公开(公告)号：US20240281748A1

公开(公告)日：2024-08-22

申请号：US18646865

申请日：2024-04-26

Applicant: Dynatrace LLC

Inventor： Otmar ERTL

IPC: G06Q10/0639 ,  G06F11/30 ,  G06Q10/0633 ,  H04L67/1042

CPC classification number: G06Q10/06393 ,  G06F11/301 ,  G06Q10/0633 ,  H04L67/1042

Abstract: A system and method is proposed for estimating the contribution of components of a distributed computing environment to the generation of economically relevant values, like e.g., revenue numbers. Agents are deployed to the computing environment that trace executed transactions and that monitor components used to execute those transactions. The transaction trace data also contains data about the origin/user of transactions, which may be used to group transactions corresponding to particular interactions of individual users with the monitored application into visit data. Data describing economically relevant activities of transactions, like the purchase of goods, are also observed by agents and reported in trace data. Functional dependencies described in transaction trace data and resource related dependencies derived from component monitoring data are used to identify functionality and components that contributed to the generation of business value. The generated business value is assigned to contributing components to incrementally create data describing the economic value of those components. The so generated data can be used for various business-related analyses.

公开(公告)号：US20230169136A1

公开(公告)日：2023-06-01

申请号：US17993015

申请日：2022-11-23

Applicant: Dynatrace LLC

Inventor： Bernhard LACKNER ,  Jordi MASRAMON ,  Otmar ERTL

IPC: G06F16/957 ,  G06F16/958 ,  G06F16/9535

CPC classification number: G06F16/9577 ,  G06F16/958 ,  G06F16/9535

Abstract: A technology for the optimized capturing of resource file content for resources referred in recorded user interaction sequences is disclosed. Individual resource files are typically referred in multiple recorded resources, therefore it is desired to capture those resources only once and reuse them for all recorded session capturing them. As user interaction sequences are executed and captured in independently operating web-browsers, a direct coordination between recording web-browsers to avoid multiple captures of the same resource is not possible. Data about the global resource capturing and demand situation is generated on a monitoring server that receives all session recording data and transferred to session recording browsers in form of lists identifying resources that are referred in sessions but are still unresolved and should therefore be captured, and for resources that should not captured, because they are already available and capturing them again should be avoided.

公开(公告)号：US20210319006A1

公开(公告)日：2021-10-14

申请号：US17358170

申请日：2021-06-25

Applicant: Dynatrace LLC

Inventor： Otmar ERTL

IPC: G06F16/22 ,  G06N7/00 ,  G06F16/23 ,  G06F17/18

Abstract: A system and method for the estimation of the cardinality of large sets of transaction trace data is disclosed. The estimation is based on HyperLogLog data sketches that are capable to store cardinality relevant data of large sets with low and fixed memory requirements. The disclosure contains improvements to the known analysis methods for HyperLogLog data sketches that provide improved relative error behavior by eliminating a cardinality range dependent bias of the relative error. A new analysis method for HyperLogLog data structures is shown that uses maximum likelihood analysis methods on a Poisson based approximated probability model. In addition, a variant of the new analysis model is disclosed that uses multiple HyperLogLog data structured to directly provide estimation results for set operations like intersections or relative complement directly from the HyperLogLog input data.

公开(公告)号：US20250077521A1

公开(公告)日：2025-03-06

申请号：US18814009

申请日：2024-08-23

Applicant: Dynatrace LLC

Inventor： Otmar ERTL

IPC: G06F16/2453 ,  G06F16/2455

Abstract: Methods and technologies are disclosed for the sketch efficient estimation of large-scale multi-sets in distributed, stream-oriented environments. Sketch updates are idempotent and commutative, to support duplicate set elements and varying element sequences. They are also mergeable to support distributed sketch recording. The recording process uses stepwise approximated geometric distributions, efficiently generated from NLZ values of received sketch updates, by using only multiplications with powers of two and integer additions. Sketch registers are subdivided into a portion storing an observed max update value for the register, and a portion storing set of flag bits indicating observed next smaller update values for the register. A Max Likelihood base sketch data evaluation, based on the assumption of statistically independent sketch registers is proposed. The limited number of different probabilities created by the stepwise approximated geometric distributions leads to a Max Likelihood function with coefficients that can be calculated solely with integer arithmetic.

