US007600007B1
`
`(12) Ulllted States Patent
`Lewis
`
`(10) Patent N0.:
`(45) Date of Patent:
`
`US 7,600,007 B1
`*Oct. 6, 2009
`
`(54) METHOD AND APPARATUS FOR EVENT
`CORRELATION IN SERVICE LEVEL
`MANAGEMENT (SLM)
`
`(75) Inventor: Lundy Lewis, Mason, NH (US)
`
`(73) Assignee: Computer Associates Think, Inc.,
`lslandia, NY (US)
`
`( * ) Notice:
`
`Subject to any disclaimer, the term of this
`patent is extended or adjusted under 35
`U.S.C. 154(b) by 0 days.
`
`5,495,470 A
`5,504,906 A
`5,517,622 A
`5,640,505 A
`
`2/1996 Tyburski et a1. ........... .. 370/248
`4/1996 Lutoff ...................... .. 709/302
`5/1996 Ivanoff et al. ............. .. 709/232
`6/1997 Hearn et al.
`
`-
`(Commued)
`FOREIGN PATENT DOCUMENTS
`
`EP
`
`0 621 716 A2 10/1994
`
`This patent is subject to a terminal dis-
`claimer.
`
`(Continued)
`
`OTHER PUBLICATIONS
`
`(21) Appl. N0.: 09/578,156
`
`_
`-
`(22) F?ed'
`
`May 23’ 2000
`Related US. Application Data
`
`(60) Provisional application No. 60/135,492, ?led on May
`24’ 1999'
`(51) Int Cl
`G06F 15/173
`
`(200601)
`
`(52) US. Cl. ....................... .. 709/223; 709/224; 714/47;
`714/48
`(58) Field of Classi?cation Search ............... .. 709/223,
`709/231; 345/810; 370/222
`See application ?le for complete search history,
`_
`References Cited
`
`(56)
`
`U.S. PATENT DOCUMENTS
`
`4,977,390 A 12/1990 Saylor et a1. .............. .. 340/521
`5,079,765 A
`1/1992 Nakamura .... ..
`.. 340/8258
`
`5,204,955 A
`4/1993 Kageiet a1. . . . . .
`. . . .. 395/575
`5,261,044 A 11/1993 Lewis et a1. ............... .. 395/159
`5,293,323 A
`3/1994 Doskocil
`5,309,448 A
`5/1994 Bouloutas ................. .. 395/183
`5,317,568 A
`5/1994 BiXby et a1. .............. .. 370/401
`5,436,909 A
`7/1995 Dev
`5,450,408 A
`9/1995 Phaal ....................... .. 370/401
`5,473,608 A 12/1995 Gagne et a1. .............. .. 370/401
`
`_
`_
`_
`_
`Network and Distributed Systems Management, edited by Morris
`Sloman, Imperial College of Science, Technology & Medicine, Uni
`versity of London, Addison-Wesley Publishing Co., Chapter 11, pp.
`273-301'
`
`(Continued)
`Primary ExamineriVivek Srivastava
`Assistant Examinerileffrey R Swearingen
`(74) Attorney, Agent, or FzrmiPillsbury Winthrop Shaw
`Pittman LLP
`
`(57)
`
`ABSTRACT
`
`Method and apparatus for service level management, wherein
`business processes are composed of services. A state of the
`service is de?ned by one or more service parameters, and the
`service parameters depend upon performance of network
`components that support the service, e. g., component param
`eters. The state of the service may depend, for example, on a
`collection of service parameter values for availability, reli
`ability, security, integrity and response time. A service level
`agreement is a contract between a supplier and a customer
`that identi?es services supported by a network, service
`parameters for the services, and service levels (e.g., accept
`able levels) for each service parameter.
`
`23 Claims, 21 Drawing Sheets
`
`Level 2-‘Inferdomain
`727x Alarm Correlation
`
`Level 1-' Im‘radomain
`1263‘Aldrm —to-Service
`Mapping
`
`.v Level O= lm‘radomain
`125 E vent Correlaf
`
`ln'lerdomain
`Alarms
`
`lnirodomoin
`Alarms
`
`Imradomain
`Events
`
`724
`
`ServiceNow's Exhibit No. 1003
`
`001
`
`

