be a member of the local Administrator group. Also, the AT command does not automatically load cmd, the command interpreter, before running commands. Unless you are running an executable (.EXE) file, you must explicitly load CMD.EXE at the beginning of the command; for example, cmd /c dir>c:\test.out.

[1629] Viewing Scheduled Commands:

[1630] The AT command has two displays. When you use at without options, you see a display similar to the following:

[1631] When you include the identification number for the command, the display provides information for a single entry and is similar to the following:

[1632] After you schedule a command with at (especially a command that has option variables), check that the command is entered properly by typing at without options. If the information in the “Command Line” column isn't correct, delete the command and retype it. If it still isn't correct, retype the command with fewer option variables.

[1633] Viewing Results:

[1634] Commands scheduled with the AT command run as background processes, so no output is displayed on the computer's screen. To redirect output to a file, use the redirection symbol (>). If you redirect output to a file, enclose the name of the command you are scheduling in quotation marks. The current directory for the executing command is the %systemroot% directory.

[1635] Changing System Time:

[1636] If you change the system time at a computer after scheduling a command to run with at, synchronize the AT scheduler with the revised time by typing at without options.

[1637] Storing Commands:

[1638] Scheduled commands are stored in the registry, so scheduled tasks are not lost if you have to restart the Schedule service.

[1639] Connecting to Network Drives:

[1640] Scheduled jobs that access the network should not use redirected drives made by the user. The Schedule service may not be able to access these drives and they may not be present if a different user is logged on at the time the scheduled job runs. Instead, scheduled jobs should use UNC paths. For example,

[1641] If you schedule an AT command that uses a drive letter to connect to a shared directory, you should include an AT command to disconnect the drive when you are finished using it. If the drive is not disconnected, the drive letter assigned will not be available or seen at the command prompt.

[1642] To display a list of commands scheduled on the server MARKETING, type

[1643] at \\marketing

[1644] To learn more about a command with the identification number 3 on the server CORP, type

[1645] at \\corp 3

[1646] To schedule a net share command to run on the CORP server at 8:00 A.M., and redirect the listing to the server MAINTENANCE, shared directory REPORTS, and file CORP.TXT, type

[1647] at \\corp 08:00 “cmd /c net share reports=d:\marketing\reports>>\\maintenance\reports\corp.txt”

[1648] To back up the MARKETING server's hard disk to a tape drive at midnight every five days, create a batch program (ARCHIVE.CMD) containing the backup commands. Then schedule the batch program to run by typing

[1649] at \\marketing 00:00 \every:5,10,15,20,25,30 archive

[1650] To cancel all commands scheduled on the current server, clear the at schedule information by typing

[1651] at \delete

[1652] Running a Production Job Using AT

[1653] Go into Services in the Control Panel and highlight the scheduler.

[1654] Click on Stop button to interrupt the scheduler.

[1655] Now double-click on the scheduler to bring up a dialog box.

[1656] Make sure in the dialog box that appears, that the “Log on as” is your correct domain and user name (used to log on to NT) and password. (i.e. CSCOE\solomoj and password: xxxxxx)

[1657] Click OK.

[1658] Now restart the scheduler by clicking on the Start button and then Close the dialog box.

[1659] Make a .bat file that contains the command to run the production facility. This command will include the path name to the production facility executable (spssprod.exe) <space> path name to the production job (command.spp) <space> with any switches appended to the end. If any of these commands are located on a different server, use the server and sharename rather than a remote drive letter to specify the path name.

[1660] i.e. \\nsmnnt10\solomoj\myproducts\spss\spssprod.exe c:\spss\command.spp -s

[1661] where \\nsmmnt10\solomoj\myproducts\spss\spssprod.exe is the path to the production facility

[1662] c:\spss\command.spp is the path to the production job

[1663] -s is the switch that runs the production job and suppresses any user prompts or alerts.

[1664] To run the AT command from the DOS command shell, at the prompt type your at command calling the .bat file using the specified parameters as noted earlier.

