US 12,265,459 B1
Automated determination of tuned parameters for analyzing observable metrics
Joseph Ari Ross, Redwood City, CA (US); and Abraham Starosta, Boston, MA (US)
Assigned to Splunk LLC, San Jose, CA (US)
Filed by SPLUNK INC., San Francisco, CA (US)
Filed on Jan. 31, 2023, as Appl. No. 18/103,966.
Int. Cl. G06F 11/30 (2006.01); G06F 11/07 (2006.01)
CPC G06F 11/3075 (2013.01) [G06F 11/076 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
receiving user input indicating a request for a set of executable instructions configured to monitor a metric time series according to one or more conditions expressed as one or more rules, wherein the set of executable instructions, upon execution by one or more processors, is configured to trigger an alert when the one or more conditions are met, and wherein the set of executable instructions includes a set of parameters that affect when the one or more conditions are met;
obtaining the historical data of the metric time series;
performing a multi-stage tuning procedure on the set of parameters and the historical data of the metric time series resulting in a tuned set of parameters, wherein execution of each stage results in tuning of a parameter of the set of parameters including a first stage of tuning a historical window parameter, a second stage of tuning a current window parameter based on the historical window parameter, and a third stage of tuning a standard deviation multiplier;
generating the set of executable instructions that incorporate the tuned set of parameters, wherein the set of executable instructions are stored in a database for subsequent execution as part of an anomaly detection analysis; and
generating an alert following execution of the set of executable instructions by the one or more processors resulting in the anomaly detection analysis of the metric time series using the tuned set of parameters, wherein the alert is triggered by detection of an anomaly in the metric time series.