Anomaly Detecting for Database Systems
First Claim
1. A method for detecting anomalies for a database system, comprising:
- extracting one or more workload features from a query optimizer based on a query workload;
generating workload feature models for the one or more extracted workload features;
extracting one or more instance features from the query optimizer based on a query instance, wherein instance feature values are obtained;
applying a query instance to the workload feature models to produce a prediction value for each workload feature; and
reporting one or more anomalies based on a comparison of each instance feature value with a corresponding prediction value.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods, systems and computer program products for detecting anomalies for a database system are provided. A method may include extracting workload features from a query optimizer based on a query workload and generating feature models for the extracted workload features. The method may also include extracting instance features from the query optimizer based on a query instance. Instance feature values may be obtained. The method may further include applying a query instance to the workload feature models to produce a prediction value for each workload feature. Anomalies may be reported based on a comparison of each instance feature value with a corresponding prediction value. A system for detecting anomalies for a database system may include a query optimizer, a feature modeler and an anomaly detector.
99 Citations
20 Claims
-
1. A method for detecting anomalies for a database system, comprising:
-
extracting one or more workload features from a query optimizer based on a query workload; generating workload feature models for the one or more extracted workload features; extracting one or more instance features from the query optimizer based on a query instance, wherein instance feature values are obtained; applying a query instance to the workload feature models to produce a prediction value for each workload feature; and reporting one or more anomalies based on a comparison of each instance feature value with a corresponding prediction value. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A system for detecting anomalies for a database system, comprising:
-
a query optimizer configured to execute queries; a feature modeler configured to; extract one or more workload features from the query optimizer based on a query workload; generate workload feature models for the one or more extracted workload features; and extract one or more instance features from the query optimizer based on a query instance, wherein instance feature values are obtained; and an anomaly detector configured to; apply a query instance to the workload feature models to produce a prediction value for each workload feature model; and report one or more anomalies based on a comparison of each instance feature value with a corresponding prediction value. - View Dependent Claims (13, 14, 15, 16, 17)
-
-
18. A computer program product having control logic stored therein, the control logic enabling a processor to detect anomalies for a database system, the control logic comprising:
-
first computer readable program code means for enabling a processor to extract one or more workload features from the query optimizer based on a query workload; second computer readable program code means for enabling a processor to generate workload feature models for the one or more extracted workload features; third computer readable program code means for enabling a processor to extract one or more instance features from the query optimizer based on a query instance, wherein instance feature values are obtained; fourth computer readable program code means for enabling a processor to apply a query instance to the workload feature models to produce a prediction value for each workload feature model; and fifth computer readable program code means for enabling a processor to report one or more anomalies based on a comparison of each instance feature value with a corresponding prediction value. - View Dependent Claims (19, 20)
-
Specification