[1665] at 13:40 “c:\temp\test.bat”

[1666] This schedules test.bat to run at 12:40 p.m. on the local computer. To check if it was scheduled correctly, type at (with no parameters) to see a listing of all of the commands scheduled to run, or type at <id>, where ‘id’ is the identification number given to the scheduled command when you entered it. The latter will just give information on the command specified.

[1667] To run the AT command from the Winat.exe application, open up the application. From the menu open Edit>Add. In the dialog box that occurs, enter the time, days, and frequency information and type the “c:\temp\test.bat” command into the command line. Click OK and it will appear as a scheduled command.

[1668] When the specified time/times occur, the production facility will run the production job and export the output to the directory that is specified in the production job.

[1669] HTML Information

[1670] Customizing HTML

[1671] You can automatically add customized HTML code to documents exported in HTML format, including:

[1672] HTML document titles

[1673] Document type specification

[1674] Meta tags and script code (for example, JavaScript)

[1675] Text displayed before and after exported output

[1676] To customize HTML documents, you need to create or modify a text file that contains the custom HTML (htmlfram.txt—located in the directory in which SPSS is installed).

[1677] Contents and format of the text file for customized HTML:

[1678] The HTML code that you want to add automatically to your HTML documents must be specified in a simple text file that contains six fields, each delimited by two open angle brackets on the preceding line (<<):

[1679] <<

[1680] Text or code that you want to insert at the top of the document before the <HTML> specification (for example, comments that include document type specifications)

[1681] <<

[1682] Text used as the document title (displayed in the title bar)

[1683] <<

[1684] Meta tags or script code (for example, JavaScript code)

[1685] <<

[1686] HTML code that modifies the <BODY> tag (for example, code that specifies background color)

[1687] <<

[1688] Text and/or HTML code that is inserted after the exported output (for example, copyright notice)

[1689] <<

[1690] Text and/or HTML code that is inserted before the exported output (for example, company name, logo, etc.)

[1691] Sample Text file for Customized HTML:

[1692] To Use a Different File or Location for Custom HTML Code

[1693] If you change the name or location of HTMLFRAM.TXT, you must modify the system registry to use the file in customized HTML output.

[1694] From the Windows Start menu choose Run, type regedit, and click OK.

[1695] In the left pane of the Registry Editor, choose:

[1696] In the right pane, double-click the string HTMLFormatFile.

[1697] For Value data, enter the full path and name of the text file containing the custom HTML specifications (for example, C:\MYFILES\HTMLSTUF.TXT).

[1698] Sample HTML source for customized HTML:

[1699] Oracle

[1700] Installing Oracle Client 7.3.4

[1701] Follow instructions in the install mode up until the dialog box which asks what you wish to install.

[1702] Choose ‘Custom Installation’ and in the new dialog box that appears, highlight the following for installation:

[1703] 1. Oracle Call Interface

[1704] 2. SQL+

[1705] 3. Oracle 7 32 bit ODBC Driver

[1706] 4. Oracle 7 Utilities

[1707] 5. Oracle Network Products

[1708] 6. Oracle Client Configuration Manager

[1709] Finish up the installation by following the rest of the dialog boxes.

[1710] Inserting Data Into a Table

[1711] To change the date and time configuration for the session:

[1712] >alter session set nls_date_format=‘dd_mon_rr hh24:mi:ss’;

[1713] >insert into spss_test values (‘01-mar-99 00:40:26’, ‘NSMMNT10’, 0.047, 0.173, 59.468, 51.039, 24.7, 0);

[1714] (The values for the table are put inside parentheses in order of the data found in the table. Date/Time and Character variables are put in single quotes and numeric values can stand alone. Each data entry is separated by a comma)

[1715] >select * from spss_test;

[1716] This command will show the table with the values.

[1717] >commit

[1718] Type this command at the end of the session to commit all of the information that you entered into the table.

[1719] Creating Event Correlation Alarms With ECM as the Event Correlator and Manager

[1720] Introduction

[1721] This section is intended as a lessons-learned encapsulation for ECM environment configurations.

[1722] This section is intended as an aid in the creation and modification of event correlation models/alarm definitions in ECM.

