US 12,442,672 B2
Distributed anomaly detection using combinable measurement value summaries
William C. Benton, Madison, WI (US); and Sophie Watson, Toronto (CA)
Assigned to Red Hat, Inc., Raleigh, NC (US)
Filed by Red Hat, Inc., Raleigh, NC (US)
Filed on Jun. 12, 2023, as Appl. No. 18/332,878.
Application 18/332,878 is a continuation of application No. 16/502,604, filed on Jul. 3, 2019, granted, now 11,719,563.
Prior Publication US 2023/0324205 A1, Oct. 12, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. G01D 3/08 (2006.01); G01D 9/00 (2006.01); G01D 21/00 (2006.01); G08B 21/18 (2006.01)
CPC G01D 21/00 (2013.01) [G01D 9/005 (2013.01); G08B 21/18 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method comprising:
sending, by a computing device to a central computing device as the computing device initiates, a request for a current global combined quantile sketch data structure comprising a plurality of local quantile sketch data structures received by the central computing device from a plurality of local computing devices;
obtaining, by the computing device over a first period of time, a first plurality of measurement values of a first item being measured, wherein the first item corresponds to a physical machine comprising a rotating shaft, and the first plurality of measurement values correspond to rotation speeds of the rotating shaft;
adding, over the first period of time by the computing device, each of the first plurality of measurement values to a first local quantile sketch data structure, the first local quantile sketch data structure having a bounded physical size and being configured to maintain a summarization of the first plurality of measurement values;
sending the first local quantile sketch data structure to the central computing device;
receiving, by the computing device from the central computing device, a second global combined quantile sketch data structure comprising the first local quantile sketch data structure and one or more other local quantile sketch data structures;
obtaining, by the computing device, a plurality of new measurement values of the first item;
for each new measurement value of the plurality of new measurement values:
adding, by the computing device, the new measurement value to a second local quantile sketch data structure;
adding, by the computing device, the new measurement value to the second global combined quantile sketch data structure; and
querying, by the computing device, the second global combined quantile sketch data structure to determine whether the new measurement value is an anomalous measurement value; and
reconfiguring, responsive to determining that at least one new measurement value is an anomalous measurement value, an operating behavior of the physical machine.