File monitoring

Number: 9779008
Published: 2017-10-03
Filed: 2012-02-21
Assignee: Disney Enterprises, Inc.
Inventors: Geibel; Jonathan Eric et al.
CPC: G06F11/3433
Verdict: Set aside file monitoring - generic IT
Source: Google Patents · FreePatentsOnline

Abstract

A server receives a first set of file activity data from a first file monitor. The first set of file activity data indicates activity associated with a first set of files accessed at a first compute node in communication with a network. Further, the server receives a second set of file activity data from a second file monitor. The second set of file activity data indicates activity associated with a second set of files accessed at a second compute node in communication with the network. In addition, the server aggregates the first set of file activity data and the second set of file activity data into an aggregated set of network file activity data.

Background

BRIEF DESCRIPTION OF THE DRAWINGS(1) The above-mentioned features of the present disclosure will become more apparent with reference to the following description taken in conjunction with the accompanying drawings whereinlike reference numerals denote like elements and in which:(2) FIG. 1 illustrates a systemthat may be utilized to perform file monitoring.(3) FIG. 2 illustrates an example of a compute node.(4) FIG. 3 illustrates a data aggregation configuration that may be utilized toaggregate data for file activity from a plurality of host compute nodes.(5) FIG. 4 illustrates a process that may be utilized by a server to aggregate file activity.(6) FIG. 5 illustrates a process that may be utilized by the file monitor to monitor file activity at the compute node.(7) FIG. 6 illustrates an example of a graphical user interface (“GUI”) that may be utilized to display the file activity data aggregated by the server illustrated in FIG. 3.DETAILED DESCRIPTION(8) A file monitor may be utilized to monitor file activity on a host compute node. The file monitor may be a set of code, a client, or the like. A host compute node may be a computing device, a program executed on a computing device, an operating system, a function, or the like. The file monitor tracks the file activity on the host compute node. An example of file activity is an operation, e.g., a read or a write, performed on an open file. In one aspect, there are a plurality of host compute nodes, whereeach node has a fi

