BACKGROUND

As server architecture becomes more complex, the detection of the status of a server also becomes increasingly difficult. Through hyper-converged infrastructure architecture, servers have evolved to integrate various resources within a single solution, which is advantageous to various usage applications, however, at the cost of maintaining simplistic status monitoring systems that do not exert the benefits of the architecture.

SUMMARY

In general, in one aspect, the invention relates to a method for reliably classifying event notifications. The method includes obtaining a first local event log from a first state monitor and a second local event log from a second state monitor, merging the first local event log and the second local event log to generate a first global event log comprising a first event notification, deriving, from the first global event log, a first set of event log inputs including a first classifier input tuple associated with the first event notification, determining, for the first event notification, a first event classification using the first classifier input tuple and an optimized event classifier, and performing a first action based at least on the first event classification.

In general, in one aspect, the invention relates to a system. The system includes a plurality of state monitors comprising a first state monitor and a second state monitor, and a state monitor manager operatively connected to the plurality of state monitors, and configured to obtain a first local event log from the first state monitor and a second local event log from the second state monitor, merge the first local event log and the second local event log to generate a global event log including an event notification, derive, from the global event log, a set of event log inputs including a classifier input tuple associated with the event notification, determine, for the event notification, an event classification using the classifier input tuple and an optimized event classifier, and perform an action based at least on the event classification.

In general, in one aspect, the invention relates to a non-transitory computer readable medium. The non-transitory computer readable medium includes computer readable program code, which when executed by a computer processor, enables the computer processor to obtain a first local event log from the first state monitor and a second local event log from the second state monitor, merge the first local event log and the second local event log to generate a global event log including an event notification, derive, from the global event log, a set of event log inputs including a classifier input tuple associated with the event notification, determine, for the event notification, an event classification using the classifier input tuple and an optimized event classifier, and perform an action based at least on the event classification.

Other aspects of the invention will be apparent from the following description and the appended claims.

