ServiceNow, Inc.
Similar alert identification based on application fingerprints

Abstract:

A new alert associated with a computer information technology item is received. The new alert is evaluated, including by determining application fingerprints of applications executing on a server associated with the new alert. Matching previous alerts similar to the new alert are identified, including by comparing the application fingerprints of the server associated with the new alert with corresponding application fingerprints of servers associated with previous alerts. The matching previous alerts are sorted based at least in part on the comparison of the application fingerprints.