CPC G06F 11/0793 (2013.01) [G06F 11/0709 (2013.01); G06F 11/0769 (2013.01); G06F 11/079 (2013.01); G06F 16/9024 (2019.01); G06N 3/08 (2013.01); G06N 5/022 (2013.01); H04L 41/0636 (2013.01); H04L 41/065 (2013.01); H04L 41/12 (2013.01); H04L 41/145 (2013.01)] | 21 Claims |
1. A computer-implemented method for identifying root causes, the computer-implemented method comprising:
receiving an event group, wherein the event group includes a plurality of nodes;
constructing and extracting a causal graph for the plurality of nodes from the event group using one or more of historical priors, topological priors, real time priors, and custom knowledge priors, wherein the causal graph uses edges between nodes of the causal graph to indicate a probabilistic causal relationship between the nodes and a normalized causal strength of the probabilistic causal relationship between the nodes; and
identifying a probabilistic root cause from the plurality of nodes by ranking graph vertices from the causal graph using a root cause inspector.
|