公开(公告)号：US20200257657A1

公开(公告)日：2020-08-13

申请号：US16786992

申请日：2020-02-10

Applicant: Dynatrace LLC

Inventor： Otmar ERTL

IPC: G06F16/14 ,  G06K9/62 ,  G06F7/58

Abstract: A system and method for the creation of locality sensitive hash signatures using weighted feature sets is disclosed. The disclosed methodology takes advantage of discretization mechanisms commonly used in computer systems to model the influence of the feature weights on the calculated hash signature. Pseudo random numbers required for the signature calculation are created in ascending order, which enables the signature generation mechanism to identify and avoid the unnecessary creation of pseudo random numbers to improve the performance of the signature calculation process. Further, hierarchic, tree-search like algorithms are used during the processing of signature weights to further decrease the number of required random numbers. The features of the Poisson Process model, like its ability to provide random numbers in ascending order and the split- and mergeability of Poisson Processes are used to further improve the performance of the signature calculation process.

公开(公告)号：US20180373580A1

公开(公告)日：2018-12-27

申请号：US15997734

申请日：2018-06-05

Applicant: Dynatrace LLC

Inventor： Otmar ERTL ,  Ernst AMBICHL

IPC: G06F11/07 ,  G06F11/34

CPC classification number: G06F11/0709 ,  G06F11/0754 ,  G06F11/0766 ,  G06F11/079 ,  G06F11/3006 ,  G06F11/3409 ,  G06F11/3419 ,  G06F11/3452 ,  G06F11/3495 ,  G06F2201/87

Abstract: A system and method for the distributed analysis of high frequency transaction trace data to constantly categorize incoming transaction data, identify relevant transaction categories, create per-category statistical reference and current data and perform statistical tests to identify transaction categories showing overall statistically relevant performance anomalies. The relevant transaction category detection considers both the relative transaction frequency of categories compared to the overall transaction frequency and the temporal stability of a transaction category over an observation duration. The statistical data generated for the anomaly tests contains next to data describing the overall performance of transactions of a category also data describing the transaction execution context, like the number of concurrently executed transactions or transaction load during an observation period. Anomaly tests consider current and reference execution context data in addition to statistic performance data to determine if detected statistical performance anomalies should be reported.

公开(公告)号：US20170075749A1

公开(公告)日：2017-03-16

申请号：US15264867

申请日：2016-09-14

Applicant: Dynatrace LLC

Inventor： Ernst AMBICHL ,  Helmut SPIEGL ,  Otmar ERTL ,  Herwig MOSER

IPC: G06F11/07

CPC classification number: G06F11/079 ,  G06F11/0709 ,  G06F11/0712 ,  G06F11/0748 ,  G06F11/30 ,  G06F11/3072 ,  G06F11/34 ,  G06F11/3452 ,  G06F11/3476 ,  H04L41/0631 ,  H04L41/12 ,  H04L41/22 ,  H04L41/5009

Abstract: A method is disclosed that estimates causal relationships between events based on heterogeneous monitoring data. The monitoring data consists in transaction tracing data, describing the execution performance of individual transactions, resource utilization measurements of infrastructure entities like processes or operating systems and network utilization measurement data. A topology model of the monitored environment describing its entities and the communication activities of these entities is incrementally created. The location of occurred events in the topology model is determined. The topology model is used in conjunction with a domain specific causality propagation knowledge base to calculate the possibility of causal relationships between events. Different causality determination mechanisms, based on the type of involved events are used to create graphs of causal related events. A set of root cause events, representing those events with greatest global impact on all other events in an event graph is calculated for each identified event graph.

