Predictive monitoring with wavelet analysis

• US 8,479,047 B2
• Filed: 06/24/2012
• Issued: 07/02/2013
• Est. Priority Date: 07/20/2009
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Borghetti, Stefano, Della Corte, Gianluca, Gianfagna, Leonida, Perrone, Antonio, Sgro, Antonio M
• Primary Examiner(s): PATEL, KAMINI B
• Application Number:
  US13/531,565
• Publication Number:
  US 20120297252A1
• Time in Patent Office: 373 Days
• Field of Search: 714/47.1, 714/25
• US Class Current: 714/25
• CPC Class Codes: G06F 11/004 Error avoidance G06F11/07 and subgroups take precedence
• CPC Class Codes: G06F 11/0754 by exceeding limits

Abstract

A computer implemented method, computer program product and system for monitoring a plurality of hardware or software system resources for identifying hidden trends in the behavior of the system resources, includes: collecting metrics of at least one system resource indicative of the behavior of at least one system resource; for each of the at least one system resource, determining a spectrum representative of a time-based signal of the collected metrics; performing a wavelet transform on each of the at least one spectrum; and analyzing the result of the wavelet transform to identify possible linear trends in the behavior of the at least one system resource.

Claims

1. A computer implemented method for monitoring a plurality of hardware or software system resources for identifying hidden trends in the behavior of the system resources, the method comprising:

collecting metrics of at least one system resource indicative of the behavior of at least one system resource;

for each of the at least one system resource, determining a spectrum representative of a time-based signal of the collected metrics;

performing a wavelet transform on each of the at least one spectrum;

analyzing the result of the wavelet transform to identify possible linear trends in the behavior of the at least one system resource;

assigning to each identified linear trend a severity value indicative of a criticality of the related behavior wherein the criticality of behaviors comprises an indication of how fast a predetermined threshold of the related system resource will be reached; and

ranking the severity value with respect to at least one other severity value to identify an order in which to address the behavior of the at least one system resource.

2. The method of claim 1, wherein the determining the spectrum representative of the time-based signal of the collected metrics comprises:

interpolating the collected metrics for building a continuous graph.

3. The method of claim 1, further comprising:

for each of the at least one system resource, reading a critical threshold related to each metric.

4. The method of claim 3 wherein the analyzing the result of the wavelet transform to identify the possible linear trends in the behavior of the at least one system resource comprises:

estimating, by extrapolation of the linear trends, the time required by the system resource metrics to reach related critical thresholds.

5. The method of claim 1 further comprising:

logically combining severity values of a plurality of identified linear trends to identify hidden trends in the behavior of the system resources.

6. The method of claim 1 wherein ranking the severity value with respect to the at least one other severity value to identify the order in which to address the behavior of the at least one system resource comprises:

ranking the severity value according to a repair time required to repair the behavior of the at least one system resource.

7. The method of claim 6 wherein ranking the severity value according to the repair time required to repair the behavior of the at least one system resource comprises:

ranking the severity value according the repair time and how fast a predetermined threshold of the related system resource will be reached.

8. A computer program product for monitoring a plurality of hardware or software system resources for identifying hidden trends in the behavior of the system resources, the computer program product comprising:

a computer readable memory device having computer readable program code embodied therewith, the computer readable program code comprising;

computer readable program code configured to;

collect metrics of at least one system resource indicative of the behavior of at least one system resource;

for each of the at least one system resource, determine a spectrum representative of a time-based signal of the collected metrics;

perform a wavelet transform on each of the at least one spectrum;

analyze the result of the wavelet transform to identify possible linear trends in the behavior of the at least one system resource;

assign to each identified linear trend a severity value indicative of a criticality of the related behavior wherein the criticality of behaviors comprises an indication of how fast a predetermined threshold of the related system resource will be reached; and

rank the severity value with respect to at least one other severity value to identify an order in which to address the behavior of the at least one system resource.

9. The computer program product of claim 8, wherein the computer readable program code configured to determine the spectrum representative of the time-based signal of the collected metrics is further configured to:

interpolate the collected metrics for building a continuous graph.

10. The computer program product of claim 8, wherein the computer readable program code is further configured to:

for each of the at least one system resource, read a critical threshold related to each metric.

11. The computer program product of claim 10, wherein the computer readable program code configured to analyze the result of the wavelet transform to identify the possible linear trends in the behavior of the at least one system resource is further configured to:

estimate, by extrapolation of the linear trends, the time required by the system resource metrics to reach related critical thresholds.

12. The computer program product of claim 8, wherein the computer readable program code is further configured to:

logically combine severity values of a plurality of identified linear trends to identify hidden trends in the behavior of the system resources.

13. The computer program product of claim 8, wherein the computer readable program code configured to rank the severity value with respect to the at least one other severity value to identify the order in which to address the behavior of the at least one system resource is further configured to:

rank the severity value according to a repair time required to repair the behavior of the at least one system resource.

14. The computer program product of claim 13, wherein the computer readable program code configured to rank the severity value according to the repair time required to repair the behavior of the at least one system resource is further configured to:

rank the severity value according the repair time and how fast a predetermined threshold of the related system resource will be reached.

15. A system, comprising:

a plurality of system resources, comprising hardware or software system resources; and

a computer for monitoring the plurality of system resources, wherein the computer;

collects metrics of at least one system resource indicative of the behavior of at least one system resource;

for each of the at least one system resource, determines a spectrum representative of a time-based signal of the collected metrics;

performs a wavelet transform on each of the at least one spectrum;

analyzes the result of the wavelet transform to identify possible linear trends in the behavior of the at least one system resource;

assigns to each identified linear trend a severity value indicative of a criticality of the related behavior wherein the criticality of behaviors comprises an indication of how fast a predetermined threshold of the related system resource will be reached; and

ranks the severity value with respect to at least one other severity value to identify an order in which to address the behavior of the at least one system resource.

16. The system of claim 15, wherein when the computer determines the spectrum representative of the time-based signal of the collected metrics the computer:

interpolates the collected metrics for building a continuous graph.

17. The system of claim 15, wherein the computer further:

for each of the at least one system resource, reads a critical threshold related to each metric.

18. The system of claim 17, wherein when the computer analyzes the result of the wavelet transform to identify the possible linear trends in the behavior of the at least one system resource the computer:

estimates, by extrapolation of the linear trends, the time required by the system resource metrics to reach related critical thresholds.

19. The system of claim 15, wherein the computer further:

logically combines severity values of a plurality of identified linear trends to identify hidden trends in the behavior of the system resources.

20. The system of claim 15, wherein when the computer ranks the severity value with respect to the at least one other severity value to identify the order in which to address the behavior of the at least one system resource, the computer:

ranks the severity value according to a repair time required to repair the behavior of the at least one system resource and how fast a predetermined threshold of the related system resource will be reached.