Incident prediction and prevention
First Claim
1. An incident prediction and prevention apparatus comprising:
- an incident analyzer, executed by at least one hardware processor, toascertain a plurality of past incidents related to operation of a system,cluster the plurality of past incidents to generate a plurality of incidents clusters,identify, for each past incident of the plurality of past incidents that is in a respective incidents cluster of the plurality of incidents clusters, a time of occurrence, andgenerate, based on the identification of the time of occurrence of each past incident of the plurality of past incidents that is in the respective incidents cluster of the plurality of incidents clusters, a time-based cluster relationship between each incidents cluster of the plurality of incidents clusters;
an incident predictor, executed by the at least one hardware processor, toascertain a new incident associated with another system,assign the new incident to an incidents cluster of the plurality of incidents clusters, anddetermine, for the assigned incidents cluster, at least one further predicted incident associated with at least one further corresponding incidents cluster, wherein the at least one further predicted incident includes an error associated with operation of a server associated with the another system; and
an incident preventer, executed by the at least one hardware processor, todetermine a resolution to the at least one further predicted incident, wherein the resolution includes modifying the operation of the server associated with the another system, andprevent occurrence of the at least one further predicted incident by executing the determined resolution to the at least one further predicted incident.
1 Assignment
0 Petitions
Accused Products
Abstract
In some examples, incident prediction and prevention may include ascertaining a plurality of past incidents, clustering the plurality of past incidents to generate a plurality of incidents clusters, and identifying, for each past incident of the plurality of past incidents that is in a respective incidents cluster of the plurality of incidents clusters, a time of occurrence. Incident prediction and prevention may include ascertaining a new incident, assigning the new incident to an incidents cluster of the plurality of incidents clusters, and determining, for the assigned incidents cluster, at least one further predicted incident associated with at least one further corresponding incidents cluster. Further, incident prediction and prevention may include determining a resolution to the at least one further predicted incident, and preventing occurrence of the at least one further predicted incident by executing the determined resolution to the at least one further predicted incident.
-
Citations
20 Claims
-
1. An incident prediction and prevention apparatus comprising:
-
an incident analyzer, executed by at least one hardware processor, to ascertain a plurality of past incidents related to operation of a system, cluster the plurality of past incidents to generate a plurality of incidents clusters, identify, for each past incident of the plurality of past incidents that is in a respective incidents cluster of the plurality of incidents clusters, a time of occurrence, and generate, based on the identification of the time of occurrence of each past incident of the plurality of past incidents that is in the respective incidents cluster of the plurality of incidents clusters, a time-based cluster relationship between each incidents cluster of the plurality of incidents clusters; an incident predictor, executed by the at least one hardware processor, to ascertain a new incident associated with another system, assign the new incident to an incidents cluster of the plurality of incidents clusters, and determine, for the assigned incidents cluster, at least one further predicted incident associated with at least one further corresponding incidents cluster, wherein the at least one further predicted incident includes an error associated with operation of a server associated with the another system; and an incident preventer, executed by the at least one hardware processor, to determine a resolution to the at least one further predicted incident, wherein the resolution includes modifying the operation of the server associated with the another system, and prevent occurrence of the at least one further predicted incident by executing the determined resolution to the at least one further predicted incident. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A method for incident prediction and prevention comprising:
-
ascertaining, by an incident analyzer that is executed by at least one hardware processor, a plurality of past incidents related to operation of a system; clustering, by the incident analyzer that is executed by at least one hardware processor, the plurality of past incidents to generate a plurality of incidents clusters; identifying, by the incident analyzer that is executed by at least one hardware processor, for each past incident of the plurality of past incidents that is in a respective incidents cluster of the plurality of incidents clusters, a time of occurrence; generating, by the incident analyzer that is executed by at least one hardware processor, based on the identification of the time of occurrence of each past incident of the plurality of past incidents that is in the respective incidents cluster of the plurality of incidents clusters, a time-based cluster relationship between each incidents cluster of the plurality of incidents clusters; determining, by the incident analyzer that is executed by the at least one hardware processor, based on a number of time-based connections between each incidents cluster of the plurality of incidents clusters, a strength of the time-based cluster relationship between each incidents cluster of the plurality of incidents clusters; ascertaining, by an incident predictor that is executed by the at least one hardware processor, a new incident associated with another system; assigning, by the incident predictor that is executed by the at least one hardware processor, the new incident to an incidents cluster of the plurality of incidents clusters; determining, by the incident predictor that is executed by the at least one hardware processor, for the assigned incidents cluster, at least one further predicted incident associated with at least one further corresponding incidents cluster, wherein the at least one further predicted incident includes an error associated with operation of a server associated with the another system; determining, by an incident preventer that is executed by the at least one hardware processor, a resolution to the at least one further predicted incident, wherein the resolution includes modifying the operation of the server associated with the another system; and preventing, by the incident preventer that is executed by the at least one hardware processor, occurrence of the at least one further predicted incident by executing the determined resolution to the at least one further predicted incident. - View Dependent Claims (11, 12, 13, 14, 15)
-
-
16. A non-transitory computer readable medium having stored thereon machine readable instructions, the machine readable instructions, when executed by at least one hardware processor, cause the at least one hardware processor to:
-
ascertain a plurality of past incidents related to operation of a system; cluster the plurality of past incidents to generate a plurality of incidents clusters; identify, for each past incident of the plurality of past incidents that is in a respective incidents cluster of the plurality of incidents clusters, a time of occurrence; ascertain a new incident associated with another system; determine, with respect to the new incident, a score for each incidents cluster of the plurality of incidents clusters; assign the new incident to an incidents cluster of the plurality of incidents clusters that includes a highest determined score; determine, for the assigned incidents cluster, at least one further predicted incident associated with at least one further corresponding incidents cluster, wherein the at least one further predicted incident includes an error associated with operation of a server associated with the another system; determine an estimated time of occurrence of the at least one further predicted incident by; determining a difference between an earliest time of occurrence of selected past incidents from the assigned incidents cluster and a latest time of occurrence of selected past incidents from the at least one further corresponding incidents cluster; and averaging the determined differences or dividing the determined differences by a size of a strongest outgoing edge between the assigned incidents cluster and the at least one further corresponding incidents cluster; determine a resolution to the at least one further predicted incident, wherein the resolution includes modifying the operation of the server associated with the another system; and prevent occurrence of the at least one further predicted incident by executing the determined resolution to the at least one further predicted incident. - View Dependent Claims (17, 18, 19, 20)
-
Specification