US 11,892,991 B2
Anomaly detection in deduplication pruning operations
Pavan Kumar Reddy Bedadala, Piscataway, NJ (US); Marcelo dos Reis Mansano, Curitiba (BR); Rajiv Kottomtharayil, Marlboro, NJ (US); Anand Vibhor, Manalapan, NJ (US); Bhavyan Bharatkumar Mehta, Mumbai (IN); and Mrityunjay Upadhyay, Hyderabad (IN)
Assigned to Commvault Systems, Inc., Tinton Falls, NJ (US)
Filed by Commvault Systems, Inc., Tinton Falls, NJ (US)
Filed on Jan. 7, 2022, as Appl. No. 17/571,341.
Application 17/571,341 is a continuation of application No. 16/789,232, filed on Feb. 12, 2020, granted, now 11,256,673.
Application 16/789,232 is a continuation in part of application No. 16/676,288, filed on Nov. 6, 2019, granted, now 11,237,935.
Claims priority of provisional application 62/899,013, filed on Sep. 11, 2019.
Prior Publication US 2022/0215007 A1, Jul. 7, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 11/30 (2006.01); G06F 16/215 (2019.01); G06F 16/23 (2019.01); G06F 11/07 (2006.01)
CPC G06F 16/215 (2019.01) [G06F 11/0766 (2013.01); G06F 16/2365 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A networked information management system comprising:
a client computing device having one or more first hardware processors, wherein the client computing device is associated with a first job; and
one or more computing devices in communication with the client computing device, wherein the one or more computing devices are configured with computer-executable instructions that, when executed, cause the one or more computing devices to:
retrieve jobs data corresponding to the first job and the first client computing device;
perform a time-series decomposition of the jobs data;
analyze a component of the decomposed time-series to determine at least one of an acceptable range for time to perform the first job, an acceptable range for a size of secondary copy data associated with the first job, or an acceptable range for a number of job attempts until the first job is complete;
determine a possible cause for the first job running longer than the acceptable range for time to perform the first job in response to the first job at a first time running longer than the acceptable range for time to perform the first job;
determine whether any events corresponding to the first job are anomalous; and
generate an alert regarding an issue with the networked information management system in response to at least one of the first job running longer or a first event corresponding to the first job being anomalous.