Skip to main content
SpringerLink
Log in

A Model for Incident Tickets Correlation in Network Management

  • Published:
Journal of Network and Systems Management Aims and scope Submit manuscript

Abstract

In Information Technology Service Management (ITSM), network management teams typically use an Incident Ticket System (ITS) as a tool to track, troubleshoot, and coordinate the resolution of network incidents that occur during the daily operation of the network. A well organized ITS may positively impact on the efficiency of the incident management process. Nevertheless, in many cases the handling of tickets by the management team is not completely systematic and may be incoherent and inefficient. This way, irrelevant or redundant tickets for the same incident may be issued, thus creating a redundancy in the system that leads to inefficiencies. In this paper, we suggest a model aimed to correlate redundant tickets in order to reduce the information to a single ticket per incident. We validate the proposed correlation model by evaluating it with two datasets taken from a real ticketing system of a telecommunications network company. Using this model as a basis, we also develop and evaluate a methodology that assesses the efficiency of the management team during the process of tickets creation and management. Based on it, we also get some insights on the performance of the different management groups involved in the ticket creation process. These analyses can be leveraged for improving both the management groups functioning and the policies for the tickets’ creation.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

Fig. 1
Fig. 2
Fig. 3
Fig. 4
Fig. 5
Fig. 6
Fig. 7
Fig. 8
Fig. 9
Fig. 10
Fig. 11
Fig. 12
Fig. 13
Fig. 14
Fig. 15
Fig. 16
Fig. 17
Fig. 18
Fig. 19
Fig. 20

Similar content being viewed by others

References

  1. Marilly, E., Martinot, O., Papini, H., Goderis D.: Service level agreements: a main challenge for next generation networks. In: Proceedings of the 2nd European Conference on Universal Multiservice Networks (ECUMN), pp. 297–304 (2002)

  2. Vasseur, J.P., Pickavet, M., Demeester, P.: Network Recovery: Protection and Restoration of Optical, SONET-SDH, IP, and MPLS. Morgan Kaufmann Publishers Inc., San Francisco (2004)

    Google Scholar 

  3. Turner, D., Levchenko, K., Snoeren, A., Savage, S.: California fault lines: understanding the causes and impact of network failures. In: Proceedings of the ACM SIGCOMM Computer Communication Conference (SIGCOMM ‘10), pp. 315–326 (2010)

  4. Gill, P., Jain, J., Nagappan, N.: Understanding network failures in data centers: measurement, analysis, and implications. In: Proceedings of the ACM SIGCOMM Computer Communication Conference (SIGCOMM ‘11), pp. 350–361(2011)

  5. IT Infrastructure Library, Office of Government Commerce (UK). http://www.itil-officialsite.com/. Accessed 26 June 2014

  6. OGC (Office of Government Commerce) Ed., Service Operation, ser. IT Infrastructure Library v3 (ITIL v3). The Stationary Office, Norwich (2007)

  7. OpenView, HP. http://www8.hp.com/us/en/software/enterprise-software.html. Accessed 26 June 2014

  8. Lewis, L., Dreo, G.: Extending trouble ticket systems to fault diagnostics. IEEE Netw. 7(6), 44–51 (1993)

    Article  Google Scholar 

  9. Johnson, D.: NOC Internal Integrated Trouble Ticket System Functional Specification Wishset. RFC 1297 (1992)

  10. Dreo, G.: A framework for supporting fault diagnosis in integrated network and systems management: methodologies for the correlation of trouble tickets and access to problem–solving expertise. Ph.D. Dissertation, Ludwig–Maximilians–Universität München (1995)

  11. Shao, Q., Chen, Y., Tao, S., Yan, X., Anerousis, N.: Efficient ticket routing by resolution sequence mining. In: Proceedings of the 14th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pp. 605–613 (2008)

  12. Miao, G., Moser, L., Yan, X., Tao, S., Chen, Y., Anerousis, N.: Generative models for ticket resolution in expert networks. In: Proceedings of the 14th ACM International Conference on Knowledge Discovery and Data Mining (SIGKDD), pp. 733–742 (2010)

  13. Tang, L., Li, T., Shwartz, L., Grabarnik, G.Y.: Identifying missed monitoring alerts based on unstructured incident tickets. In: Proceedings of the 9th International Conference on Network and Service Management (CNSM), pp. 14–18 (2013)

  14. Li, Y., Li, T.H.: A method of effort estimation for incident tickets in IT services. In: Proceedings of the IEEE International Conference on Service Operations and Logistics, and Informatics (SOLI), pp. 311–316 (2013)

