US 12,386,722 B2
Method and system for real-time correlation of disparate sources of topological information to create a unified topological model of a distributed information system
Herwig Moser, Freistadt (AT); Michael Kopp, Piberbach (AT); and Ernst Ambichl, Altenberg (AT)
Assigned to Dynatrace LLC, Waltham, MA (US)
Filed by Dynatrace LLC, Waltham, MA (US)
Filed on Jul. 22, 2022, as Appl. No. 17/871,282.
Application 17/871,282 is a continuation of application No. 16/276,710, filed on Feb. 15, 2019, granted, now 11,442,836.
Claims priority of provisional application 62/634,393, filed on Feb. 23, 2018.
Prior Publication US 2023/0008791 A1, Jan. 12, 2023
Int. Cl. G06F 11/34 (2006.01); G06F 11/07 (2006.01); G06F 11/30 (2006.01); G06N 5/022 (2023.01); G06N 5/04 (2023.01)
CPC G06F 11/3447 (2013.01) [G06F 11/079 (2013.01); G06F 11/3048 (2013.01); G06F 11/3089 (2013.01); G06F 11/3461 (2013.01); G06F 11/3495 (2013.01); G06N 5/022 (2013.01); G06N 5/04 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method for monitoring transactions executing in a distributed computing environment, comprising:
monitoring, by a given agent, a communication message exchanged between two processes executing in the distributed computing environment, wherein the given agent is deployed in one of the two processes;
capturing, by the given agent, monitoring data for the communication message, where in the monitoring data includes at least one of network address data for process sending the communication message and network address data for process receiving the communication message;
sending, by the given agent, the monitoring data to a monitoring server, wherein the monitoring server is remotely located from a computing device hosting the given agent;
extracting, by the monitoring server, the network address data for the process sending or receiving the communication message from the monitoring data;
determining, by the monitoring server, whether the extracted network address data for the process sending or receiving the communication message is stored at the monitoring server; and
extracting, by the monitoring server, data describing a network component from the monitoring data and storing the data together with the extracted network address data for the process sending or receiving the communication message on the monitoring server, wherein the extracting and storing of the data is in response to a determination that the extracted network address data for the process sending or receiving the communication message is not stored at the monitoring server;
wherein the given agent is deployed in the process sending the communication message and the monitoring data further includes an indicator of communication protocol used to exchange the communication message between the two processes and further comprises:
extracting, by the monitoring server, the indicator of the communication protocol from the monitoring data;
determining, by the monitoring server, a type of process for the process receiving the communication message from the indicator of the communication protocol;
extracting, by the monitoring server, the network address data for the process receiving the communication message; and
storing, by the monitoring server, the type of process for the process receiving the communication message together with the extracted network address data for the process receiving the communication message on the monitoring server, wherein the storing is in response to a determination that the extracted network address data for the process receiving the communication message is not stored at the monitoring server.