Detection of isolated changes in network metrics using smart-peering

An apparatus, comprising:

• one or more network interfaces;
• a processor coupled to the one or more network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process that is executable by the processor, the process when executed configured to:
• identify changes in a key performance indicator for each of a plurality of network entities in one or more networks;
• form a peer group of network entities from the plurality of network entities whose changes in the key performance indicator over time are correlated;
• monitor the key performance indicator for network entities in the peer group of network entities;
• and
• detect, based on the key performance indicator monitored for the network entities in the peer group of network entities, an anomalous change in the key performance indicator for a particular network entity in the peer group of network entities relative to other network entities in the peer group of network entities by comparing changes in the key performance indicator for the particular network entity over a time period to changes in the key performance indicator for the other network entities over the time period.

A non-transitory computer-readable medium storing program instructions that cause a network assurance service that monitors one or more networks to execute a process comprising:

• identifying, by the network assurance service, changes in a key performance indicator for each of a plurality of network entities in the one or more networks;
• forming by the network assurance service, a peer group of network entities from the plurality of network entities whose changes in the key performance indicator over time are correlated;
• monitoring, by the network assurance service, the key performance indicator for network entities in the peer group of network entities;
• and
• detecting, by the network assurance service and based on the monitoring, an anomalous change in the key performance indicator for a particular network entity in the peer group of network entities relative to other network entities in the peer group of network entities by comparing changes in the key performance indicator for the particular network entity over a time period to changes in the key performance indicator for the other network entities over the time period.