[1723] Included in this section are references to event correlation models/alarm definitions and PERL scripts that were devised in the development of this component of the Service Assurance final phase 2 deliverable. These pieces are included in the phase 2 repository for importation into an install of ECM.

[1724] Declarations

[1725] 1. Items enclosed in greater/less than symbols (<>) contain installation dependent data.

[1726] 2. Items enclosed in single quotes are as seen on the screen.

[1727] Definitions

[1728] HPOV—Hewlett Packard's OpenView Network Node Manager

[1729] IDE—Interactive Development Environment

[1730] OID—Object Identifier

[1731] ECM—Event Correlator and Manager

[1732] ECM Event Correlation Components

[1733] The Theory

[1734] The various components of ECM allow for the graphical creation of event correlation maps. These maps contain alarms, polls and traps, and inside each given alarm reside various states and transitions.

[1735] To fully comprehend the essence of the correlation utilities contained within ECM would require a primer on state transition diagrams. This falls out of the scope of this document, but a brief overview is in order.

[1736] Each alarm consists of a separate state transition diagram. The orderly composition of the states and transitions defines the boundaries of the diagram, the actions on the transitions define the outputs, and the SNMP polls and SNMP trap masks define the inputs. Therefore, the masks and polls bring in data for correlation. The data enters an alarm and through its unique course through the diagram (the unique set of states through which it transitions) a specific result is generated. This result consists of the actions that are generated by the transitions that it passes through.

[1737] The Components

[1738] The theory behind the software generates three distinct functional areas to the diagrams. These functional areas contain a distinct series of components that are the user-modifiable pieces of ECM. These are as follows:

[1739] 1. Inputs

[1740] Polls—Are an SNMP request for information from a management station to a managed node.

[1741] Traps—Are SNMP variables that have been “pushed” from managed node to management station.

[1742] 2. Alarms

[1743] States—Are actual, defined points of being in a system.

[1744] Transitions—The passages from one state to the next.

[1745] 3. Results

[1746] Traps—Same as above, but are instead sent out either to another management station or a managed node.

[1747] There are others, but they fall out of the scope of this document.

[1748] Creating New Polls

[1749] The New Poll Definition

[1750] Begin by running the ECM client and logging in as appropriate to your designed environment. Open the ‘Admin’ then the ‘Poll List’ menu options, and the ‘<Server Name>: Poll List’ dialog window is opened. At the bottom of this window is a series of buttons. Look for the button labeled ‘New’ and click on it. A new window will appear with the title reading ‘<Server Name>: Alarm Definition’.

[1751] This window is tabbed with two panels. The lead panel is the ‘Poll’ with the second tab being the ‘Poll Condition’. On the ‘Poll’ panel resides a number of basic interface components. The simplest of these components are obvious in that they are the name, poll rate, enabled, port and the true/false trigger that is fired when the poll is run. The important thing to realize here is that the triggers can either be reused from elsewhere in the program or else created right here by entering an arbitrary, previously unused, new trigger name. As with the name, these items should be part of a larger naming convention in order to simplify their utilization (i.e. <project name>_<associated alarm>_<descriptive poll name>).

[1752] More complicated are the ‘Property’ drop-down and the ‘Poll Condition’ tab. The property string in this case is important as one of the core tenets that drives ECM is that of the property string and it's relation to the observed node.

[1753] The property string has to be in the node's property group.

[1754] The different property groups work as containers. In this way, the string that you choose must have a correspondence with the node(s) being observed. (i.e. the string must either be already inside of the given node's property group, or else added to the property group at a later time).

[1755] Lastly is the ‘Poll Condition’ tab. This is straightforward to use, and consists of choosing the necessary base object and checking the attributes that you would like to monitor. To do the very minimum, and grab variables for entry into logs, you would simply select the attribute in question and select ‘present’ (if more select ‘AND’ then select the next attribute and ‘present’ and so on).

[1756] NOTE that the base object that you used in your poll needs to be specified in the property group that is used by your node(s).

