公开(公告)号：US20230418701A1

公开(公告)日：2023-12-28

申请号：US18180361

申请日：2023-03-08

申请人： Hitachi, Ltd.

发明人： Taku Wakui ,  Mineyoshi Masuda

IPC分类号： G06F11/07

CPC分类号： G06F11/076 ,  G06F11/0793

摘要： An anomaly detection apparatus executes prediction processing to predict fluctuations of a normal range for a value of a parameter in a specified period, correction processing to identify an upper limit value at a local maximum point from fluctuating upper limit values of the predicted normal range, correct the upper limit values of the normal range, identify an upper limit value at a local minimum point from fluctuating upper limit values of the corrected normal range, and correct the upper limit values of the corrected normal range based on the upper limit value at the local minimum point identified, and anomaly detection processing to acquire a value of the parameter in the specified period, determine whether the value of the parameter acquired falls within the corrected normal range, and output predetermined information when determining that the value of the parameter acquired does not fall within the corrected normal range.

公开(公告)号：US11243937B2

公开(公告)日：2022-02-08

申请号：US16568311

申请日：2019-09-12

申请人： Hitachi, Ltd.

发明人： Jana Backhus ,  Yosuke Himura ,  Mineyoshi Masuda

IPC分类号： G06F7/00 ,  G06F16/00 ,  G06F16/23 ,  G06F16/2455

摘要： A log labeling apparatus is configured to include a label importance DB and a similarity DB configured to store importance information between a plurality of labels and an action set and action set information identifying a first action set for calculating a second similarity with each label of a first log unit, a similarity calculation unit configured to calculate the second similarity with each label of the first log unit on the basis of the importance information, an action set of the first log unit, and the action set of the action set information, a post processor configured to detect label candidates, and an accumulation determination unit configured to determine a second action set for calculating a second similarity of a second log unit and to store action set information on the second action set in the similarity DB.

公开(公告)号：US10909016B2

公开(公告)日：2021-02-02

申请号：US15744626

申请日：2016-02-03

申请人： HITACHI, LTD.

发明人： Emiko Kobayashi ,  Mineyoshi Masuda

IPC分类号： G06F15/177 ,  G06F11/07 ,  G06F11/34 ,  G06F9/455 ,  G06Q10/00 ,  H04L12/26 ,  G06F11/30

摘要： In a system where resources are used in a varying manner, when performances are monitored based on detected past behavior when the system was operating normally, if performance behavior is detected that is different, it is difficult to determine whether the detected performance behavior results from resources being used differently than when the system was operating normally. According to the present invention, monitoring accuracy is improved by determining whether performance behavior results from change in characteristics relating to the usage of the system by using means for measuring performances when the system is in operation and detecting a performance different from when the system was operating normally, means for measuring characteristics relating to the usage of the system and detecting whether the characteristics are different from when the system was operating normally, and means for comparing performance information with characteristic information relating to the usage of the system.

公开(公告)号：US20150135312A1

公开(公告)日：2015-05-14

申请号：US14400499

申请日：2012-08-31

申请人： Hitachi, Ltd.

发明人： Kiyomi Wada ,  Mineyoshi Masuda ,  Kentaro Watanabe

IPC分类号： H04L29/06

CPC分类号： H04L63/1408 ,  G06F11/00 ,  G06F11/07 ,  G06F11/0748 ,  G06F11/3409 ,  G06F11/3495 ,  G06F2201/81 ,  G06F2201/875 ,  H04L43/045 ,  H04L43/08 ,  H04L63/1425

摘要： A monitoring system for monitoring a service execution infrastructure for providing a service to client computers via a network manages baselines of monitoring values of components per load of the service provided by the infrastructure, and uses the baselines depending on a current service load. When detecting an abnormality of a service monitoring value or component monitoring value by use of the baselines, the monitoring system compares events up to predetermined minutes ago from now with events in the baseline time zone thereby to specify a differential event (or non-normal recent event).

摘要翻译： 用于监视服务执行基础设施以用于经由网络向客户端计算机提供服务的监控系统管理由基础设施提供的服务的每个负载的组件的监控值的基准，并且根据当前服务负载使用基线。 当通过使用基线检测到服务监视值或部件监视值的异常时，监控系统将从现在开始直到预定分钟前的事件与基准时间段内的事件进行比较，从而指定差异事件（或非正常的最近 事件）。