	US 11,996,976 B2
	One click monitors in impact time detection for noise reduction in at-scale monitoring
Yaniv Lavi, Tel Aviv (IL); Rachel Lemberg, Herzliya (IL); Linoy Liat Barel, Tel Aviv (IL); Dor Bank, Tel Aviv (IL); Raphael Fettaya, Tel Aviv (IL); and Ofri Kleinfeld, Tel Aviv (IL)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Jul. 19, 2022, as Appl. No. 17/813,509.
Application 17/813,509 is a continuation of application No. 17/105,722, filed on Nov. 27, 2020, granted, now 11,424,979.
Prior Publication US 2023/0008573 A1, Jan. 12, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 15/173 (2006.01); H04L 41/0681 (2022.01); H04L 43/045 (2022.01); H04L 43/16 (2022.01); G06F 3/0481 (2022.01); H04L 41/22 (2022.01); H04L 67/10 (2022.01)

CPC H04L 41/0681 (2013.01) [H04L 43/045 (2013.01); H04L 43/16 (2013.01); G06F 3/0481 (2013.01); H04L 41/22 (2013.01); H04L 67/10 (2013.01)]

20 Claims

1. A method performed by a computing system, the method comprising:

receiving values associated with a metric determined for a past time period;

determining a first time period, a second time period, and a third time period based on a time window of a defined duration, wherein:

the first time period comprises a first number of consecutive instances of the time window;

the second time period comprises a second number of consecutive instances of the time window that is greater than the first number of consecutive instances of the time window; and

the third time period comprises a third number of consecutive instances of the time window that is greater than the first number of consecutive instances of the time window and the second number of consecutive instances of the time window;

for the first time period, calculating a first number of times during the past time period that the values associated with the metric meet a threshold in each of the first number of consecutive instances of the time window;

for the second time period, calculating a second number of times during the past time period that the values associated with the metric meet the threshold in each of the second number of consecutive instances of the time window;

for the third time period, calculating a third number of times during the past time period that the values associated with the metric meet the threshold in each of the third number of consecutive instances of the time window;

determining that a first difference between the first number of times and the second number of times is greater than a second difference between the second number of times and the third number of times;

in response to determining that the first difference between the first number of times and the second number of times is greater than the second difference between the second number of times and the third number of times, selecting the second number of consecutive instances of the time window as an optimal number of consecutive instances of the time window;

monitoring the metric to trigger system alerts based on the optimal number of consecutive instances of the time window; and

triggering a system alert based on the monitoring.