`
`US 7,600,007 B1
`Page 2
`
`US. PATENT DOCUMENTS
`
`7/1997 Whitney .................... .. 714/47
`5,646,864 A *
`5,680,552 A 10/1997 Netravaliet al. ..
`. 395/2008
`5,696,486 A 12/1997 Poliquin et al.
`340/506
`5,761,502 A *
`6/1998 Jacobs ...... ..
`707/103R
`5,768,501 A
`6/1998 Lewis
`395/185
`5,905,715 A
`5/1999 AZarmietal.
`370/244
`6,012,095 A *
`1/2000 Thompson et al.
`709/231
`6,070,244 A *
`5/2000 Orchieretal.
`713/201
`6,327,677 B1* 12/2001 Garg et a1. ...... ..
`6,336,139 B1* 1/2002 Feridun etal. .
`706/45
`6,356,885 B2 *
`3/2002 Ross et al.
`709/223
`6,363,421 B2 *
`3/2002 Barker et al.
`714/47
`6,430,712 B2 *
`8/2002 Lewis .......... ..
`. 709/224
`6,442,694 B1 *
`8/2002 Bergman et al.
`. 707/104.1
`6,446,136 B1 *
`9/2002 Pohlmann et a1. .
`6,604,137 B2 *
`8/2003 Cowan et al. ............. .. 709/224
`
`FOREIGN PATENT DOCUMENTS
`
`EP
`EP
`W0
`W0
`W0
`
`0 632 617 A2
`0854605 A2
`WO 93/10495
`WO 94/23514
`WO 95/08794
`
`1/1995
`7/1998
`5/1993
`10/1994
`3/1995
`
`OTHER PUBLICATIONS
`
`Green Paper on Object Model for Services, Mar. 12, 1997, Editor:
`Bryan Wood (bmw@mci.org.uk), pp. 1-4.
`ODP Functions and CORBA Services, Background Material For
`Green Paper on ODP Functions and Object Services, Bryan Wood,
`Open-IT Ltd., Mar. 12, 1997, pp. 1-24.
`ISO/IEC JTC l/SC 21 N9309, QoSiBasic Framework4CD Text,
`Joint ISO/IEC & ITU-T, Interim Meeting, Toronto, Jan. 9-13, 2005,
`Open Systems Interconnection, Data Management and Open Distrib
`uted Processing, Secretariat: USA (ANSI), Jan. 1995.
`Quality of Service (QoS) in OMG, Chris Sluman (cms@mci.org.uk),
`Jeremy Tucker (tuckerj@logica.com), J .P, LeBlanc (jpleblanc@ibm.
`net), OMG Green Paper, 97-03 -06iVersion 0.3iNov. 25, 1998, pp.
`1-17.
`Quality of Service in Distributed Systems, Guest Editorial, Andrew
`T. Campbell, S. Keshav.
`Object Management Group (OMG), Jun. 30, 1997, Object Services
`and Consulting, Inc.
`Position Paper: Resource Management for Complex Distributed Sys
`tems, Michael B. Davis and Jaroslaw J. Sydir, SRI International,
`Information, Telecommunications, and Automation Division, Menlo
`Park, California 94025, Aug. 26, 1996.
`Taxonomy for QoS Speci?cations, Bikash Sabata Saurav Chatterjee,
`Michael Davis Jaroslaw and Thomas F. Lawrence, SRI International,
`333 Ravenswood Ave, Menlo Park, California 94025, Published in
`the proceedings of Words ’97, Feb. 5-7, 1997, Newport Beach, Cali
`fornia.
`Integrated Quality of Service for Multimedia Communications,
`Andrew Campbell, Geoff Coulson, Franscisco Garcia, David
`Hutchinson and Helmut Leopold, 1993 IEEE, 0743-166X/93, pp.
`732-739.
`Crafting Successful Service Level Agreements, Peter Bendor
`Samuel (info@eversoft.com), Everest Software Corp., wysiwyg://
`1426/http://www.summitonline.com/service/papers/everest.
`
`Object-Based QoS Management Framework, Pradeep Ray, Depart
`ment of Computing, Univeristy of Western Sydney, Nepean,