[1757] The base object has to be in the property group.

[1758] Use this last statement as a guideline for developing your polls. Just put any base object used inside the corresponding property group ANY time you use one in a poll used.

[1759] Creating New SNMP Trap Masks

[1760] New Trap Mask Definitions

[1761] Begin by running the ECM client and logging in as appropriate to your designed environment. Open the ‘Admin’ then the ‘Mask List’ menu options, and the ‘<Server Name>: Mask List’ dialog window is opened. At the bottom of this window is a series of buttons. Look for the button labeled ‘New’ and click on it. A new window will appear with the title reading ‘<Server Name>: Alarm Definition’.

[1762] This window is tabbed with two panels. The lead panel is the ‘Mask’ with the second tab being the ‘Trigger Function’. On the ‘Mask’ panel resides a number of basic interface components. The simplest of these components is the name of the mask. These items should be part of a larger naming scheme in order to simplify their utilization (i.e. <project name>_<associated alarm>_<descriptive poll name>).

[1763] In the next field comes the ‘Generic’ trap ID. This is a value from negative one to positive six and represents a number of standardized responses as well as industry/vendor specific predefined (SNMP) values. In most modified occasions, this is going to be six.

[1764] Next comes the ‘Enterprise’ OID field. Each received trap comes with an SNMP enterprise OID that allows for specificity with regards to the data's base object. This can be found in numerous ways, but one possible way to discover this information is to enable the ‘TrapLogger’ alarm and its' associated poll. Once activated, this alarm will log all incoming traps to a file predefined to be ‘alltraps.log’. This can be found in the /<base directory>/seasoft/userfiles/logs directory, and is in flat text file format (i.e. more or cat will work).

[1765] Once the mask is defined, the next test is to define whether you are interested in a simple trigger call or a more complex trigger function. While describing the trigger function falls outside the scope of this paper, one note that can be shared is that the PERL functionality in this release is quite limited. The trigger function is focused on little more than extended ‘if else’ statements that fire triggers.

[1766] If the trigger function is not required then the use of a simple trigger allows for the creation of new or reused triggers. As stated earlier, these triggers should be created under a naming scheme.

[1767] Creating New Alarm Models

[1768] The New Alarm Canvas—Interface Basics

[1769] Begin by running the ECM client and logging in as appropriate to your designed environment. Open the ‘Admin’ then the ‘Alarm Definition List’ menu options, and the ‘<Server Name>: Alarm Definition List’ dialog window is opened. At the bottom of this window is a series of buttons. Look for the button labeled ‘New’ and click on it. A new window will appear with the title reading ‘<Server Name>: Alarm Definition’.

[1770] The basic layout of this window begins in the upper left corner with a four-button toolbar that allows for the creation of new alarm components. Below this is the alarm canvas that usually opens with a single state listed. This state is labeled ‘Ground’.

[1771] Beneath the canvas section are three textbox/drop-down listboxes. The textbox labeled ‘Name’ is nothing more than the name chosen for the new alarm. Select a name that is appropriate for your project. It is extremely easy to get lost in the alarm definitions so it is vehemently suggested to keep everything standardized around a naming convention.

[1772] The list-box immediately to the right of ‘Name’ is that of ‘Property’. This is an extremely important piece of the ECM design puzzle. The property group is termed as being a ‘container for properties’. While all these kinds of theoretical understandings are important, keep in mind that the individual alarm's property needs to appear in the main property group under which your nodes will appear. It is in this manner that the property groups work as “keys” to allow various nodes to adhere to various property groups. The more complex the scheme, the more important this understanding becomes.

[1773] Our next interface component is that of the ‘Scope’ which appears immediately to the right of the ‘Property’ drop-down box. This has three options labeled ‘Subobject’, ‘Node’, and ‘Enterprise’.

[1774] Subobject applies to an alarm configured to observe multiple instances of a single type of object attached to a single node.

[1775] Node applies to an alarm configured to observe various objects attached to an individual node.

[1776] Enterprise applies to instances that come from various nodes.

