Monitoring network entities via a central monitoring system

Abstract

Systems and method of the present invention provide for one or more server computers configured to receive a plurality of data published by a network entity and identify, within the data: the network entity that published the data, a sample of one or more metrics for the network entity and a sample type of each of the one or more samples. The one or more server computers may further be configured to calculate a network resource usage score, using the one or more metrics according to one or more rules for each of the sample types identified, for the sample.

The inventions claimed are: 
     
         1 . A method, comprising:
 retrieving, by a server computer from a data stream provided by a first server in a plurality of servers, a first encoded file identifying the first server, a first raw performance datum of the first server, and a first sample type of the first raw performance datum;   normalizing, by the server computer, the first raw performance datum using the first sample type of the first raw performance datum to generate a first normalized performance datum;   calculating, by the server computer, according to at least one scoring rule for the first sample type, a first score using the first normalized performance datum; and   responsive to a determination by the server computer that the first score is outside a minimum or maximum boundary determined by the first sample type, generating, by the server computer, a user interface including a recommended action to resolve a cause of an alert as defined for the first sample type.   
     
     
         2 . The method of  claim 1 , further comprising:
 retrieving, by the server computer from a second data stream provided by a second server in the plurality of servers, a second encoded file identifying the second server, a second raw performance datum of the second server, and a second sample type of the second raw performance datum;   normalizing, by the server computer, the second raw performance datum using the second sample type of the second raw performance datum to generate a second normalized performance datum;   calculating, by the server computer, according to at least one scoring rule for the second sample type, a second score using the second normalized performance datum; and   comparing, by the server computer, the first score to the second score to determine the recommended action.   
     
     
         3 . The method of  claim 1 , wherein the first server has not run calculations on the first raw performance datum. 
     
     
         4 . The method of  claim 1 , wherein the plurality of servers include a plurality of unrelated network nodes across one or more server clusters. 
     
     
         5 . The method of  claim 1 , wherein the first encoded file is published via a message broker software utilizing a publish/subscribe model, wherein the first server publishes the first sample type of the first raw performance datum as a message topic. 
     
     
         6 . The method of  claim 1 , wherein the first encoded file at least partially determines the alert. 
     
     
         7 . The method of  claim 1 , wherein the first raw performance datum includes a collection of data containing at least one measurement of data for the first server over a specific period of time. 
     
     
         8 . The method of  claim 1 , wherein the first sample type identifies a purpose of the first server and the at least one scoring rule is at least partially determined by the purpose of the first server. 
     
     
         9 . A method, comprising:
 retrieving, by a server computer from a data stream provided by a first server in a plurality of servers, a first encoded file identifying the first server and a first raw performance datum of the first server;   normalizing, by the server computer, the first raw performance datum to generate a first normalized performance datum; and   generating, by the server computer, a user interface including a recommended action to resolve a cause of an alert using the first normalized performance datum.   
     
     
         10 . The method of  claim 9 , further comprising:
 retrieving, by the server computer from a second data stream provided by a second server in the plurality of servers, a second encoded file identifying the second server and a second raw performance datum of the second server;   normalizing, by the server computer, the second raw performance datum to generate a second normalized performance datum; and   wherein the recommended action is at least partially determined by the second normalized performance datum.   
     
     
         11 . The method of  claim 9 , wherein the first server has not run calculations on the first raw performance datum. 
     
     
         12 . The method of  claim 9 , wherein the plurality of servers include a plurality of unrelated network nodes across one or more server clusters. 
     
     
         13 . The method of  claim 9 , wherein the first encoded file is published via a message broker software utilizing a publish/subscribe model, wherein the first server publishes a first sample type of the first raw performance datum as a message topic. 
     
     
         14 . The method of  claim 9 , wherein the first raw performance datum includes a collection of data containing at least one measurement of data for the first server over a specific period of time. 
     
     
         15 . A system, comprising:
 a server computer executing a single instance of a network monitoring software communicatively coupled to a network and configured to:
 retrieve, from a data stream provided by a first server in a plurality of servers, a first encoded file identifying the first server, a first raw performance datum of the first server, and a first sample type of the first raw performance datum; 
 normalize the first raw performance datum using the first sample type of the first raw performance datum to generate a first normalized performance datum; 
 calculate, according to at least one scoring rule for the first sample type, a first score using the first normalized performance datum; and 
 responsive to a determination by the server computer that the first score is outside a minimum or maximum boundary determined by the first sample type, generate a user interface including a recommended action to resolve a cause of an alert as defined for the first sample type. 
   
     
     
         16 . The system of  claim 15 , wherein the server computer is further configured to:
 Retrieve, from a second data stream provided by a second server in the plurality of servers, a second encoded file identifying the second server, a second raw performance datum of the second server, and a second sample type of the second raw performance datum;   normalize the second raw performance datum using the second sample type of the second raw performance datum to generate a second normalized performance datum;   calculate, according to at least one scoring rule for the second sample type, a second score using the second normalized performance datum; and   compare the first score to the second score to determine the recommended action.   
     
     
         17 . The system of  claim 15 , wherein the first server has not run calculations on the first raw performance datum. 
     
     
         18 . The system of  claim 15 , wherein the plurality of servers include a plurality of unrelated network nodes across one or more server clusters. 
     
     
         19 . The system of  claim 15 , wherein the first encoded file is published via a message broker software utilizing a publish/subscribe model, wherein the first server publishes the first sample type of the first raw performance datum as a message topic. 
     
     
         20 . The system of  claim 15 , wherein the first raw performance datum includes a collection of data containing at least one measurement of data for the first server over a specific period of time.