公开(公告)号：US20240202279A1

公开(公告)日：2024-06-20

申请号：US18085300

申请日：2022-12-20

申请人： Microsoft Technology Licensing, LLC

发明人： Mohit VERMA ,  Ananth GEETHANATH ,  Rakesh NAMINENI ,  Ali ALAM ,  Kamaljit Singh BATH ,  Ramanathan MUTHIAH ,  Suneel SURESH

IPC分类号： G06F17/40 ,  G06F17/16 ,  G06F18/2137 ,  G06F18/2433

CPC分类号： G06F17/40 ,  G06F17/16 ,  G06F18/2137 ,  G06F18/2433

摘要： The present disclosure relates to methods, systems, and computer readable media for analyzing log files for a wide variety of services (e.g., cloud computing services or microservices) to determine whether the services are operating as designed over some period of time associated with the log file(s). The present disclosure includes features and functionality for training or otherwise generating a model being configured to predict whether portions of an input log file include data reflective of normal operations of a corresponding service used to generate the input log file. The present disclosure provides a domain-agnostic approach to training an outlier detection model to analyze log files for a wide variety of services.

公开(公告)号：US20230353588A1

公开(公告)日：2023-11-02

申请号：US18020909

申请日：2021-08-18

申请人： Microsoft Technology Licensing, LLC

发明人： Ananth GEETHANATH ,  Ali ALAM ,  Shankaranand ARUNACHALAM

IPC分类号： H04L43/16 ,  H04L9/40 ,  H04L41/0631

CPC分类号： H04L63/1425 ,  H04L41/064 ,  H04L43/16

摘要： A system and method for detecting anomalies in a data stream is described. The system receives the data stream that comprises values of metrics derived from observations of operation of a computing entity over a time window. A model comprising variances of the data over the time window is formed. The model identifies operating thresholds for each metric based on the variances of the data for each metric in the data stream. The system computes a steady state distance matrix of the data stream. The system determines that the steady state distance matrix exceeds a steady state threshold. In response to determining that the steady state distance matrix exceeds the steady state threshold, the system computes a pattern distance matrix based on the steady state distance matrix. The anomaly in the data stream is detected based on the pattern distance matrix. The system generates an alert indicating the anomaly.