公开(公告)号：US08930773B2

公开(公告)日：2015-01-06

申请号：US13447711

申请日：2012-04-16

申请人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni ,  Keren Gattegno

发明人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni ,  Keren Gattegno

IPC分类号： G06F11/00

CPC分类号： G06F11/0709 ,  G06F11/0751 ,  G06F11/079

摘要： Methods, systems, and computer-readable media with executable instructions stored thereon for determining root cause are provided. A method for determining root cause can include receiving values for at least one performance metric for each of a plurality of components of an IT system to establish a normal value for each of the performance metrics, receiving an abnormal value that differs from the normal value for at least one of the plurality of components of the IT system, and determining a probability that the at least one of the plurality of components of the IT system is a root cause of the abnormal value.

摘要翻译： 提供了其上存储有用于确定根本原因的可执行指令的方法，系统和计算机可读介质。 用于确定根本原因的方法可以包括接收IT系统的多个组件中的每一个的至少一个性能度量的值，以为每个性能度量建立正常值，接收与正常值不同的异常值 IT系统的多个组件中的至少一个，并且确定IT系统的多个组件中的至少一个组件是异常值的根本原因的概率。

公开(公告)号：US20130275812A1

公开(公告)日：2013-10-17

申请号：US13447711

申请日：2012-04-16

申请人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni ,  Keren Gattegno

发明人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni ,  Keren Gattegno

IPC分类号： G06F11/07

CPC分类号： G06F11/0709 ,  G06F11/0751 ,  G06F11/079

摘要： Methods, systems, and computer-readable media with executable instructions stored thereon for determining root cause are provided. A method for determining root cause can include receiving values for at least one performance metric for each of a plurality of components of an IT system to establish a normal value for each of the performance metrics, receiving an abnormal value that differs from the normal value for at least one of the plurality of components of the IT system, and determining a probability that the at least one of the plurality of components of the IT system is a root cause of the abnormal value.

摘要翻译： 提供了其上存储有用于确定根本原因的可执行指令的方法，系统和计算机可读介质。 用于确定根本原因的方法可以包括接收IT系统的多个组件中的每一个的至少一个性能度量的值，以为每个性能度量建立正常值，接收与正常值不同的异常值 IT系统的多个组件中的至少一个，并且确定IT系统的多个组件中的至少一个组件是异常值的根本原因的概率。

公开(公告)号：US09292408B2

公开(公告)日：2016-03-22

申请号：US14342664

申请日：2011-09-21

申请人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni

发明人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni

IPC分类号： G06F11/00 ,  G06F11/34 ,  G06F11/07 ,  H04L12/26 ,  H04L12/24

CPC分类号： G06F11/3495 ,  G06F11/0709 ,  G06F11/079 ,  G06F11/3419 ,  H04L41/065 ,  H04L43/08 ,  H04L43/16

摘要： A method for automated detection of a real IT system problem may include obtaining monitor measurements of metrics associated with activities of a plurality of configuration items of the IT system. The method may also include detecting anomalies in the monitor measurements. The method may further include grouping concurrent anomalies of the detected anomalies corresponding to configuration items of the plurality of configuration items which are topologically linked to be regarded as a system anomaly. The method may further include calculating a significance score for the system anomaly, and determining that the system anomaly relates to a real system problem based on the calculated significance score.

摘要翻译： 用于自动检测真实IT系统问题的方法可以包括获得与IT系统的多个配置项的活动相关联的度量的监视器测量。 该方法还可以包括检测监视器测量中的异常。 所述方法还可以包括对与所述多个配置项目的配置项目相对应的检测到的异常的并发异常进行分组，所述配置项目被拓扑地链接以被认为是系统异常。 该方法还可以包括计算系统异常的显着性得分，并且基于所计算的显着性分数来确定系统异常与实际系统问题相关。

