Pattern-based detection for services in distributed systems

A computer-implemented method, comprising:

• performing, by one or more processors of one or more computing devices:
• monitoring, by individual services of at least two of a plurality of services, a plurality of service interactions between the individual services and other services of the plurality of services;
• determining, by the individual services of the at least two of the plurality of services, that data, metadata, or data and metadata of at least one of the plurality of service interactions between the individual services and other services of the plurality of services matches at least one of a plurality of patterns, comprising identifying, by the individual services, one or more matched patterns of the plurality of patterns;
• generating one or more call graphs indicating one or more data flows between services for the one or more matched patterns;
• and
• in response to determining, based on the one or more call graphs, that one or more services were called unnecessarily, preventing the one or more services from processing one or more further requests in order to prevent processing of unnecessary service calls.

A non-transitory computer-readable storage medium storing program instructions computer-executable to perform:

• comparing, by individual services of at least two of a plurality of services, contents of a plurality of service interactions between the individual services and other services of the plurality of services against a plurality of patterns;
• identifying, by the individual services of the at least two of the plurality of services, one or more matched patterns among the plurality of patterns that match contents of at least one service interaction between the individual services and another of the plurality of services based on the comparing;
• sending, from the individual services of the at least two of the plurality of services to a central service, data indicative of the one or more matched patterns, data identifying the individual services that process a service interaction that includes contents that match the one or more matched patterns, and data indicative of one or more data flows between the individual services and other services involving the one or more matched patterns;
• generating one or more call graphs indicating the one or more data flows between services for the one or more matched patterns;
• and
• in response to determining, based on the one or more call graphs, that one or more services were called unnecessarily, preventing the one or more services from processing one or more further requests in order to prevent processing of unnecessary service calls.

A system, comprising:

• at least one processor;
• a memory coupled to the at least one processor, wherein the memory stores program instructions, wherein the program instructions are executable by the at least one processor to:
• receive, from individual services of at least two of a plurality of services, data indicative of one or more patterns for a particular type of data that are matched by contents of individual ones of a plurality of service requests sent between the individual services and other services of the plurality of services and processed by the individual services and the other services;
• generate one or more call graphs indicating one or more data flows corresponding to the one or more patterns that are matched by contents of individual ones of the plurality of service requests, wherein the one or more call graphs are generated based on the data indicative of the one or more patterns received from the individual services of the at least two of the plurality of services, and wherein the one or more call graphs represents one or more interactions between services of the plurality of services;
• and
• in response to a determination, based on the one or more call graphs, that one or more services were called unnecessarily, prevent the one or more services from processing one or more further requests in order to prevent processing of unnecessary service calls.