BACKGROUND OF THE INVENTION

Field of the Invention

The present invention relates in general to computing systems, and more particularly, to various embodiments for responding to computing system or service incidents in an intelligent and/or automated manner.

Description of the Related Art

Due to the complexity of modern computing systems (and/or services), virtually continuous monitoring and support is required in the event of the occurrence of various incidents (e.g., software issues, hardware problems, security threats, etc.). This may particularly be an issue with, for example, cloud, and other internet-related, computing systems because of the widespread distribution of the resources utilized.

Often, this monitoring/support involves human responders (e.g., support staff, administrators, etc.), who are ideally ready to take action at any time (e.g., 24 hours per day, seven days a week, etc.). At a minimum, such a responsibility may be inconvenient and tasking, but it may also be stressful and disruptive. Additionally, in some places (e.g., some countries), regulations are in place that limit and/or prohibit requiring individuals to work at certain times (e.g., on holidays, nights, weekends, etc.).

SUMMARY OF THE INVENTION

Various embodiments for responding to computing system incidents are provided. Information associated with a computing system is analyzed to generate a base system model of the computing system. The information includes at least one of system logs and metrics data of the computing system. An indication of an incident associated with the computing system is received. The base system model is utilized to analyze the incident. The analysis of the incident includes characterizing the incident as a previously detected incident or an unknown incident. A strategy for responding to the incident is identified based on the analysis of the incident.

In addition to the foregoing exemplary embodiment, various other system and computer program product embodiments are provided and supply related advantages. The foregoing Summary has been provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter. The claimed subject matter is not limited to implementations that solve any or all disadvantages noted in the background.

