| CPC G06F 11/3612 (2013.01) [G06F 11/3616 (2013.01)] | 20 Claims |

|
1. A computer-implemented method, comprising:
in response to obtaining a time series data that indicates two or more anomalies detected on a system, determining a root cause anomaly that caused the two or more anomalies by at least:
generating a directed graph comprising nodes that represent a plurality of resource-metric pairs of the system, wherein a resource-metric pair of the plurality of resource-metric pairs indicates an association between a resource and a metric; and
determining a node from a subset of nodes that are associated with the two or more anomalies based at least in part on dependencies between nodes from the subset of nodes and the time series data, wherein the node indicates the root cause anomaly;
obtaining a set of standard operating procedures (SOP) that are associated with the system;
determining a subset of SOPs from the set of SOPs, wherein individual SOPs within the subset of SOPs are usable to resolve the root cause anomaly; and
providing, to a client device that is associated with the system, a recommendation that includes an SOP from the subset of SOPs that is selected based, at least in part on, a ranking of the subset of SOPs.
|