`Kingswood, NSW, 2747, Australia, Apr. 22, 1997.
`Multimedia Service Delivery with Guaranteed Quality of Service,
`M.Fry et al., CRC For Distributed Systems Technology, University of
`Technology, Sydney, Sydney 2007, Australia.
`L. Lewis, A1 and Intelligent Networks In The 1990’s And Into The
`21st Century, Chap. 7, pp. 109-124, Worldwide Intelligent Systems,
`J. LeibowitZ and D.S. Prerau (Eds.), IOS Press, Sep. 1995.
`HeinZ-Gerd Hegering, “Integrated Network And System Manage
`ment,” 1994: Section 2.3iDifferentation Between Network and
`System Management, pp. 97-100; Chapter 14iIntegration of Man
`agement Tools Into Platforms, pp. 359-373.
`L. Lewis, “Spectrum Service Level Management De?nition, Offer
`ings, And Strategy,” Technical Note LML-CTRON-98-02, ‘Online!,
`Mar. 30, 1998, pp. 1-17, XP002150696, Retrieved from the Internet:
`URL : www.apri sma. com/white-papers/spectrum/slm.pdf ’retrieved
`on Oct. 18, 2000!
`“Saman Strategic Service Management,” Gecko Software Saman
`Whitepaper, ‘Online! 1997, pp. 1-5, XP002150697, Retrieved from
`the Internet: URL:http://www.geckoware.com/products/s00 01-w1.
`htm, ’retrieved on Oct. 18, 2000!
`John McConnell; “Spectrum and NerveCenteriA New Level of
`Integration”May 1996, McConnell Consulting, Inc., Boulder, CO.
`Lundy Lewis and Jim Frey; “Incorporating Business Process Man
`agement into Network and Systems Management”, Apr. 9-11, 1997,
`Proceedings of ISADS 97, IEEE Computer Society Press, Los
`Alamitos, CA.
`Schlaerth, J .P.; “A Concept for Tactical Wide-Area Network Hub
`Management,” Proceedings of the Communications Conf.
`(MILCOM), Long Branch, NJ, Oct. 2-5, 1994, vol. 2 of3, IEEE, pp.
`644-649.
`Grady Booch: “Object-Oriented Analysis and Design (with Applica
`tions)” Second Ed., 1994 Ch. 2 pp. 28-80, Addison-Wesley Publish
`ing Co.
`L. Lewis, “Spectrum Service Level Management De?nition, Offer
`ings, And Strategy,” Technical Note LML-CTRON-98-02, ‘Online!,
`Mar. 30, 1998, pp. 1-17, XP002150696.
`K. Kubo et al., “A Method Of Extracting Management Information
`For Service Management,” NTT Review, JP, Telecommunications
`Association, Tokyo, vol. 10, No. 2, Mar. 1, 1998, pp. 63-68,
`XP000740456.
`L. Lewis et al., “Incorporating Business Process Management Into
`Network And Systems Management,” ProceedingsiISADS
`97iThird International Symposium On Autonomous Decentralized
`Systems (Cat. No. 97TB100111), Berlin, Germany, Apr. 9-11, 1997,
`pp. 385-392, XP002150698, 1997, Los Alamitos, CA, USA, IEEE
`Comput. Soc. Press, USA.
`L. Lewis et al., “Event Correlation In Spectrum And Other Commer
`cial Products,” Technical Note CTRON-LML-99-05, ‘Onlinel, May
`5, 1999, pp. 1-8, XP002159591.
`L. Lewis, “Managing Computer Networks: A Case-Based Reasoning
`Approach,” 1995, Artech House, Inc., Norwood, MA, US,
`XP002159593.
`“Saman Strategic Service Management,” Gecko Software Saman
