US 2017/0249200 A1 · ANALYZING COMPUTING SYSTEM LOGS TO PREDICT EVENTS WITH THE COMPUTING SYSTEM

Abstract

A method for analyzing data of a networked computing environment, the method includes a computer processor analyzing a plurality of data of a networked computing environment aggregated during a first time interval, where the data includes messages that include message IDs. The method further includes identifying a frequency value of occurrences of a message ID within the plurality of data during the first time interval. The method further includes determining whether the frequency value of the occurrences of the message ID during the first time interval correlates to an anomaly that occurs within the networked computing environment. The method further includes responding to determining that the frequency value of the occurrences of message ID within the first time interval correlates to the anomaly by determining a first response to the anomaly. The method further includes initiating the first response to one or more elements of the networked computing environment.

Claims20

Dependent claims

A method for analyzing data of a networked computing environment, the method comprising the steps of:

analyzing, by one or more computer processors, a first plurality of data of a networked computing environment aggregated during a first time interval, wherein data of the networked computing environment includes messages that include message identifiers (IDs);
identifying, by one or more computer processors, a frequency value of occurrences of a message ID within the analyzed first plurality of data during the first time interval;
determining, by one or more computer processors, whether the frequency value of the occurrences of the message ID during the first time interval correlates to an anomaly that occurs within the networked computing environment;
responsive to determining that the frequency value of the occurrences of message ID within the first time interval correlates to the anomaly, determining, by one or more computer processors, a first response to the anomaly;
and
initiating, by one or more computer processors, the determined first response to one or more elements of the networked computing environment.

3 more elements

A computer program product for analyzing data of a networked computing environment, the computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions readable/executable by one or more computer processors:
program instructions to analyze a first plurality of data of a networked computing environment aggregated during a first time interval, wherein data of the networked computing environment includes messages that include message identifiers (IDs);
program instructions to identify a frequency value of occurrences of a message ID within the analyzed first plurality of data during the first time interval;
program instructions to determining whether the frequency value of the occurrences of the message ID during the first time interval correlates to an anomaly that occurs within the networked computing environment;
program instructions to respond to a determination that the frequency value of the occurrences of message ID within the first time interval correlates to the anomaly, determining a first response to the anomaly;
and
program instructions to initiate the determined first response to one or more elements of the networked computing environment.

4 more elements

A computer system for analyzing data of a networked computing environment, the computer system comprising:

one or more computer processors;
one or more computer readable storage media;
program instructions stored on the computer readable storage media for reading/execution by at least one of the one or more computer processors, the program instructions further comprising:
program instructions to analyze a first plurality of data of a networked computing environment aggregated during a first time interval, wherein data of the networked computing environment includes messages that include message identifiers (IDs);
program instructions to identify a frequency value of occurrences of a message ID within the analyzed first plurality of data during the first time interval;
program instructions to determining whether the frequency value of the occurrences of the message ID during the first time interval correlates to an anomaly that occurs within the networked computing environment;
program instructions to respond to a determination that the frequency value of the occurrences of message ID within the first time interval correlates to the anomaly, determining a first response to the anomaly;
and
program instructions to initiate the determined first response to one or more elements of the networked computing environment.

6 more elements

Dependencies are inferred from the claim text.

Analyzing computing system logs to predict events with the computing system

Life of this patent

Analyzing computing system logs to predict events with the computing system

Life of this patent

Abstract

Claims20