Claims

1. A computer program product comprising a computer readable storage device having a computer readable program stored thereon, wherein the computer readable program when executed on a computer causes the computer to: receive, at a server, a first set of file activity data from a first file monitor, the first set of file activity data indicating activity associated with a first set of files accessed at a first compute node in communication with anetwork, the first compute node operating on a first computing platform, the server beingdistinct from the first compute node, the server being distinct from the first file monitor; receive, at the server, a second set of file activity data from a second file monitor,the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the second compute node operating on a second computing platform, the second computing platform being distinct from the first computing platform, the server being distinct from the second computenode, the server being distinct from the second file monitor; aggregate, at the server, the first set of file activity data and the second set of file activity data into an aggregated set of network file activity data in a platform independent manner without reliance on the first computing platform or the second computing platform; determine, from the aggregated set of network file activity data, if a file is not open on the network; and automatically migrate, in real-time without the first file monitor and the second file monitor, the file from a first compute device to a second compute device after the determination, from the aggregated set of network file activity, that the file is not open on the network. 8. A method comprising: receiving, at a server, a first set of file activity data from a first file monitor, the first set of file activity data indicating activity associated witha first set of files accessed at a first compute node in communication with a network, the first compute node operating on a first computing platform, the server being distinct from the first compute node, the server being distinct from the first file monitor; receiving, at the server, a second set of file activity data from a second file monitor, the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the second compute node operating on a second computing platform, the second computing platform being distinct fromthe first computing platform, the server being distinct from the second compute node, theserver being distinct from the second file monitor; aggregating, at the server, the firstset of file activity data and the second set of file activity data into an aggregated setof network file activity data in a platform independent manner without reliance on the first computing platform or the second computing platform; determining, from the aggregated set of network file activity data, if a file is not open on the network; and automaticallymigrating, in real-time without the first file monitor and the second file monitor, the file from a first compute device to a second compute device after the determination, from the aggregated set of network file activity, that the file is not open on the network. 15. A system comprising: a server that receives a first set of file activity data from a firstfile monitor, receives a second set of file activity data from a second file monitor, aggregates the first set of file activity data and the second set of file activity data, determines, from the aggregated set of network file activity data, if a file is not open on the network in a platform independent manner without reliance on the first computing platform or the second computing platform, and automatically migrates, in real-time without the first file monitor and the second file monitor, the file from a first compute device to a second compute device after the determination, from the aggregated set of network file activity, that the file is not open on the network, the first set of file activity data indicating activity associated with a first set of files accessed at a first compute node in communication with a network, the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the first compute node operating on a first computing platform, the second compute node operating on a second computing platform, the second computing platform being distinct from the first computing platform, the server being distinct from the first compute node, the server being distinct from the first file monitor, the server being distinct from the second compute node, the server being distinct from the second file monitor. 16. A computer program product comprising a computer readable storage device having a computer readable program stored thereon, wherein the computer readable program when executed on a computer causes the computer to: monitor, with a first file monitor, a first set of file activity data from a first file monitor, the first set of file activity data indicating activity associated with a first set of files accessed at a first compute node in communicationwith a network, the first compute node operating on a first computing platform; monitor, with a second file monitor, a second set of file activity data from a second file monitor,the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the second compute node operating on a second computing platform; send, from the first file monitor, the first set of file activity data to a server; and send, from the second file monitor, the second set of file activity data to the server, aggregate, at the server, the first set of file activity data and the second set of file activity data into an aggregated set of network file activity data in a platform independent manner without reliance on the first computing platform or the second computing platform; determine, from the aggregated set of network file activity data, if a file is not open on the network; and automatically migrate, in real-time without the first file monitor and the second file monitor, the file from a first compute device to a second compute device after the determination, from the aggregated set of network file activity, that the file is not open on the network; wherein the server is distinct from the first compute node, the second compute node, the first file monitor, and the second file monitor. 22. A method comprising: monitoring, with a first file monitor, a first set of file activity data from a first file monitor, the first set of file activity data indicating activity associated with a first set of files accessed at a first compute node in communication with a network, the first compute node operating on a first computing platform; monitoring, with a second file monitor, a second set of file activity data from a second file monitor, the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the second compute node operating on a second computing platform; sending, from the first file monitor, the first set of file activity data to a server; and sending, from the second file monitor, the second set of file activity data to the server, aggregate, at the server, the first set of file activity data and the second set of file activity data into an aggregated set of network file activity data in a platform independent manner without reliance on the first computing platform or the second computing platform; determine, from the aggregated set of network file activity data, if a file is not open on the network; and automatically migrate, in real-time without the first file monitor and the second file monitor, the file from a first compute device to a second compute device afterthe determination, from the aggregated set of network file activity, that the file is notopen on the network; wherein the server is distinct from the first compute node, the second compute node, the first file monitor, and the second file monitor. 28. A system comprising: a hardware processor that monitors, with a first file monitor, a first set of file activity data from a first file monitor, monitors, with a second file monitor, a second set of file activity data from a second file monitor, sends, from the first file monitor, the first set of file activity data to a server, and sends, from the second file monitor, the second set of file activity data to a server, the first set of file activity data indicating activity associated with a first set of files accessed at a first compute node in communication with a network, the first compute node operating on a first computing platform, the second set of file activity data indicating activity associated with a second set of files accessed at a second compute node in communication with the network, the second compute node operating on a second computing platform, aggregate, at the server, the first set of file activity data and the second set of file activity data into an aggregated set of network file activity data in a platform independent manner without reliance on the first computing platform or the second computing platform; determine, from the aggregated set of network file activity data, if a file is not open on the network; and automatically migrate, in real-time without the first file monitor and the second file monitor, the file from afirst compute device to a second compute device after the determination, from the aggregated set of network file activity, that the file is not open on the network; wherein the server is distinct from the first compute node, the second compute node, the first file monitor, and the second file monitor.