[1777] Essentially this scheme allows for “grading” alarms across the entire installation. Some alarms can be focused on a given router for instance while other alarms may be correlating across multiple nodes.

[1778] Below these interface components are various other components, but short of the ‘Save’, ‘Cancel’, and ‘Enabled’ sections, there is nothing of extreme importance.

[1779] One final note is that of saving. ANY time a new trigger or a major change is made to the system, save as soon as possible. There are various flaws with the IDE which will appear when you create various new interface pieces (i.e. triggers, state) that don't appear in the choice boxes for implementation until AFTER a save is made.

[1780] Building The Alarm

[1781] Utilizing the toolbar, building basic new alarms is quite simple, but make sure that the totality of the design is understood before undertaking more extreme alarms. In any case, in this creation phase there are a number of important points to take into account.

[1782] Begin with state creation. In the eventuality that ECM is being interfaced with HPOV, the state creation itself becomes important. The color chosen for the state in question is what will appear on the IPMap in HPOV. This again falls into the realm of “prior proper planning” to make the best utilization of the available colors. HPOV has five available, and ECM has many, many more. These must be distilled properly for the interaction to occur.

[1783] Transition definition is just as important from a planning perspective. Once the transition trigger has been selected, the actions attached to it should be chosen carefully. Please remember to save frequently (especially if you notice a missing trigger in the drop down list after you just created it).

[1784] An important note is that the given transition must be pending for the trigger to be generated. This is what ECM refers to as ‘Smart Polling’. This design says that the individual poll or trap mask will NOT occur unless the trigger that they generate is waiting on a transition in an active alarm in the product. The polls do not occur unless they could possibly generate a transition. Therefore, even if all the polls were enabled in the product. If they did not have an attached transition waiting to occur, then they would wait idly until a transition necessitated their action.

[1785] The actions associated with any given transition fall into two categories. That of PERL subroutines, and then everything else. It is conceivable that whole transitions could consist of vast PERL subroutines that would generate all the triggers and maintain all the correlation required by the product/installation. PERL subroutines will be considered in a separate section of this document, but their existence as a transition action is of extreme importance in defining your state transition diagrams.

[1786] If the use of PERL on the transition seems overkill for your needs then the remaining actions fall into internal and external categories:

[1787] Internal—Action Router, Alarm Counter, Clear Trigger, Delete Node, Fire Trigger, Set Attribute and Notes

[1788] External—Beep, Command, EventLog, Inform, Inform OpC, Log to File, Log To dB, Microsoft Mail, Paging, Send Trap, SNMP Set and SMTP Mail

[1789] These actions should be examined thoroughly in defining what requirements are set for your alarm in particular.

[1790] The Patroller To Event Correlator and Manager Interface—SNMP Method

[1791] An Introduction

[1792] For application and server monitoring, the patroller is used. This creates a monitoring layer that resides on individual systems in the form of agents. These agents poll for user-defined information on pre-selected intervals and typically push this data up to a central point of control. From this point of control the data can be collated and correlated to provide historical data on the performance of the systems in the environment.

[1793] Another possibility with the system is that SNMP traps can be generated. These traps are typically generated in dealing with thresholds that have been defined for their agents, and upon their generation ECM can receive and handle these much like any other trap that would come in.

[1794] The Specifics

[1795] Remember that ECM has mask definitions. These mask definitions allow “screens” to be established that observe incoming SNMP trap information and “screen” out the information that you require. Remember also that there were three important sections to the mask. There was the generic and specific trap ID's as well as the enterprise OID. It is through these specifics that the mask definition is set-up to watch for data that it needs.

[1796] Using the generic trap number of ‘6’ and the enterprise OID of 1.3.6.1.4.1.1031, the traps can be received and handled through mask definitions. The actual configuration of the traps to be sent is outside the scope of this document, but the specific trap ID is set during the PATROLLER configuration and implementation. For instance, in the case of the development environment, ID's 41 and 42 were used. Once a mask is configured for these parameters, the traps can be received into ECM for correlation.