`Whitepaper, ‘Online!, 1997, pp. 1-5, XP002150697.
`L. Lewis, “A FuZZy Logic Representation Of Knowledge For Detect
`ing/ Correcting Network Performance De?ciencies,” Network Man
`agement and Control, vol. 2, 1994, pp. 1-7, XP002159592.
`
`* cited by examiner
`
`ServiceNow's Exhibit No. 1003
`
`002
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 1 0f 21
`
`US 7,600,007 B1
`
`70
`
`\ [7
`fr!
`SL“
`Business. Processes
`
`3
`
`(17
`Service Level Reports
`
`composed of
`
`composed of
`
`1'4
`l
`t ----------------- ~35, --------- ~~
`:
`I
`I
`I
`I
`I
`I
`l
`l
`i
`I
`I
`:
`I
`I
`I
`|
`\
`1
`I _____________________________________ __ __!
`
`72
`f
`Services
`
`measured by
`
`f7
`Service Levels
`
`marked by
`
`,5
`r
`\ Service Parameters
`
`composed of
`
`15,
`
`79
`I’
`Componems monitored/controlled by component pummeiers
`
`mapped info
`
`is a kind of
`
`Transmission Device /27
`Transmission Line r25’
`Computer System r 29
`Application
`{"30
`
`monitored/controlled by
`
`r20
`A" After"
`
`is o kind of
`
`A27
`Device Agent
`(22
`Traffic Agent
`r23
`System Agent
`Application Agent /24
`Special-Purpose Agent r25
`Multicomponent Agent r26
`
`Fig. 7
`
`ServiceNow's Exhibit No. 1003
`
`003
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 2 0f 21
`
`US 7,600,007 B1
`
`/-37
`
`36’ /
`i
`
`Overseer
`
`SLM Use Case Model
`33
`
`View SLAs
`
`“i < 34
`35
`
`Supplier or
`Consumer
`
`_ View SLRs
`
`35
`
`37
`
`Fly. 2
`
`4 7\ AIGC'L'J',“
`
`Siren /50
`
`48"\ P?ger
`
`E-mail /57
`
`
`
`Trouble 4 9’\ Ticket
`
`
`
`Phone /
`
`isakind of
`
`V
`53
`Notifier
`Medium /
`l
`
`communicafes with
`
`Alarm /54
`Notifier
`
`handled by
`
`46
`Alq'rm
`ObjGCl /
`
`results in
`
`Eveni
`Correlation /55
`
`40
`Device
`“mm /
`Line
`/47
`Alarm
`System 42
`is C! kIIDdOf
`Alarm /
`Application 43
`Alarm /
`User
`Alarm /44
`S
`'
`Aelgll'lisle /4‘5
`
`Fly. 3
`
`ServiceNow's Exhibit No. 1003
`
`004
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 3 0f 21
`
`US 7,600,007 B1
`
`62
`\
`
`The Enterprise
`'F“ "P 4‘
`
`77
`
`Overseer
`
`‘a ;,
`
`|_
`32x; /g —
`
`Supplier or
`Consumer
`
`59
`
`1—O lnferface Object
`O Enii’ry Objec’r
`@\ Control Object
`
`_
`
`Monitoring Agents
`
`JAgem‘ Buffers
`67—70
`
`—~— D afabas e Inferface
`
`j
`50 __
`
`I
`
`67
`@ SLM Dafabase
`
`Fig’. 4
`
`The E nferpri se
`
`6'0
`
`38*»
`Overseer
`
`WinWa'rch
`Patrol
`77/ \ / k7:5’
`Spectrum \75
`\\74\ / \ [7.9
`32K; \ \ Con?nuity
`RMONII+
`Supplier or
`Consumer
`
`\
`
`75
`
`Specfrum
`Data Warehouse
`
`Fig. 5
`
`ServiceNow's Exhibit No. 1003
`
`005
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 4 0f 21
`
`US 7,600,007 B1
`
`Monitoring
`Subsystem
`
`Reporting
`Subsystem
`
`88
`Senso
`
`m 9’
`
`\_____.____
`90
`fectors
`
`\89
`
`f05
`
`Level 3 Behavior
`704
`Level 2 Behavior
`
`—>1 Level 1Behcvior
`
`:
`
`Level 0 Behavior
`
`''
`
`706
`
`8 100
`
`ServiceNow's Exhibit No. 1003
`
`006
`
`

