System and methods for adaptive threshold determination for performance metrics
First Claim
Patent Images
1. A method for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the method comprising the steps of:
- establishing at least one default alarm threshold associated with a metric;
repeatedly receiving data associated with the metric;
statistically analyzing the received data to establish at least one updated alarm threshold; and
triggering an alarm on receipt of received data that violate the at least one updated alarm threshold.
22 Assignments
0 Petitions
Accused Products
Abstract
A system and method for dynamically generating alarm thresholds for performance metrics, and for applying those thresholds to generate alarms is described. Statistical methods are used to generate one or more thresholds for metrics that may not fit a Gaussian or normal distribution, or that may exhibit cyclic behavior or persistent shifts in the values of the metrics. The statistical methods used to generate the thresholds may include statistical process control (SPC) methods, normalization methods, and heuristics.
264 Citations
26 Claims
-
1. A method for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the method comprising the steps of:
-
establishing at least one default alarm threshold associated with a metric;
repeatedly receiving data associated with the metric;
statistically analyzing the received data to establish at least one updated alarm threshold; and
triggering an alarm on receipt of received data that violate the at least one updated alarm threshold. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21)
-
-
22. An article of manufacture comprising a program storage medium having computer readable program code embodied therein for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the computer readable program code in the article of manufacture including:
-
computer readable code for establishing at least one default alarm threshold associated with a metric;
computer readable code for repeatedly receiving data associated with the metric;
computer readable code for statistically analyzing the received data to establish at least one updated alarm threshold; and
computer readable code for triggering an alarm on receipt of received data that violate the at least one updated alarm threshold so as to achieve the dynamic generation of at least one metric threshold.
-
-
23. A program storage medium readable by a computer, tangibly embodying a program of instructions executable by the computer to perform method steps for dynamically generating at least one metric threshold indication alarm conditions in a monitored system, the method steps comprising:
-
establishing at least one default alarm threshold associated with a metric;
repeatedly receiving data associated with the metric;
statistically analyzing the received data to establish at least one updated alarm threshold; and
triggering an alarm on receipt of received data that violate the at least one updated alarm threshold so as to achieve the dynamic generation of at least one metric threshold.
-
-
24. A system for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the system comprising:
-
means for establishing at least one default alarm threshold associated with a metric;
means for repeatedly receiving data associated with the metric;
means for statistically analyzing the received data to establish at least one updated alarm threshold; and
means for triggering an alarm on receipt of received data that violate the at least one updated alarm threshold.
-
-
25. Apparatus for dynamically generating at least one metric threshold indicating alarm conditions in a monitored system, the apparatus comprising:
-
a limit store that establishes at least one default alarm threshold associated with a metric;
a data manager that repeatedly receives data associated with the metric;
a threshold computation module that statistically analyzes the received data to establish at least one updated alarm threshold; and
an alarm manager that triggers an alarm on receipt of received data that violate the at least one updated alarm threshold. - View Dependent Claims (26)
-
Specification