Responding to alerts

A method performed by a system comprising a hardware processor, the method comprising:

• maintaining an information repository comprising information associated with past processes that have been performed in response to respective issues in a computing arrangement, the information of the past processes comprising information associated with actions taken in the past processes to address the respective issues;
• receiving a first alert relating to an issue in the computing arrangement;
• determining that the first alert is similar to a second alert in the information repository, wherein determining that the first alert is similar to the second alert comprises:
• comparing, using a distance function, a first string to a plurality of strings, wherein:
• the first string represents tasks performed in response to the first alert,
• each string of the plurality of strings represents a task performed in response to the second alert, and
• the distance function is configured to calculate an edit distance based on a respective number of edits to be performed on the first string to arrive at the plurality of strings;
• in response to determining that the first alert is similar to the second alert, determine a remediation action for the issue, wherein the remediation action comprises an action identified based on the information in the information repository as having been performed in response to the second alert;
• and
• performing the remediation action.

A system comprising:

• a processor;
• and
• a non-transitory storage medium storing instructions executable on the processor to:
• receive a first alert relating to an issue in a computing arrangement;
• determine that the first alert is similar to a second alert in an information repository, wherein the information repository comprises information associated with past processes performed in response to respective issues, the information comprising information associated with actions taken in the past processes to address the respective issues, wherein determining that the first alert is similar to the second alert comprises:
• comparing, using a distance function, a first string to a plurality of strings, wherein:
• the first string represents tasks performed in response to the first alert,
• each string of the plurality of strings represents a task performed in response to the second alert, and
• the distance function is configured to calculate an edit distance based on a respective number of edits to be performed on the first string to arrive at the plurality of strings;
• in response to determining that the first alert is similar to the second alert, determine a remediation action for the issue, wherein the remediation action comprises an action identified based on the information in the information repository as having been performed in response to the second alert;
• and
• trigger performance of the remediation action.