Automatically correlating phenomena detected in machine generated data to a tracked information technology change
AssigneeServiceNow, Inc.
InventorsYaron Lehmann, Dror Mann, Gabby Menahem
Life of this patent
Estimating the term…
Abstract
A specification of an information technology change is received via an information technology service management system. The specification of the information technology change is analyzed to determine features of the information technology change. Machine-generated data is analyzed to identify a phenomena detected in the machine-generated data. To a machine learning model, the features of the information technology change and features of the detected phenomena in the machine-generated data are provided to determine a correlation between the information technology change and the detected phenomena in the machine-generated data.
Claims20
A method, comprising:
- training a machine learning model based on previously identified valid matches between different phenomena detected in different machine-generated data and corresponding different root cause information technology changes;
- receiving via an information technology service management system, a specification of an information technology change detected in the information technology service management system;
- analyzing the specification of the information technology change to determine features of the information technology change;
- tracking the information technology change in a data structure of tracked information technology changes and their features;
- analyzing machine-generated computer log data to identify a change detected in the machine-generated computer log data;
- providing to the trained machine learning model the features of the information technology change and features of the identified change in the machine-generated computer log data;
- and
- identifying a match between the information technology change tracked in the data structure among other information technology changes tracked in the data structure and the identified change in the machine-generated computer log data based on a result of the trained machine learning model.
A system, comprising:
- one or more processors configured to:
- train a machine learning model based on previously identified valid matches between different phenomena detected in different machine-generated data and corresponding different root cause information technology changes;
- receive via an information technology service management system, a specification of an information technology change detected in the information technology service management system;
- analyze the specification of the information technology change to determine features of the information technology change;
- track the information technology change in a data structure of tracked information technology changes and their features;
- analyze machine-generated computer log data to identify an identified change in the machine-generated computer log data;
- provide to the trained machine learning model the features of the information technology change and features of the identified change in the machine-generated computer log data;
- and
- identify a match between the information technology change tracked in the data structure among other information technology changes tracked in the data structure and the identified change in the machine-generated computer log data based on a result of the trained machine learning model;
- and
- a memory coupled to at least one of the one or more processors and configured to provide the at least one of the one or more processors with instructions.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- training a machine learning model based on previously identified valid matches between different phenomena detected in different machine-generated data and corresponding different root cause information technology changes;
- receiving via an information technology service management system, a specification of an information technology change detected in the information technology service management system;
- analyzing the specification of the information technology change to determine features of the information technology change;
- tracking the information technology change in a data structure of tracked information technology changes and their features;
- analyzing machine-generated computer log data to identify a change detected in the machine-generated computer log data;
- providing to the trained machine learning model the features of the information technology change and features of the identified change in the machine-generated computer log data;
- and
- identifying a match between the information technology change tracked in the data structure among other information technology changes tracked in the data structure and the identified change in the machine-generated computer log data based on a result of the trained machine learning model.
Dependencies are inferred from the claim text.