  15. Marcu, P., Grabarnik, G., Luan, L., Rosu, D., Shwartz, L., Ward, C.: Towards an optimized model of incident ticket correlation. In: Proceedings of the IFIP/IEEE International Symposium of Integrated Network Management, (IM), pp. 569–576 (2009)

  16. Hanemann, A.: Automated IT service fault management based on event correlation techniques. Ph.D. Dissertation, University of Munich, Department of Computer Science, Munich (2007)

  17. Hanemann, A., Marcu, P.: Algorithm design and application of service oriented event correlation. In: Proceedings of the 3rd IFIP/IEEE International Workshop on Business Driven IT Management (BDIM), pp. 61–70 (2008)

  18. Tang, L., Li, T., Shwartz, L., Pinel, F., Grabarnik, G.: An integrated framework for optimizing automatic monitoring systems in large IT infrastructures. In: Proceedings of the 19th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD), pp. 1249–1257 (2013)

  19. Medem, A, Teixeira, R., Feamster, N., Meulle, M.: Joint analysis of network incidents and intradomain routing changes. In: Proceedings of the International Conference on Network and Service Management (CNSM), pp. 198–205 (2010)

  20. Medem, A., Teixeira, R., Feamster, N., Meulle, M.: Determining the causes of intradomain routing changes. Technical Report. UMIACS University (2009)

  21. Feamster, N., Balakrishnan, H.: Detecting BGP configuration faults with static analysis. In: Proceedings of the USENIX 2nd International Conference on Symposium on Networked Systems Design and Implementation (NSDI), pp. 43–56 (2005)

  22. Turner, D., Levchenko, K., Mogul, J.C, Savage, S., Snoeren, A.C.: On failure in managed enterprise networks. HP Labs HPL-2012-101 (2012)

  23. Potharaju, R., Jain, N., Nita-Rotaru, C.: Juggling the jigsaw: towards automated problem inference from network trouble tickets. In: Proceedings of the USENIX 10th Symposium on Networked Systems Design and Implementation (NSDI), pp. 127–141 (2013)

  24. Medem, A., Akodjenou, I., Teixeira, R.: TroubleMiner: mining network trouble tickets. In: Proceedings of the IFIP/IEEE International Conference on Integrated Network Management-Workshops, (IM), pp. 113–119 (2009)

  25. Tanaka, J.: Analysis of trouble tickets issued by APAN JP NOC. www2.jp.apan.net/meetings/busan03/noc/tanaka.ppt (2003). Accessed 26 June 2014

  26. Pándi, Z.: Analysis of public trouble ticket data. Technical Report. Budapest University of Technology and Economics, Department of Telecommunications (2005)

  27. Huang, Y., Feamster, N., Lakhina, A., Xu, J.: Diagnosing network disruptions with network-wide analysis. In: Proceedings of the International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS), pp. 61–72 (2007)

  28. Labovitz, C., Ahuja, A., Farnam, J.: Experimental study of internet stability and backbone failures. In: Proceedings of the 29th International Symposium of Fault-Tolerant Computing, pp. 278–285 (1999)

  29. ServiceNow, Inc. http://www.servicenow.com/products/it-service-automation-applications/incident-management.html. Accessed 26 June 2014

  30. Remedy, BMC. http://www.bmc.com/it-solutions/remedy-itsm.html/. Accessed 26 June 2014

  31. Tivoli, IBM. http://www-01.ibm.com/software/tivoli/. Accessed 26 June 2014

  32. http://www.switch.ch/network/operation/tts/. Accessed 26 June 2014

Download references

Acknowledgments

This work has been partially supported by Spanish MICINN through Project TEC2011-22579.

Author information

Authors and Affiliations

  1. Department of Signal Theory, Telematics and Communications, CITIC, University of Granada, c/Periodista Daniel Saucedo Aranda, s/n, 18071, Granada, Spain

    Saeed Salah, Gabriel Maciá-Fernández, Jesús E. Díaz-Verdejo & Leovigildo Sánchez-Casado

Authors
  1. Saeed Salah
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Gabriel Maciá-Fernández
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Jesús E. Díaz-Verdejo
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Leovigildo Sánchez-Casado
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Saeed Salah.

Rights and permissions

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Salah, S., Maciá-Fernández, G., Díaz-Verdejo, J.E. et al. A Model for Incident Tickets Correlation in Network Management. J Netw Syst Manage 24, 57–91 (2016). https://doi.org/10.1007/s10922-014-9340-6

Download citation

  • Received:

  • Revised:

  • Accepted:

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.1007/s10922-014-9340-6

Keywords

Search

Navigation