Performance anomaly detection and smart alerting

A computer system comprising:

• a processor;
• and
• a computer storage medium storing computer-useable instructions that, when used by the processor, causes the computer system to perform operations comprising:
• establishing a communication session between a first server hosted by a first entity and a second server hosted by a third-party entity, wherein the third-party entity hosts one or more servers that provide content of the first entity to user devices of end users;
• automatically receiving, at the first server hosted by the first entity, a plurality of cost-per-click data for the content of the first entity from the second server hosted by the third-party entity;
• applying a performance anomaly detection model to the plurality of cost- per-click data for anomaly detection, the performance anomaly detection model being trained using historical cost-per-click data, wherein the historical cost-per-click data and the plurality of cost-per-click data correspond to a first geographical area;
• based on applying the performance anomaly detection model, determining that a first cost-per-click data of the plurality of cost-per-click data is above an anomaly threshold;
• and
• based on determining that the first cost-per-click data is above the anomaly threshold, automatically causing a remediation action comprising pausing provision of the content for the first entity from one or more servers hosted by the third-party entity to user devices of end users;
• establishing a second communication session with a third server hosted by a second third-party entity;
• automatically receiving second cost-per-click data for the first entity from the third server, wherein the second cost-per-click data from the third server corresponds to a second geographical area different than the first geographical area of the plurality of cost-per-click data from the second server;
• applying the performance anomaly detection model to the second cost-per-click data from the third server for anomaly detection, the performance anomaly detection model being trained using historical cost-per-click data for the first entity that corresponds to the second geographical area;
• based on applying the performance anomaly detection model to the second cost-per-click data from the third server, determining that the second cost-per-click data from the third server is above a second anomaly threshold;
• and
• based on determining that the second cost-per-click data from the third server is above the second anomaly threshold, automatically causing a second remediation action comprising pausing provision of content for the first entity from one or more further servers hosted by the second third-party entity to user devices of end users.

One or more non-transitory computer storage media storing computer-useable instructions that, when executed by at least one processor, cause the at least one processor to perform operations, the operations comprising:

• automatically receiving, at a first server hosted by a first entity, a plurality of time series that each include cost-per-click data for content of a first entity from a second server hosted by a third-party entity, wherein the third-party entity hosts one or more servers that provide the content of the first entity to user devices of end users, and wherein the cost-per-click data from the second server corresponds to provision of the content of the first entity in a first geographical area;
• applying a performance anomaly detection model to each of the plurality of time series that each include the cost-per-click data for anomaly detection, the performance anomaly detection model being trained using historical time series that include historical cost-per-click data for the first entity that corresponds to the first geographical area;
• based on applying the performance anomaly detection model to each of the plurality of time series, causing to display, on a user device of the first entity, output provided by the performance anomaly detection model;
• identifying, based on the output provided by the performance anomaly detection model, cost-per-click data from the plurality of time series that is above an anomaly threshold;
• based on identifying the cost-per-click data that is above the anomaly threshold, automatically causing a remediation action comprising pausing provision of the content for the first entity from one or more servers hosted by the third-party entity to user devices of end users;
• automatically receiving a second plurality of time series that each include cost-per-click data for the first entity from a third server, wherein the cost-per-click data of the second plurality of time series correspond to a second geographical area that is different than the first geographical area;
• applying the performance anomaly detection model to each of the second plurality of time series;
• causing to display, on the user device, output for the second plurality of time series provided by the performance anomaly detection model;
• identifying cost-per-click data from the second plurality of time series that is above a second anomaly threshold;
• and
• causing to display, on the user device of the first entity, the anomaly detection corresponding to the cost-per-click data from the second plurality of time series that is above the second anomaly threshold.