[1797] As in most cases, it is probably a good idea to enable the ‘AllTraps’ alarm to receive the traps and write them to log. With the ‘log to file’ action enabled in the alarm, you can set the action to verbose and actually see the incoming traps as they are written. From these logs you can derive the necessary modifications to the masks that you wish to produce.

[1798] The PATROLLER Trap—Handling The Trap

[1799] Once the actual trap has been received into the system, the parsing of the trap has to be done through PERL in most cases. There are other means to deal with traps, but PERL is native to ECM. This led to its' use in the phase two development of this product for the Service Assurance project.

[1800] ECM has reserved a number of“special” variables. These variables allow for interaction with the incoming trap, and provide a means by which to parse the trap without having to resort to all manner of regular expressions or some other form of tawdry pattern matching. Of particular interest is the “Vb” series of variables.

[1801] Utilizing these “Vb” variables, you can get at the variable bindings that are appended to the end of the SNMP trap that was transmitted via PATROLLER. As this is where the actual data resides, these variables make extraction and correlation a breeze. PATROLLER builds its' variable bindings in a single dimension, and to retrieve this data requires nothing more than extraction of the ‘VbValue(0)’ variable. This comes in as straight text in the form of “Application:Instance:Parameter:State:Value”.

[1802] Parsing requires the ‘split’ function from the PERL libraries, and with some simple logic and variable creation, the values can be parsed quite easily. There are some problems with ECM at this point though. Refer to the section on PERL that is contained in this document for more information.

[1803] With the trap parsed in this manner, the values can be easily correlated. This step can be imbedded in a PERL function and reused across multiple alarms with relative ease. One precaution that must be stated again is that of naming conventions. This point can not be belabored enough. Make sure that you put the PERL that is created into some kind of standardized format both by name and by the comments placed within.

[1804] PERL—Notes And Addenda

[1805] The Pluses

[1806] The installation of PERL that comes with ECM has much to offer to the correlation model designer. The flexibility is just about boundless, and with the addition of external PERL modules, the boundaries that do exist are spread even further away.

[1807] The PERL variables allow for deep SNMP trap broadcasts. Through the variable bindings that are attached, the extraction of this data is basic. The included functions allow for interaction both with the ECM structure (the FireTrigger and AssignPropertyGroup functions) as well as system level or beyond (limitless PERL modules). In our case we even went to the extreme of handling SNMP outbound traps through a PERL ‘system’ call to an external trap generation utility.

[1808] The Minuses

[1809] PERL is gawky and complex to the uninitiated, and the code can be somewhat complex to operate. ECM also has a buggy interpreter that causes some concern with regards to larger scale subroutines. This buggy-ness results in open statements that only work in particular ways (i.e. open(LOG,“filename\.log”);).

[1810] In addition to the above weaknesses, the lack of a sensible IDE makes for some extremely time consuming code development. Liberal use of ‘echo’ statements is just about the only way to achieve a solution for broken code.

[1811] Also, there is the extreme problem of testability as noted above. Either through the lack of a debugger or the lack of a test environment, this weakness creates some time consuming development of code. Do not attempt to get around this by writing code out of the IDE either. Regular PERL code doesn't work most of the time in ECM. The differences are subtle, but as you experience larger and larger code, the differences become more problematic.

[1812] The Reality

[1813] Coding can be difficult anywhere. The flexibility that PERL offers within the product seems to outweigh this though. The predefined transition functions will only get you so far. PERL has to pick up the pace and carry models beyond this. One may build in some basic functionality, but without the impetus of an API into the toolset, adaptation of these functions is limited. Some of the more basic features are extremely useful (i.e. FireTrigger and AlarmCounter), but more advanced functionality screams PERL.

[1814] Some Notes

[1815] There is no native way to get timing. The way that was utilized in phase two design was with the ‘localtime’ PERL function.

[1816] Traps and masks have somewhat different formats (i.e. not trap parameters)

[1817] Keep in mind that the namespace/environment variables are normally global for the entire ECM environment. To this end, any alarm out there can access variables from any other alarm that is in existence with the installation. Liberal use of the ‘my’ scope limiter will allow for some separation of the variables in theory, but this theory has not been put to the test. The best idea is to logically separate variables through some sort of naming convention. This kind of organization is difficult but recommended.

