Diagnosing Abnormalities Without Application-Specific Knowledge
First Claim
Patent Images
1. A system comprising:
- a processor; and
a graph component configured to be operated by the processor to generate a dependency graph for a plurality of network components, each network component represented as a node in the dependency graph and each dependency relationship between a pair of network components represented as an edge between two nodes;
a diagnostic component configured to be operated by the processor to perform operations including;
detecting abnormal behavior of a first network component of the plurality of network components based on behavior metrics of the first network component and historical values of those behavior metrics;
for each pair of network components of the plurality of network components having a dependency relationship, computing a likelihood that behavior of one network component of the pair is impacting behavior of the other network component of the pair, the computing being based on joint historical behavior of the pair of network components; and
determining that a second network component of the plurality of network components is a probable cause of the detected abnormal behavior of the first network component based on the computed likelihoods.
2 Assignments
0 Petitions
Accused Products
Abstract
Methods, articles, and systems for determining a probable cause of a component'"'"'s abnormal behavior are described. To determine the probable cause, a computing device computes, for one or more pairs of components having dependency relationships, a likelihood that behavior of one component of a pair is impacting behavior of the other component of the pair. This computing is based on joint historical behavior of the pair of components. The computing device then determines that one of a plurality of components is a probable cause of the abnormal behavior based on the computed likelihoods.
76 Citations
20 Claims
-
1. A system comprising:
-
a processor; and a graph component configured to be operated by the processor to generate a dependency graph for a plurality of network components, each network component represented as a node in the dependency graph and each dependency relationship between a pair of network components represented as an edge between two nodes; a diagnostic component configured to be operated by the processor to perform operations including; detecting abnormal behavior of a first network component of the plurality of network components based on behavior metrics of the first network component and historical values of those behavior metrics; for each pair of network components of the plurality of network components having a dependency relationship, computing a likelihood that behavior of one network component of the pair is impacting behavior of the other network component of the pair, the computing being based on joint historical behavior of the pair of network components; and determining that a second network component of the plurality of network components is a probable cause of the detected abnormal behavior of the first network component based on the computed likelihoods. - View Dependent Claims (2)
-
-
3. A method implemented by a computing device, the method comprising:
-
for each pair of components of a plurality of components having a dependency relationship, computing a likelihood that behavior of one component of the pair is impacting behavior of the other component of the pair, the computing being based on joint historical behavior of the pair of components; and determining that one of the plurality of components is a probable cause of abnormal behavior of at least one other component of the plurality of components based on the computed likelihoods. - View Dependent Claims (4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
-
16. An article of manufacture comprising:
one or more computer-readable storage media storing computer executable instructions that, when executed by a computing device, cause the computing device to perform operations including; detecting abnormal behavior of a first network component of a plurality of network components based on behavior metrics of the first network component and historical values of those behavior metrics; for each pair of the network components having a dependency relationship, computing a likelihood that behavior of one network component of the pair is impacting behavior of the other network component of the pair, the computing being based on joint historical behavior of the pair of network components; and determining that a second network component of the network components is a probable cause of abnormal behavior of the first network component based on the computed likelihoods. - View Dependent Claims (17, 18, 19, 20)
Specification