Appeal 2007-1297
Application 10/082,235
Appellant’s claimed invention relates to a system and method for
managing an incident in an enterprise in which enterprise input information
is processed using tables, databases, and rules to determine whether an
incident requiring action should be declared. The input information is
filtered using the rules, databases, and tables and results in a display of the
incident in a format that shows a defined conclusion for analysis.
(Specification 7).
Claim 1 is illustrative of the claims on appeal, and it reads as follows:
1. A method of declaring an incident in an enterprise comprising:
providing a number of alert indications containing information
concerning an incident related to the enterprise; and either
comparing one or more of the alert indications to a set of rules, and if
a match occurs between the set of rules, and the alert indication, declaring an
incident based on the match, or
comparing one or more of the alert indications to a decision table
containing a number of defined alert events; remembering each alert
indication that matches one of the defined alert events, comparing the
remembered alert indication to correlation data in the decision table, and if a
match occurs between the remembered alert indication and the correlation
data, declaring an incident based on the match; or
if no match occurs between the alert indication and the correlation
data or the rules set, declare an incident if the alert indication meets a
defined default threshold value; and
displaying an incident ticket for each incident declared, the incident
ticket including a description of the incident, a conclusion based on the
incident description, any actions responsive to the conclusion, one or more
user-editable incident tracking rules which identify one or more further alert
2
Page: Previous 1 2 3 4 5 6 7 Next
Last modified: September 9, 2013