[1818] Loading the Archived Models

[1819] The models and associated materials created in the phase 1 and 2 development environments were subsequently exported to two files currently located in the \\nsmmnt10\IPSA\Product Development\Phase 2 Deliverables\Event Handling System directory. These files are SA_Phase2_Models.mod and .txt. Below are listings of their contents and instructions on the importation process.

[1820] To import the files into your ECM installation.

[1821] Gain filesystem access to the above listed files.

[1822] Open an ECM client and log in to the system that will serve as your host ECM server.

[1823] Go to Server on the menu bar.

[1824] Click on Import.

[1825] Enter the full path and name of the .mod file.

[1826] The files will be imported and established within ECM.

[1827] A listing of the imported files and attachments (this was derived from the SA_Phase2_Models.txt file).

[1828] The above contains all of the actual modifications that were made to ECM during phase 2 and 1 of the IPSA development effort. In addition to these files are any tangential pieces that were “touched” by the modified ECM components (models, polls, et.al.).

[1829] External Applications

[1830] Trapgen

[1831] This is an executable that allows for manual trap generation through either the command line or PERL. The set-up used in phase 2 consists of the following:

[1832] trapgen nsmmws16 1.3.6.1.4.1.78 nsmmws17 6 3 105 1.3.6.1.4.1.78.0.3 octetstringascii ‘string’

[1833] Of particular interest is the ‘octetstringascii’ option. This allows strings to be collated and passed through the utility. Note that this was being passed across to an HPOV receiver that had to be configured separately.

[1834] Establishing this requires some HPOV experience and falls out of the scope of this document, but one heads up would be that you need to go inside the ‘Event Configuration Utility’ inside HPOV. Once inside, either build a new enterprise instance or adapt an old one. After picking the enterprise though, you need to create an event instance that fits the event id that you choose in your trapgen command line (i.e. the 1.3.6.1.4.1.78.0.3 part of the example above).

[1835] Once finished, you should be able to pass events via traps from ECM to HPOV. To observe these events, open the ‘Events Browser’, and they should be listed in date received order.

[1836] MIB Browser

[1837] A component of the HPOV toolset is the SNMP MIB browser. This is a useful tool for exploring the base objects that we have access to through ECM. Gain access to this tool from the HPOV manager, and you can use it to explore remote MIB's, and dig through the available MIB's for objects of interest.

[1838] Remember that the compiled MIB's that are engaged with ECM limit the number of base objects to the ones specified in the ASN.1 file that was specified at compile time. These optional MIB's extend and expand the capabilities of the polls and alarms, thus allowing for more specificity in SNMP data collections.

[1839] Complete after Requirements are Scheduled into a Release:

[1840] Event Handling Requirements

[1841] FIG. 31 illustrates an embodiment of the present invention which maps events on a network with service assurance capabilities. In operation 3100, a network is monitored for the occurrence of availability events, threshold events, and trap events. At least one occurred event is correlated to at least one other occurred event in operation 3102 to generate at least one correlating event. In operation 3104, the occurred events and correlating events are mapped on at least one network map. The network map is subsequently displayed in operation 3106.

[1842] In one embodiment of the present invention, the step of monitoring the network further comprises: tracking the availability of individual components of network for events, tracking the availability of individual services of the network for events, tracking the availability of individual processes of an operating system of the network for events, tracking the status of agent processes on individual components of the network for events, monitoring the operating system and application performance of network for threshold events, and monitoring traps of the network for events.

[1843] In yet another embodiment, the network map is a node level map and/or an event level map. The node level map displays node responding events, agent not responding events, and/or node down events. The step of mapping the occurred events and correlating events when the network map comprises the event level map further comprise of additional steps. In particular, the occurred events and correlating events may be filtered based upon predetermined criteria. The filtered events may also be mapped on the event level map. In still yet another embodiment, at least one notification action is generated based upon the occurred events and/or correlating events.

