CPC G06F 11/079 (2013.01) [G06F 11/0772 (2013.01); G06F 11/0793 (2013.01); G06F 11/3006 (2013.01); H04L 41/0631 (2013.01)] | 20 Claims |
1. An apparatus comprising:
at least one processor; and
at least one memory having computer-coded instructions stored thereon that, when executed by the at least one processor, causes the apparatus to:
apply, at a time that an alert corresponding to a data event is detected associated with at least one affected computing system service, a system operations graph searching algorithm to a directed dependency graph corresponding to the computing environment to determine a plurality of affected computing system services associated with the data event,
wherein the directed dependency graph comprises:
a first node set comprising a node representing each computing system service in the plurality of interdependent computing system services; and
a first directed edge set comprising, for each node pair in the first node set, a directed edge defined between a selected node of the node pair and a dependency node of the selected node;
generate, based at least in part on the directed dependency graph, an affected services subgraph associated with the at least one affected computing system service, the affected services subgraph comprising:
a second node set comprising each node representing each affected computing system service of the plurality of affected computing system services; and
a second directed edge set comprising, for each node in the second node set, each directed edge from the node to a dependency node corresponding to an affected computing system service of the plurality of affected computing system services; and
determine at least one root cause computing system service by applying a centrality algorithm to the affected services subgraph.
|