Configuration of continuous anomaly detection service
First Claim
Patent Images
1. A computer-implemented method for configuring a continuous anomaly detection service, comprising:
- accessing a plurality of anomaly detection definitions, wherein each of the plurality of anomaly detection definitions comprises an anomaly detection configuration that defines how to generate and store, for a corresponding signal, a sequential set of data points from a plurality of historical data points not stored in the sequential set of data points;
receiving a request to modify a first anomaly detection definition of the plurality of anomaly detection definitions, wherein the first anomaly detection definition comprises a first anomaly detection configuration for a corresponding first signal;
updating the first anomaly detection configuration based on the request to modify;
updating the first signal, based on the updated first anomaly detection configuration, by replacing data points of the sequential set of data points of the first signal with a subset of the plurality of historical data points; and
continuously analyzing memory storing the signals to determine a corresponding anomaly result for each of the plurality of anomaly detection definitions, wherein the anomaly result for the first anomaly detection definition is based on the updated first anomaly detection configuration.
1 Assignment
0 Petitions
Accused Products
Abstract
A continuous anomaly detection service receives data stream and performs continuous anomaly detection on the incoming data streams. This continuous anomaly detection is performed based on anomaly detection definitions, which define a signal used for anomaly detection and an anomaly detection configuration. These anomaly detection definitions can be modified, such that continuous anomaly detection continues to be performed for the data stream and the signal, based on the new anomaly detection definition.
-
Citations
20 Claims
-
1. A computer-implemented method for configuring a continuous anomaly detection service, comprising:
-
accessing a plurality of anomaly detection definitions, wherein each of the plurality of anomaly detection definitions comprises an anomaly detection configuration that defines how to generate and store, for a corresponding signal, a sequential set of data points from a plurality of historical data points not stored in the sequential set of data points; receiving a request to modify a first anomaly detection definition of the plurality of anomaly detection definitions, wherein the first anomaly detection definition comprises a first anomaly detection configuration for a corresponding first signal; updating the first anomaly detection configuration based on the request to modify; updating the first signal, based on the updated first anomaly detection configuration, by replacing data points of the sequential set of data points of the first signal with a subset of the plurality of historical data points; and continuously analyzing memory storing the signals to determine a corresponding anomaly result for each of the plurality of anomaly detection definitions, wherein the anomaly result for the first anomaly detection definition is based on the updated first anomaly detection configuration. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A non-transitory computer-readable storage medium comprising instructions stored thereon, which when executed by one or more processors, cause the one or more processors to perform operations comprising:
-
accessing a plurality of anomaly detection definitions, wherein each of the plurality of anomaly detection definitions comprises an anomaly detection configuration that defines how to generate and store, for a corresponding signal, a sequential set of data points from a plurality of historical data points not stored in the sequential set of data points; receiving a request to modify a first anomaly detection definition of the plurality of anomaly detection definitions, wherein the first anomaly detection definition comprises a first anomaly detection configuration for a corresponding first signal; updating the first anomaly detection configuration based on the request to modify; updating the first signal, based on the updated first anomaly detection configuration, by replacing data points of the sequential set of data points of the first signal with a subset of the plurality of historical data points; and continuously analyzing memory storing the signals to determine corresponding anomaly result for each of the plurality of anomaly detection definitions, wherein the anomaly result for the first anomaly detection definition is based on the updated first anomaly detection configuration.
-
-
20. A system for performing continuous anomaly detection, comprising:
-
at least one memory having instructions stored thereon; and at least one processor configured to execute the instructions to; access a plurality of anomaly detection definitions, wherein each of the plurality of anomaly detection definitions comprises an anomaly detection configuration that defines how to generate and store, for a corresponding signal, a sequential set of data points from a plurality of historical data points not stored in the sequential set of data points; receive a request to modify a first anomaly detection definition of the plurality of anomaly detection definitions, wherein the first anomaly detection definition comprises a first anomaly detection configuration for a corresponding first signal; update the first anomaly detection configuration based on the request to modify; update the first signal, based on the updated first anomaly detection configuration, by replacing data points of the sequential set of data points of the first signal with a subset of the plurality of historical data points; and continuously analyze a portion of the at least one memory storing the signals to determine a corresponding anomaly result for each of the plurality of anomaly detection definitions, wherein the anomaly result for the first anomaly detection definition is based on the updated first anomaly detection configuration.
-
Specification