Wide area network issue prediction based on detection of service provider connection swapping

A method comprising:

• obtaining, by a network management system (NMS), connection event data for one or more network access servers (NAS) devices at a site, wherein each event included in the connection event data comprises a connection or disconnection event of a connection session provided by a service provider between a NAS device of the one or more NAS devices and the NMS;
• detecting, by the NMS, a number of connection swaps in the connection event data over a time window, wherein a connection swap includes a change from a first connection session provided by a first service provider to a second connection session provided by a second service provider;
• based on the detected number of connection swaps satisfying a threshold, predicting, by the NMS, a root cause of the connection swaps as a wide area network (WAN) issue;
• and
• generating, by the NMS, a notification of the predicted root cause of the connection swaps.

Non-transitory computer readable storage media comprising instructions that, when executed, cause one or more processors to:

• obtain connection event data for one or more network access servers (NAS) devices at a site, wherein each event included in the connection event data comprises a connection or disconnection event of a connection session provided by a service provider between a NAS device of the one or more NAS devices and a network management system (NMS);
• detect a number of connection swaps in the connection event data over a time window, wherein a connection swap includes a change from a first connection session provided by a first service provider to a second connection session provided by a second service provider;
• based on the detected number of connection swaps satisfying a threshold, predict a root cause of the connection swaps as a wide area network (WAN) issue;
• and
• generate a notification of the predicted root cause of the connection swaps.