[1844] Availability Events

[1845] This section details the three availability events monitored. Node Up and Node Down/Interface Up and Interface Down—Tracking an individual network component (such as a router, server, workstation, etc.). This will be tracked using Network Node Manager and ECM. We will track all nodes which we monitor on the test network, including the following: nsmmws16, nsmmws09, twmmnt02, twmmdb02, nsmmrt03, nsmmrt04. When a Node or Interface fails to respond to a ping, a Node or Interface Down event for the specific node will be generated. When a Node or Interface responds to a ping after immediately after failing to respond to a ping, a Node or Interface Up for the specific node event will be generated.

[1846] Service Up and Service Down—Tracking an individual network service (FTP, NNTP, POP3, SMTP, DNS, HTTP, and RADIUS (RADIUS is tracked as a probe only)). This will be tracked using the Collector Internet Service Monitor. When a service fails to respond to the ISM a Service Down event for the specific service will be generated. When a Service responds to the ISM immediately after failing to respond to the ISM, a Service Up event for the specific service will be generated.

[1847] Process Up and Process Down—Tracking an individual process on a Windows NT or UNIX system. This will be tracked using Patroller Process KMs. When the number of specific processes with a specific name running under a specific owner changes from a preset number, a Process Down event will be generated for the specific process, owner, and number of processes. When the number of specific processes with a specific name running under a specific owner changes back to the preset number from another number, a Process Up event event will be generated for the specific process, owner, and number of processes.

[1848] SNMP Agent Up and SMMP Agent Down—Tracking the status of the SNMP agent process on individual nodes. This will be tracked using ECM. When an SNMP agent fails to respond to a ECM SNMP status query, an SNMP Agent Down event will generated for the specific node. When an SNMP agent responds to a ECM SNMP status query after immediately after failing to respond to a SNMP status query, an SMP Agent Up event will be generated for the specific node.

[1849] Operating System and Application Performance Threshold Events

[1850] This section details the operating system threshold events and the application performance threshold events monitored. Patroller will be used to monitor processes and send a Parameter High event for a specific parameter and node when a parameter crosses a threshold by increasing its value and send a Parameter Low event for a specific parameter and node when a parameter crosses a threshold by decreasing its value.

[1851] The following parameters should be monitored for Phase 2. Note that these parameters are for proof of concept only, as parameters can be added or removed very easily.

[1852] SNMP Performance Threshold Events

[1853] This section details the operating system threshold events and the application performance threshold events monitored. ECM will be used to monitor SNMP variables and send a Parameter High event for a specific parameter and node when a parameter crosses a threshold by increasing its value and send a Parameter Low event for a specific parameter and node when a parameter crosses a threshold by decreasing its value.

[1854] The following parameters should be monitored and possibly more:

[1855] Generic SNMP Traps Events

[1856] This section details the requirements for monitoring any MIB defined trap from any monitored SNMP device. The SNMP trap will by generated asynchronously by any monitored node and will be translated into an event.

[1857] Event Correlation

[1858] This section details the requirements for Event Correlation. The architecture will allow arbitrary correlation of any of the above events with regard to each other and time. This means that we will be able to generate new, correlated events based upon any combination of the above events. We will use ECM for all correlation in Phase 2; we may also use Collector for limited non SNMP-correlation in later phases. For Phase 2, we will perform the following correlations:

[1859] ICMP/SNMP Status—We will determine the status of both the ICMP and SNMP agent status of nodes. We will then generate one or more events based upon this combined status.

[1860] Downstream Suppression—We will suppress node down events from nodes behind a certain network elements (for Phase 2, routers) when the network element is down.

[1861] Availability/Service/Process Status—Suppress service events and process events when a node is down.

[1862] Event Notification

[1863] This section details the requirements for Event Notification. Each event must be able to trigger one or more notification actions. A notification action consists of:

[1864] An alphanumeric text page to an arbitrary pager

[1865] An internet email to an arbitrary account

[1866] An initiation of an arbitrary script on the network management workstation (remote script initiations will not be imeplemted in Phase 2)