Determining dependent causes of a computer system event
AssigneeJuniper Networks, Inc.
InventorRavindra Guntur
Life of this patent
Estimating the term…
Abstract
Disclosed are methods and systems for determining combinations of system parameters that indicate a root cause of a system level experience deterioration (SLED). Some of the disclosed embodiments generate a decision tree from a first class of operational parameter datasets. Rules are derived from the decision tree. Filtered rule sets for feature parameters included in the system parameters are then determined. Pairs of features within a particular dataset that each satisfy their respective filtered rule sets are indicative of a root cause of the degradation, at least in some embodiments.
Claims15
A method, comprising:
- obtaining a plurality of datasets, each dataset comprising time correlated operational parameter values, the operational parameter values including values of feature parameters and values of target parameters;
- classifying a portion of the datasets as either a first or second class of datasets based on a target parameter value indicated by each of the datasets;
- generating a rule set from a decision tree based on the classifying;
- identifying, from the plurality of datasets, a dataset of the first class that satisfies at least two sub-rules included in the rule set;
- identifying a first feature parameter of the identified dataset based on a first sub-rule of the at least two sub-rules;
- identifying a second feature parameter of the identified dataset based on a second sub-rule of the at least two sub-rules;
- identifying a first remedial action based on the first feature parameter;
- identifying a second remedial action based on the second feature parameter;
- and
- performing one or more of the first remedial action or the second remedial action based on a first impact of the first remedial action and a second impact of the second remedial action, wherein determining the first impact is based on one or more of a number of users affected by the first remedial action, a priority of a device affected by the first remedial action, or a priority of network communication affected by the first remedial action.
A system, comprising:
- hardware processing circuitry;
- one or more memories storing instructions that when executed configure hardware processing circuitry to perform operations comprising:
- obtaining a plurality of datasets, each dataset comprising time correlated operational parameter values, the operational parameter values including values of feature parameters and values of target parameters;
- classifying a portion of the datasets as either a first class or second class of datasets based on a target parameter value indicated by each of the datasets;
- generating a rule set from a decision tree based on the classifying;
- identifying, from the plurality of datasets, a dataset of the first class that satisfies at least two sub-rules included in the rule set;
- identifying a first feature parameter of the identified dataset based on a first sub-rule of the at least two sub-rules;
- identifying a second feature parameter of the identified dataset based on a second sub-rule of the at least two sub-rules;
- identifying a first remedial action based on the first feature parameter;
- identifying a second remedial action based on the second feature parameter;
- and
- conditionally performing one or more of the first remedial action or the second remedial action based on a first impact of the first remedial action and a second impact of the second remedial action, wherein determining the first impact is based on one or more of a number of users affected by the first remedial action, a priority of a device affected by the first remedial action, or a priority of network communication affected by the first remedial action.
A non-transitory computer readable medium comprising instructions that when executed configure hardware processing circuitry to perform operations comprising:
- obtaining a plurality of datasets, each dataset comprising time correlated operational parameter values, the operational parameter values including values of feature parameters and values of target parameters;
- classifying a portion of the datasets as either a first or second class of datasets based on a target parameter value indicated by each of the datasets;
- generating a rule set from a decision tree based on the classifying;
- identifying, from the plurality of datasets, a dataset of the first class that satisfies at least two sub-rules included in the rule set;
- identifying a first feature parameter based on a first sub-rule of the at least two sub-rules;
- identifying a second feature parameter based on a second sub-rule of the at least two sub-rules;
- identifying a first remedial action based on the first feature parameter;
- identifying a second remedial action based on the second feature parameter;
- and
- conditionally performing one or more of the first remedial action or the second remedial action based on a first impact of the first remedial action and a second impact of the second remedial action, wherein determining the first impact is based on one or more of a number of users affected by the first remedial action a priority of a device affected by the first remedial action, or a priority of network communication affected by the first remedial action.
Dependencies are inferred from the claim text.