`
`ServiceNow's Exhibit No. 1003
`
`007
`
`

`
`US. Patent
`
`Oct. 6, 2009
`
`Sheet 60f21
`
`US 7,600,007 B1
`
`727,\_ Level 2-'lnrerdomain
`Alarm Correlation
`
`Level 1= Intradomain
`726"“ Aldrm-fo-Service
`Mapping
`
`,2,» mam-550256;"
`E van! Correla fionl
`
`lnterdomain
`Alarms
`
`lntradomain
`Alarms
`
`Intradomain
`
`724
`
`Domain 1
`
`F /'g. 77
`
`NC
`
`730
`
`AN
`\
`
`/—’732
`
`CLI
`
`ss-1
`
`776
`
`83-2
`
`Domain’!
`
`Domain 3
`
`Domain 2
`The Enterprise
`
`Fig. 72
`
`77.9
`
`ServiceNow's Exhibit No. 1003
`
`008
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 7 0f 21
`
`US 7,600,007 B1
`
`Accounting/Billing
`Perforrnunce Angiysis
`Copuc?y Plunmng
`Data Mining
`Service Levei Reporting
`
`Dufo
`Warehouse
`
`scrubbed
`Data 145
`
`4
`
`Agen?
`
`’734 Enterprise ’735
`Agent2
`
`Unscrubbed
`Data 747
`Enterprise r735
`
`_ I37
`
`738
`
`Accounting
`‘Data Mort
`
`Scrubb ed
`Dcttu Mort Data 745
`
`M4
`
`Unscrubbed
`Data 74!
`Enterprise J34 Enterprise J35 Enterprise /735
`Agent 1
`Agent 2
`Agent 3
`
`ServiceNow's Exhibit No. 1003
`
`009
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 8 0f 21
`
`US 7,600,007 B1
`
`Accounting
`Data Mart
`
`149 - 150
`5L1"
`Scrubbed
`Data Mart Data 745
`
`DataMart
`
`147
`
`Data
`Warehouse
`
`Scrubbed
`Data 745
`
`0142 o 145 o '44
`Operational
`Operational
`Operational Unscrubbed
`Databasei
`DatabaseZ
`Daiabase3 Data 147
`
`734
`Enterprise /
`Agent 1
`
`735
`Enterprise /
`Agent 2
`
`136
`Enterprise /
`Agent 3
`
`the Enterprise
`
`Hg. 75
`
`ServiceNow's Exhibit No. 1003
`
`010
`
`

