| CPC G06F 11/3079 (2013.01) [G06F 9/547 (2013.01); G06F 11/3075 (2013.01); G06F 18/22 (2023.01)] | 17 Claims |
|
1. An apparatus
comprising: a processor; and
a memory on which is stored machine-readable instructions that when executed by the processor, cause the processor to:
receive event data for a subject incident;
calculate respective first similarity scores for candidate incidents, the first similarity score for a candidate incident being based on a probability value of a common type of property among predefined types of properties between the subject incident and the candidate incident;
filter the candidate incidents to identify a first predefined number of candidate incidents that are similar to the subject incident, the first predefined number of candidate incidents being filtered based on the calculated respective first similarity scores for the candidate incidents;
assign a respective second similarity score to each of the candidate incidents in the identified first predefined number of candidate incidents, the second similarity score for a candidate incident being based on common property values between the subject incident and the candidate incident among the identified first predefined number of candidate incidents, wherein the second similarity score is inversely proportional to a probability value for the common property values between the subject incident and respective ones of the candidate incidents in the identified first predefined number of candidate incidents
identify a second predefined number of candidate incidents among the first predefined number of candidate incidents based on the second similarity score assigned to the candidate incidents in the identified first predefined number of candidate incidents; and
output the identified second predefined number of candidate incidents.
|