# US 2018/0321997 A1 · Issue detection and signature generation > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0321997 A1 - Document ID: US20180321997A1 - Status: Published application - Kind: A1 - Application number: 15/584,133 - Filed: 2017-05-02 - Published: 2018-11-08 - Earliest claimed: 2017-05-02 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Nagaraju PALLA; Raghavendra BHUTHPUR; Narendra Babu ALAGIRISWAMY; Nicholas John NEHRHOOD; Nagaraj PATIL - Web page: https://patentgrep.com/patent/US20180321997A1 ## CPC - G06F 11/079: {Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36)} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/0751: {Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06)} - G06F 11/0775: {Content or structure details of the error report, e.g. specific table structure, specific error fields} - G06F 11/30: Monitoring - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A problem with a computing system is detected, a root cause is identified and a solution is also identified. Diagnostic data is obtained and an issue signature is generated that maps the issue to failed components and product functionality. ## Claims ### Claim 1 A computing system, comprising: problem signature generator logic that generates signature elements corresponding to a detected problem and that generates a signature from the signature elements, the problem signature generator logic receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer, the problem signature generator logic generating the problem signature corresponding to the detected problem based on the signature elements obtained from the aggregated problem diagnostic data; problem aggregation logic that groups problems by signature, to obtain grouped problem data, by combining the aggregated problem diagnostic data with other aggregated problem diagnostic data corresponding to other detected problems, based on the problem signature and problem signatures for the other detected problems; and grouped problem surfacing logic that surfaces a metric generated based on the grouped problems. ### Claim 2 (depends on 1) The computing system of claim 1 wherein the problem signature generator logic comprises: signature generation logic configured to assemble the signature elements corresponding to the detected problem into the problem signature. ### Claim 3 (depends on 2) The computing system of claim 2 wherein the problem signature generator logic comprises: problem identifier logic configured to generate a signature element as a problem identifier that identifies the problem. ### Claim 4 (depends on 3) The computing system of claim 3 wherein the problem signature generator logic comprises: applied solution identifier logic configured to generate a signature element as a solution identifier that identifies a solution applied to address the problem. ### Claim 5 (depends on 4) The computing system of claim 4 wherein the problem signature generator logic comprises: context identifier logic configured to generate a signature element as context information indicative of a context of the client computing system when the problem was detected. ### Claim 6 (depends on 5) The computing system of claim 5 wherein the context identifier logic comprises: operating system identifier logic configured to identify an operating system running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data. ### Claim 7 (depends on 5) The computing system of claim 5 wherein the context identifier logic comprises: running application identifier logic configured to identify any applications running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data. ### Claim 8 (depends on 5) The computing system of claim 5 wherein the problem signature generator logic comprises: diagnostic data parsing logic configured to generate a signature element as one or more event identifiers identifying an event or event sequence corresponding to the problem based on the aggregated problem diagnostic data. ### Claim 9 (depends on 8) The computing system of claim 8 wherein the diagnostic data parsing logic comprises: client/server log parsing logic that parses client and server log data received in the aggregated problem diagnostic data. ### Claim 10 (depends on 2) The computing system of claim 2 wherein the problem aggregation logic comprises: signature comparison logic that compares the problem signature to the other problem signatures to identify similar problem signatures. ### Claim 11 (depends on 10) The computing system of claim 10 wherein the problem aggregation logic comprises: problem grouping logic configured to group the aggregated problem diagnostic data for problems having similar signatures. ### Claim 12 A computer implemented method, comprising: receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer; generating signature elements corresponding to the detected problem from the aggregated problem diagnostic data; generating a problem signature corresponding to the detected problem based on the signature elements obtained from the aggregated problem diagnostic data; grouping problems by signature, to obtain grouped problem data, by combining the aggregated problem diagnostic data with other aggregated problem diagnostic data corresponding to other detected problems, based on the problem signature and problem signatures for the other detected problems; and surfacing a metric generated based on the grouped problems. ### Claim 13 (depends on 12) The computer implemented method of claim 12 wherein generating signature elements comprises: generating a signature element as a problem identifier that identifies the problem. ### Claim 14 (depends on 13) The computer implemented method of claim 13 wherein generating signature elements comprises: generating a signature element as a solution identifier that identifies a solution applied to address the problem. ### Claim 15 (depends on 14) The computer implemented method of claim 14 wherein generating signature elements comprises: generating a signature element as context information indicative of a context of the client computing system when the problem was detected. ### Claim 16 (depends on 15) The computer implemented method of claim 15 wherein generating a signature elements as context information comprises: identifying an operating system running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data. ### Claim 17 (depends on 15) The computer implemented method of claim 15 wherein generating a signature element as context information comprises: identifying any applications running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data. ### Claim 18 (depends on 15) The computer implemented method of claim 15 wherein generating signature elements comprises: generating a signature element as one or more event identifiers identifying an event or event sequence corresponding to the problem based on the aggregated problem diagnostic data. ### Claim 19 (depends on 13) The computer implemented method of claim 13 wherein grouping problems by signature comprises: comparing the problem signature to the other problem signatures to identify similar problem signatures; and grouping the aggregated problem diagnostic data for problems having similar signatures. ### Claim 20 A computing system, comprising: problem signature generator logic that generates signature elements corresponding to a detected problem, the problem signature generator logic receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer, the problem signature generator logic generating the signature elements based on the received aggregated problem diagnostic data; signature generation logic configured to assemble the signature elements corresponding to the detected problem into a problem signature corresponding to the detected problem; problem aggregation logic that groups problems by signature, to obtain grouped problem data, by combining the aggregated problem diagnostic data with other aggregated problem diagnostic data corresponding to other detected problems, based on the problem signature and problem signatures for the other detected problems; and grouped problem surfacing logic that surfaces a metric generated based on the grouped problems.