US 11,237,935 B2 · Anomaly detection in data protection operations

Abstract

Described herein are techniques for better understanding problems arising in an illustrative information management system, such as a data storage management system, and for issuing appropriate alerts and reporting to data management professionals. The illustrative embodiments include a number of features that detect and raise awareness of anomalies in system operations. Categories of interest include events and job anomalies, such as long-running jobs and job success/failure rates. Anomalies are characterized by frequency anomalies and/or by occurrence counts. Utilization is also of interest for certain key system resources, such as deduplication databases, CPU and memory at the storage manager, etc., without limitation. Predicting low utilization periods for these and other key resources is useful for scheduling maintenance activities without interfering with ordinary data protection jobs.

Claims20

Dependent claims

A networked information management system comprising:

a client computing device having one or more first hardware processors, wherein a first type of event occurs on the client computing device;
and
one or more computing devices in communication with the client computing device, wherein the one or more computing devices are configured with computer-executable instructions that, when executed, cause the one or more computing devices to:
retrieve event data corresponding to the first type of event and the client computing device;
perform a time-series decomposition of the event data;
analyze a component of the decomposed time-series to determine an acceptable range for a number of occurrences of the first type of event;
determine not to expand the acceptable range in response to an indication that a number of alerts generated for the first type of event is less than a threshold;
determine that an anomaly exists at a first time in response to a determination that a number of occurrences of the first type of event falls outside the acceptable range;
and
generate an alert for the detected anomaly.

7 more elements

Dependencies are inferred from the claim text.

Anomaly detection in data protection operations

Life of this patent

Anomaly detection in data protection operations

Life of this patent

Abstract

Claims20