| CPC H04L 43/067 (2013.01) [H04L 41/0627 (2013.01); H04L 43/045 (2013.01)] | 20 Claims |
|
1. A system comprising:
a memory storing instructions; and
one or more hardware processors communicatively coupled to the memory and configured by the instructions to perform operations comprising:
accessing select time series data that comprises a time series of measurement values for a metric over a period of time, the system being a first system, and the select time series data being generated by a second system that is being monitored for anomalies;
detecting whether any value anomalies exist in the time series data of measurement values by performing an anomaly detection process on the time series of measurement values, the anomaly detection process comprising:
generating a plurality of incomplete matrix profiles that corresponds to a plurality of time series subsequences in the time series of measurement values, the anomaly detection process comprising logic that causes the anomaly detection process to avoid generating an individual incomplete matrix profile of the plurality of incomplete matrix profiles for an individual time series subsequence of the plurality of time series subsequences in response to determining that the individual time series subsequence does not fall within a historical lookback parameter, the avoiding generating of the individual incomplete matrix profile comprises skipping computation of distance measures for the individual time series subsequence and continuing to a next time series subsequence of the plurality of incomplete matrix profiles, the historical lookback parameter representing a number of previous time points that are considered when generating a select incomplete matrix profile of the plurality of incomplete matrix profiles for a select time series subsequence of the plurality of time series subsequences; and
detecting for any value anomalies in the time series of measurement values based on the plurality of incomplete matrix profiles; and
in response to detecting a set of value anomalies in the time series of measurement values, at least one of:
causing an alert to be triggered, the alert relating to at least one value anomaly in the set of value anomalies; or
causing generation of at least one visual indicator for at least one value anomaly in the set of value anomalies, the visual indicator being generated with respect to a graphical representation of at least a portion of the time series of measurement values.
|