Computer system alert situation detection based on trend analysis
AssigneeInternational Business Machines Corporation
InventorsAl Chakra, Tian Ming Pan, Peng Fei Tian, Chu Yun Cloud Tony, Cheng Fang Wang
Life of this patent
Estimating the term…
Abstract
A computer system to detect data alerts includes a data preprocessing system and a data analysis system. The data preprocessing system obtains system data of the computer system, generates predicted data based on the system data, and generates differential data indicating a difference between the system data and the predicted data. The data analysis is in signal communication with the data preprocessing system and determines that the differential data is one of expected event or an anomaly event in response to adding at least one new value from the differential data to the predicted data.
Claims18
A computer system configured to detect data alerts, the computer system comprising:
- a data preprocessing system configured to obtain sequential generated system data of the computer system, sequentially generate predicted data based on the system data, and sequentially generate preprocessed differential data indicating a difference between the system data and the predicted data;
- and
- a data analysis system in signal communication with the data preprocessing system, the data analysis system configured to select a first portion of the preprocessed differential data as sample data and to determine that the sample data includes one of an expected event corresponding to the system data generated by the data preprocessing system or an anomaly event corresponding to the system data generated by the data preprocessing system, in response to failing to determine the expected event or the anomaly event, continuously adding at least one new value from a second portion of the preprocessed differential data excluded from the sample data to the sample data until the expected event or the anomaly event is determined, wherein the at least one new value is a next sequential value included the second portion of the preprocessed differential data that is excluded from the sample data.
A computer implemented method executed by a computer system for identifying relationships among a group of indicators, the computer system comprises:
- a memory having computer readable instructions;
- a processor for executing the computer readable instructions, the computer readable instructions including instructions for:
- obtaining sequential generated system data of a computer system;
- sequentially generating predicted data based on the system data;
- sequentially generating preprocessed differential data indicating a difference between the system data and the predicted data;
- and
- selecting a first portion of the preprocessed differential data as sample data and determining the sample data includes one of an expected event corresponding to the system data generated by the data preprocessing system or an anomaly event corresponding to the system data generated by the data preprocessing system;
- and
- in response to failing to determine the expected event or the anomaly event, continuously adding at least one new value from a second portion of the preprocessed differential data excluded from the sample data to the sample data until the expected event or the anomaly event is determined, wherein the at least one new value is a next sequential value included the second portion of the preprocessed differential data that is excluded from the sample data.
A computer program product comprising a computer readable storage medium having program instructions embodied therewith the program instructions executable by a computer processor to cause the computer processor to perform a method, comprising:
- obtaining sequential generated system data of a computer system;
- sequentially generating predicted data based on the system data;
- sequentially generating preprocessed differential data indicating a difference between the system data and the predicted data;
- and
- selecting a first portion of the preprocessed differential data as sample data and determining the sample data includes one of an expected event corresponding to the system data generated by the data preprocessing system or an anomaly event corresponding to the system data generated by the data preprocessing system;
- and
- in response to failing to determine the expected event or the anomaly event, continuously adding at least one new value from a second portion of the preprocessed differential data excluded from the sample data to the sample data until the expected event or the anomaly event is determined, wherein the at least one new value is a next sequential value included the second portion of the preprocessed differential data that is excluded from the sample data.
Dependencies are inferred from the claim text.