公开(公告)号：US20140229768A1

公开(公告)日：2014-08-14

申请号：US14342664

申请日：2011-09-21

申请人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni

发明人： Ruth Bernstein ,  Ira Cohen ,  Eran Samuni

IPC分类号： G06F11/34

CPC分类号： G06F11/3495 ,  G06F11/0709 ,  G06F11/079 ,  G06F11/3419 ,  H04L41/065 ,  H04L43/08 ,  H04L43/16

摘要： A method for automated detection of a real IT system problem may include obtaining monitor measurements of metrics associated with activities of a plurality of configuration items of the IT system. The method may also include detecting anomalies in the monitor measurements. The method may further include grouping concurrent anomalies of the detected anomalies corresponding to configuration items of the plurality of configuration items which are topologically linked to be regarded as a system anomaly. The method may further include calculating a significance score for the system anomaly, and determining that the system anomaly relates to a real system problem based on the calculated significance score.

摘要翻译： 用于自动检测真实IT系统问题的方法可以包括获得与IT系统的多个配置项的活动相关联的度量的监视器测量。 该方法还可以包括检测监视器测量中的异常。 所述方法还可以包括对与所述多个配置项目的配置项目相对应的检测到的异常的并发异常进行分组，所述配置项目被拓扑地链接以被认为是系统异常。 该方法还可以包括计算系统异常的显着性得分，并且基于所计算的显着性分数来确定系统异常与实际系统问题相关。

公开(公告)号：US09087089B2

公开(公告)日：2015-07-21

申请号：US13700620

申请日：2010-06-09

申请人： Ruth Bernstein ,  Ira Cohen ,  Chen Kahana

发明人： Ruth Bernstein ,  Ira Cohen ,  Chen Kahana

IPC分类号： G06F17/30 ,  G06F9/44 ,  G06F11/36

CPC分类号： G06F17/30312 ,  G06F8/77 ,  G06F11/3616

摘要： A method and system comprise abstracting configuration items (CI) in at least a first anomaly and a second anomaly based on type of CI. Further, CIs are matched of a common type between the first and second anomalies based on a cost function. Additionally, a similarity score is computed for the first and second anomalies based, at least in part, on the cost function of the matched CI's and based on topology of the first and second anomalies.

摘要翻译： 方法和系统包括基于CI的类型抽象至少第一异常中的配置项（CI）和第二异常。 此外，基于成本函数，CI在第一和第二异常之间与普通类型匹配。 另外，至少部分地基于匹配的CI的成本函数并且基于第一和第二异常的拓扑来计算第一和第二异常的相似性得分。

公开(公告)号：US08924797B2

公开(公告)日：2014-12-30

申请号：US13447512

申请日：2012-04-16

申请人： Ruth Bernstein ,  Ira Cohen

发明人： Ruth Bernstein ,  Ira Cohen

IPC分类号： G06F11/00

CPC分类号： G06F11/0754

摘要： At least one value of abnormal metrics is identified as being an abnormal dimension value. A dominant dimension related to the anomaly is identified based on the identified abnormal dimension value.

摘要翻译： 异常度量的至少一个值被识别为异常维度值。 基于识别的异常维度值，确定与异常相关的主要维度。

公开(公告)号：US20140032552A1

公开(公告)日：2014-01-30

申请号：US13561255

申请日：2012-07-30

申请人： Ira Cohen ,  Ruth Bernstein ,  Yonatan Ben Simhon

发明人： Ira Cohen ,  Ruth Bernstein ,  Yonatan Ben Simhon

IPC分类号： G06F17/30

CPC分类号： H04L41/065 ,  H04L41/064 ,  H04L41/12

摘要： Defining relationships are described. Defining relationships can include retrieving a number of event notifications that correspond to a number of nodes. Defining relationships can include defining a number of group patterns that correspond to the number of event notifications. Defining relationships can also include grouping the number of nodes into a number of groups that correlate with the number of group patterns, the number of groups defining a number of relationships between the number of nodes. Defining relationships can include assigning a number of weights to the number of relationships between the number of nodes, wherein the number of weights are based on a strength of the number of relationships between the number of nodes.

