Automation the process of identifying the causes of incidents in the IT-infrastructure
This work is devoted to the creation of an information-analytical system for identifying causal relationships between events recorded in the IT infrastructure. The purpose of such a system is to increase the efficiency of support engineers by identifying possible causes of events, thereby reasonably directing the search and investigation of events, incidents and problems. The paper shows the use of templates as a way of primary classification of events, without revealing the semantics / meaning of the event. Extracting templates from raw records is a preprocessing step. For the purpose of extracting templates, a template engine was developed that automates this process. The claimed system is implemented using open, free, well-established tools, such as the Rsyslog logging server and the developed application software - Tabler.