Dynamic alert suppression policy management

A system, comprising:

• a processor;
• and
• memory or storage comprising an algorithm or computer instructions, which when executed by the processor, performs an operation comprising:
• receiving an event stream, wherein the event stream includes metric values comprising at least one of:
• log anomaly data and metric anomaly data;
• determining an anomalous event based on the event stream;
• determining a persistent region of the anomalous event;
• determining a quantum representation of the persistent region;
• determining X-Y values of the persistent region based on the quantum representation;
• and
• generating a policy based on a set of the X-Y values.

A computer-readable storage medium having a computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform an operation comprising:

• receiving an event stream, wherein the event stream includes metric values comprising at least one of:
• log anomaly data and metric anomaly data;
• determining an anomalous event based on the event stream;
• determining a persistent region of the anomalous event, wherein the quantum representation represents a minimum time duration common to at least one persistent region;
• determining a quantum representation of the persistent region;
• determining X-Y values of the persistent region based on the quantum representation;
• and
• generating a policy based on a set of the X-Y values.