Adaptive thresholding of data streamed to a data processing pipeline

A system comprising:

• a data store including computer-executable instructions;
• and
• one or more processors configured to execute the computer-executable instructions, wherein execution of the computer-executable instructions causes the system to:
• receive historical key performance indicator (KPI) data corresponding to a period of time;
• determine, at a first time, a seasonal component of the historical KPI data;
• obtain, at a second time after the first time, a KPI value on which to perform adaptive thresholding;
• decompose the KPI value based at least in part on the determined seasonal component to form a modified version of the KPI value;
• generate a sketch for the modified version of the KPI value;
• determine a quantile value based at least in part on the sketch and a second sketch generated for a modified version of a second KPI value obtained by a data processing node at a third time before the second time;
• determine that the modified version of the KPI value exceeds the quantile value;
• and
• output an indication that the KPI value is an outlier in response to the determination that the modified version of the KPI value exceeds the quantile value.

Non-transitory computer-readable media including computer-executable instructions that, when executed by a computing system, cause the computing system to:

• receive historical key performance indicator (KPI) data corresponding to a period of time;
• determine, at a first time, a seasonal component of the historical KPI data;
• obtain, at a second time after the first time, a KPI value on which to perform adaptive thresholding;
• decompose the KPI value based at least in part on the determined seasonal component to form a modified version of the KPI value;
• generate a sketch for the modified version of the KPI value;
• determine a quantile value based at least in part on the sketch and a second sketch generated for a modified version of a second KPI value obtained by a data processing node at a third time before the second time;
• determine that the modified version of the KPI value exceeds the quantile value;
• and
• output an indication that the KPI value is an outlier in response to the determination that the modified version of the KPI value exceeds the quantile value.