-
公开(公告)号:US12277025B2
公开(公告)日:2025-04-15
申请号:US18354226
申请日:2023-07-18
Applicant: International Business Machines Corporation
Inventor: Seema Nagar , Harshit Kumar , Ruchi Mahindru , Amitkumar Manoharrao Paradkar , Pooja Aggarwal , Karan Bhukar , Ian Manning , Matthew Richard James Thornhill , Rohan R. Arora , Stephen James Hussey , Franco Forti
Abstract: Techniques are provided for dynamic alert suppression policy management. In one embodiment, the techniques involve receiving an event stream, wherein the event stream includes metric values comprising at least one of: log anomaly data and metric anomaly data, determining an anomalous event based on the event stream, determining a persistent region of the anomalous event, determining a quantum representation of the persistent region, determining X-Y values of the persistent region based on the quantum representation, and generating a policy based on a set of the X-Y values.
-
公开(公告)号:US20180032903A1
公开(公告)日:2018-02-01
申请号:US15222544
申请日:2016-07-28
Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION
Inventor: Paul M.J. Barry , Cormac Cummins , Ian Manning , Vinh Tuan Thai
Abstract: A method and system are provided for retraining an analytic model. The method includes building, by a processor, a Markov chain for the analytic model. The Markov chain has only two states that consist of an alarm state and a no alarm state. The method further includes updating, by the processor, the Markov chain with observed states, for each of a plurality of timestamps evaluated during a burn-in period. The method also includes updating, by the processor, state transition probabilities within the Markov chain, for each of a plurality of timestamps evaluated after the burn-in period. The method additionally includes generating, by the processor, a signal for causing the model to be retrained, responsive to any of the state transition probabilities representing a probability of greater than 0.5 of seeing the alarm state in a previous interval and again in a current interval.
-
公开(公告)号:US20190385081A1
公开(公告)日:2019-12-19
申请号:US16454832
申请日:2019-06-27
Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION
Inventor: Anthony T. Brew , Donagh S. Horgan , Ian Manning , Vinh Tuan Thai
IPC: G06N20/00
Abstract: Deploying a model for anomaly detection in time series data. A period of data is received. A model of the period of data is received. It is determined that the model fits a part of the period of data and that the fitted part of the period of data includes the most recent data. A reduced model for the part of the period of data that fit the received model is built. The reduced model is deployed.
-
公开(公告)号:US20190182118A1
公开(公告)日:2019-06-13
申请号:US16274781
申请日:2019-02-13
Applicant: International Business Machines Corporation
Inventor: Ian Manning , Eric Thiebaut-George
Abstract: Mechanisms for anomaly detection in a network management system are provided. The mechanisms collect metric data from a plurality of network devices and determine metric types for the metric data using metric type reference data. The mechanisms determine and apply properties from the metric type reference data to metrics of the determined metric types. The mechanisms monitor subsequent metric data for anomalies that do not conform to the applied properties.
-
公开(公告)号:US10225155B2
公开(公告)日:2019-03-05
申请号:US14476959
申请日:2014-09-04
Applicant: International Business Machines Corporation
Inventor: Ian Manning , Eric Thiebaut-George
Abstract: Mechanisms for anomaly detection in a network management system are provided. The mechanisms collect metric data from a plurality of network devices and determine metric types for the metric data using metric type reference data. The mechanisms determine and apply properties from the metric type reference data to metrics of the determined metric types. The mechanisms monitor subsequent metric data for anomalies that do not conform to the applied properties.
-
公开(公告)号:US10089165B2
公开(公告)日:2018-10-02
申请号:US15091683
申请日:2016-04-06
Applicant: International Business Machines Corporation
Inventor: Anthony T. Brew , Ian Manning , Jonathan I. Settle
Abstract: Method for monitoring data events using calendars are provided. Aspects include accessing a plurality of calendars, each calendar defining a schedule of calendar days and receiving a plurality of inputs from one or more applications, each input defining a data event for a specific source, for each calendar of the plurality of calendars. Aspects also include maintaining, for each data event source, a count for each calendar day and a count for each non-calendar day, for each calendar of the plurality of calendars. Aspects further include determining, for each data event source, if a comparison of the count for each calendar day and the count for each non-calendar day is statistically significant, and generating an output for a data event source, if the comparison of the count for each calendar day and the count for each non-calendar day is statistically significant.
-
公开(公告)号:US12147893B2
公开(公告)日:2024-11-19
申请号:US16928474
申请日:2020-07-14
Applicant: International Business Machines Corporation
Inventor: Jack Richard Buggins , Luke Taher , Vinh Tuan Thai , Ian Manning
Abstract: An approach for training a recurrent neural network to create a model for anomaly detection in the topology of a network is disclosed. The approach comprises, creating an embedding vector for each resource in the network based on applying an embedding algorithm to each resource of the network. A feature vector is then created for each change to a resource in the network based on one or more properties of the change. A recurrent neural network can thus be trained with the embedding vectors and the feature vectors to create a model for anomaly detection in the topology of the network.
-
公开(公告)号:US20210160142A1
公开(公告)日:2021-05-27
申请号:US16692329
申请日:2019-11-22
Applicant: International Business Machines Corporation
Inventor: Vinh Tuan Thai , Jack Richard Buggins , Luke Taher , Ian Manning
IPC: H04L12/24
Abstract: Topology information including a plurality of snapshots of a network topology associated with respective points in time for a network can be received by an apparatus. Each snapshot is represented as a graph of nodes each corresponding to a network resource and having a node identifier. The graph for each snapshot is modified by replacing nodes representing network resources having the same role in the network with a single aggregated node. Feature learning is performed based on the modified graphs representing the plurality of snapshots, and determines a feature representation for each node in the modified graphs. An identifier for each node in the plurality of snapshots is associated with the corresponding feature representation for use in the correlation of network resources. Node identifiers for nodes in the same aggregated node in a modified graph are associated with the same feature representation.
-
公开(公告)号:US10832150B2
公开(公告)日:2020-11-10
申请号:US15222544
申请日:2016-07-28
Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION
Inventor: Paul M. J. Barry , Cormac Cummins , Ian Manning , Vinh Tuan Thai
Abstract: A method and system are provided for retraining an analytic model. The method includes building, by a processor, a Markov chain for the analytic model. The Markov chain has only two states that consist of an alarm state and a no alarm state. The method further includes updating, by the processor, the Markov chain with observed states, for each of a plurality of timestamps evaluated during a burn-in period. The method also includes updating, by the processor, state transition probabilities within the Markov chain, for each of a plurality of timestamps evaluated after the burn-in period. The method additionally includes generating, by the processor, a signal for causing the model to be retrained, responsive to any of the state transition probabilities representing a probability of greater than 0.5 of seeing the alarm state in a previous interval and again in a current interval.
-
公开(公告)号:US10659312B2
公开(公告)日:2020-05-19
申请号:US16274781
申请日:2019-02-13
Applicant: International Business Machines Corporation
Inventor: Ian Manning , Eric Thiebaut-George
Abstract: Mechanisms for anomaly detection in a network management system are provided. The mechanisms collect metric data from a plurality of network devices and determine metric types for the metric data using metric type reference data. The mechanisms determine and apply properties from the metric type reference data to metrics of the determined metric types. The mechanisms monitor subsequent metric data for anomalies that do not conform to the applied properties.
-
-
-
-
-
-
-
-
-