Alert cluster analysis apparatus, method, and computer program product

A computer-implemented method comprising:

• accessing an alert set associated with one or more service events;
• applying a feature extraction model that is configured to extract alert features from the alert set;
• applying an alert clustering model to group alerts of the alert set into one or more alert clusters based at least in part on the alert features;
• determining an alert significance score for each of the one or more alert clusters;
• comparing the alert significance score for each of the one or more alert clusters to an alert insignificance threshold;
• and
• in a circumstance where an alert significance score for a selected alert cluster of the one or more alert clusters satisfies the alert insignificance threshold, outputting an alert policy change data object to an alert manager device.

A computer program product, stored on a computer readable medium, comprising instructions that when executed by one or more computers cause the one or more computers to:

• access an alert set associated with one or more service events;
• apply a feature extraction model that is configured to extract alert features from the alert set;
• apply an alert clustering model to group alerts of the alert set into one or more alert clusters based at least in part on the alert features;
• determine an alert significance score for each of the one or more alert clusters;
• compare the alert significance score for each of the one or more alert clusters to an alert insignificance threshold;
• and
• in a circumstance where an alert significance score for a selected alert cluster of the one or more alert clusters satisfies the alert insignificance threshold, output an alert policy change data object to an alert manager device.