`
`ServiceNow's Exhibit No. 1003
`
`011
`
`

`
`US. Patent
`
`Oct. 6, 2009
`
`Sheet 10 0f 21
`
`US 7,600,007 B1
`
`ACA
`
`alarm correlation
`
`alarm space
`
`CSA
`
`AA
`
`IA
`
`TA
`
`TTA evenf-fo-alarm
`mapping
`
`event space
`
`U1
`C1
`8
`
`U2
`C2
`
`CS1 ~' CS2
`
`N1
`
`R1
`
`U3
`C3
`CS3
`
`U4
`C4
`CS4
`
`L f
`
`R2
`
`N2
`
`ServiceNow's Exhibit No. 1003
`
`012
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 11 0f 21
`
`US 7,600,007 B1
`
`Detect events in
`the network
`
`/
`
`For each aspect of network /
`operation, map eventlsl to
`alarrnls)
`162
`\l/
`Output alarms to /
`alarm bucket
`
`Correlate/evaluate alarms
`to determine network
`operation status
`
`//63
`
`Report network operation
`Status
`
`1'65
`identify corrective actions /
`necessary for desired operation
`of network.
`
`.
`
`.
`
`Implement corrective actions /
`or report identified
`corrective actions
`
`766
`
`F /'g. 7.9
`
`157
`Detect events for a
`specific aspect of /
`network operation
`
`Map detected events to f 168
`an alarm or alarms
`
`7'69
`Output alarm or alarms /
`
`Fig. 20
`
`ServiceNow's Exhibit No. 1003
`
`013
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 12 0f 21
`
`US 7,600,007 B1
`
`I
`
`{xi/d //7/
`775.
`
`the
`
`age/1f
`7.70,
`
`\
`
`#172
`
`Working
`Memory
`
`/ 774
`Reasoning
`Algorithm
`
`I
`I
`
`773
`(
`Ru is
`Bose
`
`F /g. 2/
`Case Libra ry
`
`I77
`
`I76 / \ 18/
`\
`/778
`r
`Problem-Q Reirleve
`Embed
`
`New
`
`.
`
`(1 .9
`7
`
`K78
`0
`
`Adopt
`
`’ Execute
`
`Fly. 22
`
`IA
`
`SDA
`
`' TA
`
`AA
`
`TTA
`
`CSA
`
`SA
`
`RTA
`
`F lg. 23
`
`ServiceNow's Exhibit No. 1003
`
`014
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 13 0f 21
`
`US 7,600,007 B1
`
`Friday J0nu0ry5 2001 “\497
`Service 1
`ServiceZ
`Service 3
`
`/2'90
`
`Up
`
`Up
`
`Down,up (“12PM
`
`Down 8-1OPM Down 8-1OPM Down 8-1OPM
`Up(Slow)
`Up
`Up
`
`Up
`Up
`
`Up
`Up (slowiy)
`
`D0wn,up ?
`Up
`
`Seo?le
`Bldgi
`
`Bldg 2
`Bldg 3
`
`Sydney
`Bldg 1
`Bidg 2
`
`Fig. 24
`
`notice
`
`uleri
`
`alarm
`
`............
`
`1O
`
`5O 40
`20
`load
`
`Fig. 25
`heavy
`
`degree
`of
`membership
`
`1O
`
`2O 3O 40
`load
`
`Fig. 26
`
`ServiceNow's Exhibit No. 1003
`
`015
`
`