摘要翻译： 描述定义关系。 定义关系可以包括检索与多个节点相对应的多个事件通知。 定义关系可以包括定义与事件通知数量相对应的多个组模式。 定义关系还可以包括将节点的数量分组成与组模式数量相关的多个组，定义节点数之间的关系的数量的组的数量。 定义关系可以包括将多个权重分配给节点数之间的关系数目，其中权重数量基于节点数目之间的关系数量的强度。

公开(公告)号：US20130080451A1

公开(公告)日：2013-03-28

申请号：US13700620

申请日：2010-06-09

申请人： Ruth Bernstein ,  Ira Cohen ,  Chen Kahana

发明人： Ruth Bernstein ,  Ira Cohen ,  Chen Kahana

IPC分类号： G06F17/30

CPC分类号： G06F17/30312 ,  G06F8/77 ,  G06F11/3616

摘要： A method and system comprise abstracting configuration items (CI) in at least a first anomaly and a second anomaly based on type of CI. Further, CIs are matched of a common type between the first and second anomalies based on a cost function. Additionally, a similarity score is computed for the first and second anomalies based, at least in part, on the cost function of the matched CI's and based on topology of the first and second anomalies.

摘要翻译： 方法和系统包括基于CI的类型抽象至少第一异常中的配置项（CI）和第二异常。 此外，基于成本函数，CI在第一和第二异常之间与普通类型匹配。 另外，至少部分地基于匹配的CI的成本函数并且基于第一和第二异常的拓扑来计算第一和第二异常的相似性得分。

公开(公告)号：US20110276836A1

公开(公告)日：2011-11-10

申请号：US13123702

申请日：2008-10-16

申请人： Chen Kahana ,  Ruth Bernstein ,  Ifat Gavish

发明人： Chen Kahana ,  Ruth Bernstein ,  Ifat Gavish

IPC分类号： G06F11/36

CPC分类号： G06F11/3476 ,  G06F11/0709 ,  G06F11/079 ,  G06F11/3409 ,  G06F11/3438 ,  G06F11/3447 ,  G06F2201/80 ,  G06F2201/81 ,  G06F2201/86 ,  G06F2201/865 ,  G06Q10/04

摘要： Embodiments of methods and systems for analyzing performance of an application are provided. In that regard, an embodiment of a method for analyzing performance, among others, comprises collecting performance metric data from the application over time; segmenting the performance metric data into time segments representing sets of contiguous time samples which exhibit similar performance metric behaviour; determining the presence of an anomaly in a time segment; and correlating the anomalous segment with other data available to the system to determine the cause of the anomaly.

摘要翻译： 提供了分析应用性能的方法和系统的实施例。 在这方面，用于分析性能的方法的实施例包括从应用程序随时间收集性能度量数据; 将性能度量数据分段成表示具有相似性能度量行为的连续时间样本集合的时间段; 确定时段中异常的存在; 并将异常段与系统可用的其他数据相关联，以确定异常的原因。

公开(公告)号：US08635498B2

公开(公告)日：2014-01-21

申请号：US13123702

申请日：2008-10-16

申请人： Chen Kahana ,  Ruth Bernstein ,  Ifat Gavish

发明人： Chen Kahana ,  Ruth Bernstein ,  Ifat Gavish

IPC分类号： G06F11/00

CPC分类号： G06F11/3476 ,  G06F11/0709 ,  G06F11/079 ,  G06F11/3409 ,  G06F11/3438 ,  G06F11/3447 ,  G06F2201/80 ,  G06F2201/81 ,  G06F2201/86 ,  G06F2201/865 ,  G06Q10/04

摘要： Embodiments of methods and systems for analyzing performance of an application are provided. In that regard, an embodiment of a method for analyzing performance, among others, comprises collecting performance metric data from the application over time; segmenting the performance metric data into time segments representing sets of contiguous time samples which exhibit similar performance metric behavior; determining the presence of an anomaly in a time segment; and correlating the anomalous segment with other data available to the system to determine the cause of the anomaly.

摘要翻译： 提供了分析应用性能的方法和系统的实施例。 在这方面，用于分析性能的方法的实施例包括从应用程序随时间收集性能度量数据; 将性能度量数据分段成表示具有相似性能度量行为的连续时间样本集合的时间段; 确定时段中异常的存在; 并将异常段与系统可用的其他数据相关联，以确定异常的原因。