	US 12,189,466 B2
	Detecting systemwide service issues by using anomaly localization
Mohit Verma, Seattle, WA (US); Julien Hoachuck, San Francisco, CA (US); Qingwei Lin, Beijing (CN); Pooja Rani, Woodinville, WA (US); Namrata Jain, Sammamish, WA (US); Rakesh Namineni, Sammamish, WA (US); Jimmy Wong, Bellevue, WA (US); Si Qin, Beijing (CN); Yu Kang, Beijing (CN); Jeffrey Ding He, Bellevue, WA (US); Yingnong Dang, Sammamish, WA (US); Jian Zhang, Bellevue, WA (US); Bo Qiao, Beijing (CN); and Kamaljit Bath, Redmond, WA (US)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Oct. 28, 2022, as Appl. No. 18/050,866.
Prior Publication US 2024/0143433 A1, May 2, 2024
Int. Cl. G06F 11/07 (2006.01)

CPC G06F 11/079 (2013.01) [G06F 11/0709 (2013.01); G06F 11/0769 (2013.01)]

20 Claims

1. A computing system comprising:

a processor; and

memory storing instructions that, when executed by the processor, cause the system to perform operations comprising:

receiving time-series monitoring data for multiple services, the time-series monitoring data including multiple dimensions and an error metric;

for the time-series monitoring data from each service, evaluating scopes within the time-series monitoring data based on an objective function for a time-series of the error metric to identify at least one anomalous scope, each scope comprising at least one dimension and a value for the dimension;

based on evaluating the scopes, generating a ranked list of scopes for each service based on objective function scores for the scopes;

correlating the ranked lists of scopes across the multiple services to identify a cross-service anomaly; and

generating an alert for the multiple services based on the cross-service anomaly, the alert indicating at least one scope as a potential root cause for the cross-service anomaly.