`
`US. Patent
`
`Oct. 6, 2009
`
`Sheet 14 0f 21
`
`US 7,600,007 B1
`
`Define
`Grammar
`
`200
`K
`
`Define
`Membership Functions
`
`/20’
`
`i
`Define
`Fuzzy Rules
`
`/ 202
`
`Define
`V 203
`Fuzzy Inference Strategy
`
`l
`
`Define
`Defuzzifica?on Methods
`
`monitoring and
`reporting only
`
`Parameter
`Monn‘oring
`
`214i
`
`Fjg27\>pro duciion
`
`monitoring and
`conirol
`208
`
`272
`/
`
`Service
`Parameters
`
`277
`
`Pure me’rer
`Control
`
`270
`/
`numeric do'ia 205
`Defuzzi?ca?on
`
`_________ __ _/__
`
`__ __
`
`common sense data
`
`r2 09
`Fuzzy lnferen ce
`Engine
`Fig. 28
`
`ServiceNow's Exhibit No. 1003
`
`016
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 15 0f 21
`
`US 7,600,007 B1
`
`possible influences on SP/225
`___A
`f1
`i
`*1
`P1 P2 P3 P4 P5
`..
`PN SP
`12 I: I: I: I: I: I I: I r222
`
`farg Eat/224
`
`T3 ___
`
`___
`
`___
`
`___
`
`___ ___
`
`___
`
`___
`
`T4
`
`___
`
`___ ___ __ ___ ___
`
`___ ___
`
`1'5
`
`___
`
`___ ~__
`
`___
`
`___ __ ___ ___
`
`16
`
`___ ___ ___ m ___
`
`___
`
`___ ___
`
`220'\
`
`Target
`
`223'\SP=Service
`Parame1er
`
`F 19. 29a
`
`influences
`
`1stParame1er
`Spli1
`
`1sTParame1er
`Sp‘ n
`Fig. 290
`
`I
`
`1
`I
`i
`i
`i
`'
`1
`i
`;
`.1
`
`i I
`
`I
`l
`l
`1
`
`Server 11 paging space>635_5
`1229'75'9%
`
`RT>3
`3749,41.5%
`Server11 paging space 5685.5
`2520,24.T%
`
`F /g. 30
`
`.
`
`gnd Parameter
`pm
`gm Parameter
`p111
`
`rd
`3 Parameier
`S .
`pm
`3rd_Parame’rer
`SP'"
`Server 11 CPU id1e>63
`38155270
`Server 11 CPU idles63
`848,94. 2%
`
`Server 11 ba’rch delay>2.5
`202L305 /°
`Server 11 batch delayS2.5
`499.08%
`
`RT>3
`
`X= Tracer
`and CPU_.load(X)=high
`xzmseznas “- h <
`
`ue e
`on q u
`
`= |
`
`g
`
`X=Tracer
`and CPU_|oad(X)=Iow
`
`X= NFS Server
`
`and queued(X)=low < X=Server 11
`Fig. 3/
`
`X=Server11
`and CPU_ load(><)=high
`
`and CPU_load(X)=Iow
`
`ServiceNow's Exhibit No. 1003
`
`017
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 16 6f 21
`
`US 7,600,007 B1
`
`Service Agreement with XYZ Server Form
`
`fZJO
`
`Name
`Address
`Phone
`Email
`
`Policies
`
`Avoilobilify
`
`__ (select 90-1o0%)
`
`$_
`
`Response Time
`
`______(se1ec1 2-5 sec)
`
`Security
`
`lniegriiy
`
`___(selec1 high- med-10w)
`
`___(selecthigh- med-low)
`
`$__
`
`3___
`
`$__
`
`Total: $§_____
`
`Go Back
`
`{Month}
`
`Go Forward
`
`Default- Availability
`
`Response time
`
`Security
`
`lm‘egrity
`
`Send
`
`Cancel
`
`Fig: 32
`
`ServiceNow's Exhibit No. 1003
`
`018
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 17 0f 21
`
`US 7,600,007 B1
`
`264
`f
`Service Reports
`via Browser
`
`265
`f
`Specialized
`Reporting
`
`266
`/
`Data Mining
`for trend analysis
`
`[262
`
`Off-line, out-of-band management‘ \7
`(EC and restricted customer access)
`
`Data
`
`WOI'Gél-LSU
`
`Real-time, in-band management
`(EC access only)
`
`selected
`events
`
`[263
`
`Multidomuin. /Z5~9
`Al?rm Correlation
`
`258
`f
`Interface
`
`security
`events
`
`Security
`Control over
`Web Servers
`
`1251
`
`255‘!
`Definition,
`Z57\. Monitoring,and
`gantLrol
`ERvent :ltgmt, \fs
`epor mg,
`256\ Discovery,Event
`Autom?teq (‘26/
`Correlation
`Foul,‘ Rem"
`
`Faun {260
`Notification
`
`evenis
`
`Management
`of Network
`Devices
`
`Management of
`NT and Unix
`Servers
`
`X252 A 1255'
`
`0 onfig
`events
`
`colméier?g’on
`oistrigu?on o’f
`So?w are
`
`\2‘54
`
`1
`
`\
`
`/ I
`
`EC Enterprise
`
`L250
`
`Fig. 33
`
`ServiceNow's Exhibit No. 1003
`
`019
`
`

