Automated meta parameter search for invariant based anomaly detectors in log analytics
AssigneeNEC Laboratories America, Inc.
InventorsHui Zhang, Bo Zong
Life of this patent
Estimating the term…
Abstract
Systems and methods for automatically generating a set of meta-parameters used to train invariant-based anomaly detectors are provided. Data is transformed into a first set of time series data and a second set of time series data. A fitness threshold search is performed on the first set of time series data to automatically generate a fitness threshold, and a time resolution search is performed on the set of second time series data to automatically generate a time resolution. A set of meta-parameters including the fitness threshold and the time resolution are sent to one or more user devices across a network to govern the training of an invariant-based anomaly detector.
Claims20
A computer-implemented method for automatically generating a set of meta-parameters used to train invariant-based anomaly detectors, comprising:
- transforming, by a processor, data into a first set of time series data and a second set of time series data;
- performing, by the processor, a fitness threshold search based on the first set of time series data to automatically generate a fitness threshold;
- performing, by the processor, a time resolution search on the second set of time series data to automatically generate a time resolution;
- and
- sending, by the processor to one or more user devices across a network, a set of meta-parameters including the fitness threshold and the time resolution to govern the training of an invariant-based anomaly detector.
A system to automatically generate a set of meta-parameters used to train invariant-based anomaly detectors, comprising:
- a computer system configured to generate data including log data;
- and
- a processor operatively coupled to a memory, wherein the processor is configured to:
- obtain the data from the computer system, and transform the obtained data into a first set of time series data and a second set of time series data;
- perform a fitness threshold search based on the first set of time series data to automatically generate a fitness threshold;
- perform a time resolution search on the second set of time series data to automatically generate a time resolution;
- and
- send, to one or more user devices across a network, a set of meta-parameters including the fitness threshold and the time resolution to govern the training of an invariant-based anomaly detector.
A computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method for automatically generating a set of meta-parameters used to train invariant-based anomaly detectors comprising:
- transforming data into a first set of time series data and a second set of time series data;
- performing a fitness threshold search based on the first set of time series data to automatically generate a fitness threshold;
- performing a time resolution search on the second set of time series data to automatically generate a time resolution;
- and
- send, to one or more user devices across a network, a set of meta-parameters including the fitness threshold and the time resolution to govern the training of an invariant-based anomaly detector.
Dependencies are inferred from the claim text.