Abstract translation: 公开了一种估计基于异构监测数据的事件之间的因果关系的方法。 监控数据包括事务跟踪数据，描述各个事务的执行性能，基础设施实体（如进程或操作系统）以及网络利用率测量数据的资源利用率测量。 描述其实体的监视环境的拓扑模型和这些实体的通信活动是增量创建的。 确定拓扑模型中发生事件的位置。 拓扑模型与域特定因果传播知识库结合使用，以计算事件之间因果关系的可能性。 使用基于相关事件类型的不同因果关系确定机制来创建因果相关事件图。 针对每个识别的事件图计算一组根本原因事件，表示事件图中所有其他事件对全局影响最大的事件。

公开(公告)号：US20240119103A1

公开(公告)日：2024-04-11

申请号：US18381213

申请日：2023-10-18

Applicant: Dynatrace LLC

Inventor： Bernhard LACKNER ,  Jordi MASRAMON ,  Otmar ERTL

IPC: G06F16/957 ,  G06F16/9535 ,  G06F16/958

CPC classification number: G06F16/9577 ,  G06F16/9535 ,  G06F16/958 ,  G06F16/972

Abstract: A technology for the optimized capturing of resource file content for resources referred in recorded user interaction sequences is disclosed. Individual resource files are typically referred in multiple recorded resources, therefore it is desired to capture those resources only once and reuse them for all recorded session capturing them. As user interaction sequences are executed and captured in independently operating web-browsers, a direct coordination between recording web-browsers to avoid multiple captures of the same resource is not possible. Data about the global resource capturing and demand situation is generated on a monitoring server that receives all session recording data and transferred to session recording browsers in form of lists identifying resources that are referred in sessions but are still unresolved and should therefore be captured, and for resources that should not captured, because they are already available and capturing them again should be avoided.

公开(公告)号：US20240039699A1

公开(公告)日：2024-02-01

申请号：US18376882

申请日：2023-10-05

Applicant: Dynatrace LLC

Inventor： Otmar ERTL ,  Edyta KALKA

IPC: H04L9/06 ,  G06F7/58 ,  H04L9/08 ,  H04L9/32 ,  G06F11/30

CPC classification number: H04L9/0643 ,  G06F7/582 ,  G06F7/588 ,  H04L9/0869 ,  H04L9/3247 ,  G06F11/3068 ,  G06F11/3082

Abstract: A system and method for the analysis of log data is presented. The system uses SuperMinHash based locality sensitive hash signatures to describe the similarity between log lines. Signatures are created for incoming log lines and stored in signature indexes. Later similarity queries use those indexes to improve the query performance. The SuperMinHash algorithm uses a two staged approach to determine signature values, one stage uses a first random number to calculate the index of the signature value that is to update. The two staged approach improves the accuracy of the produced similarity estimation data for small sized signatures. The two staged approach may further be used to produce random numbers that are related, e.g. each created random number may be larger than its predecessors. This relation is used to optimize the algorithm by determining and terminating when further created random numbers have no influence on the created signature.

公开(公告)号：US20210200660A1

公开(公告)日：2021-07-01

申请号：US17198369

申请日：2021-03-11

Applicant: Dynatrace LLC

Inventor： Ernst AMBICHL ,  Herwig MOSER ,  Otmar ERTL

IPC: G06F11/34 ,  G06F16/901 ,  G06F11/07

Abstract: A system and method is disclosed for the automated identification of causal relationships between a selected set of trigger events and observed abnormal conditions in a monitored computer system. On the detection of a trigger event, a focused, recursive search for recorded abnormalities in reported measurement data, topological changes or transaction load is started to identify operating conditions that explain the trigger event. The system also receives topology data from deployed agents which is used to create and maintain a topological model of the monitored system. The topological model is used to restrict the search for causal explanations of the trigger event to elements of that have a connection or interact with the element on which the trigger event occurred. This assures that only monitoring data of elements is considered that are potentially involved in the causal chain of events that led to the trigger event.