`
`US. Patent
`
`0a. 6, 2009
`
`Sheet 18 0f 21
`
`US 7,600,007 B1
`
`64'
`r2
`Standard
`Browser
`
`265'
`r
`Crystal
`Rep on‘s
`
`266‘
`r
`Syl logic D010
`Mining I00!
`
`Spectrum
`Data Warehouse
`
`Off-Hne,ou1-of-band management
`(EC andresiricfed cusfomer access)
`
`Real— time, in-band management
`(E Caccess only)
`
`I
`
`selected
`evem‘s
`
`MiCFOMUSe r259’
`NeTCool
`
`258 .
`1'
`Matrix
`
`Web Consote
`
`securify
`evenfs
`
`Axent
`Monitoring
`Agents
`
`\
`257'\ [CS Service
`Management
`
`Hcllu'gfy k {260
`e p es
`
`\
`
`speclirum K
`,
`,
`Conso idcl’red
`256 \ Eggg’o?ige
`SpectroRx. <26,
`
`server
`events
`
`Spectrum
`lnfrusjrueture
`Momformg
`Agenfs
`
`BMC Patrol
`Sy_s1err_1
`Momtorlng
`Agents
`
`con?g
`events
`
`_
`Novadxgm
`EMD
`
`L.25 '
`
`1252’ A L253’
`
`125 ’
`
`EC Enterprise
`
`L250
`
`Fig. 34
`
`ServiceNow's Exhibit No. 1003
`
`020
`
`

`
`ServiceNow's Exhibit No. 1003
`
`021
`
`

`
`ServiceNow's Exhibit No. 1003
`
`022
`
`

`
`ServiceNow's Exhibit No. 1003
`
`023
`
`

`
`ServiceNow's Exhibit No. 1003
`
`024
`
`

`
`ServiceNow's Exhibit No. 1003
`
`025
`
`

`
`ServiceNow's Exhibit No. 1003
`
`026
`
`

`
`ServiceNow's Exhibit No. 1003
`
`027
`
`

`
`ServiceNow's Exhibit No. 1003
`
`028
`
`

`
`ServiceNow's Exhibit No. 1003
`
`029
`
`

`
`ServiceNow's Exhibit No. 1003
`
`030
`
`

`
`ServiceNow's Exhibit No. 1003
`
`031
`
`

`
`ServiceNow's Exhibit No. 1003
`
`032
`
`

`
`ServiceNow's Exhibit No. 1003
`
`033
`
`

`
`ServiceNow's Exhibit No. 1003
`
`034
`
`

`
`ServiceNow's Exhibit No. 1003
`
`035
`
`

`
`ServiceNow's Exhibit No. 1003
`
`036
`
`

`
`ServiceNow's Exhibit No. 1003
`
`037
`
`

`
`ServiceNow's Exhibit No. 1003
`
`038
`
`

`
`ServiceNow's Exhibit No. 1003
`
`039
`
`

`
`ServiceNow's Exhibit No. 1003
`
`040
`
`

`
`ServiceNow's Exhibit No. 1003
`
`041
`
`

`
`ServiceNow's Exhibit No. 1003
`
`042
`
`

`
`ServiceNow's Exhibit No. 1003
`
`043
`
`

`
`ServiceNow's Exhibit No. 1003
`
`044
`
`

`
`ServiceNow's Exhibit No. 1003
`
`045
`
`

`
`ServiceNow's Exhibit No. 1003
`
`046
`
`

`
`ServiceNow's Exhibit No. 1003
`
`047
`
`

`
`ServiceNow's Exhibit No. 1003
`
`048
`
`

`
`ServiceNow's Exhibit No. 1003
`
`049
`
`

`
`ServiceNow's Exhibit No. 1003
`
`050
`
`

`
`ServiceNow's Exhibit No. 1003
`
`051
`
`

`
`ServiceNow's Exhibit No. 1003
`
`052
`
`

`
`ServiceNow's Exhibit No. 1003
`
`053