Abstract: Methods and systems related to planning an execution of an application in a cloud computing system are described herein. The method includes determining whether a workload causes an anomaly associated to the execution of an application. Upon determining that execution of the application under the workload causes an anomaly, an action, or a value of at least one parameter for execution of the application in the cloud computing system, is determined. The action, or the value, is for addressing the anomaly.

Abstract: Methods and systems of aligning annotation of fields of documents are provided. Training information that includes first measurement information pertaining to features of each of a plurality of fields associated with training clusters for documents of a document type is accessed. A first training cluster is annotated with a first name and the second training cluster is annotated with a second name. An electronic classification model is generated based on the training information. Second measurement information for features of fields associated with new clusters of a new document is accessed. Each of the new clusters is automatically annotated based on the second measurement information using the classification model. For example, a first new cluster that has fields of the first field type is annotated with the first name and a second new cluster that has fields of the second field type is annotated with the second name.

Abstract: End user data partitioning can include receiving a number of data queries for a data source from a user, developing a dimension relation graph based on attributes of the number of data queries, and partitioning the data source based on the dimension relation graph.

Abstract: A method for automated detection of a real IT system problem may include obtaining monitor measurements of metrics associated with activities of a plurality of configuration items of the IT system. The method may also include detecting anomalies in the monitor measurements. The method may further include grouping concurrent anomalies of the detected anomalies corresponding to configuration items of the plurality of configuration items which are topologically linked to be regarded as a system anomaly. The method may further include calculating a significance score for the system anomaly, and determining that the system anomaly relates to a real system problem based on the calculated significance score.

Abstract: A recovery system and method with repeating communication functionality includes a station configured to send a first message and at least a first remote transmitting unit responsive to the central station and configured to transmit a second message to a locating unit. At least a second remote transmitting unit includes a receiver which receives the second message, a controller configured to process the second message, and a transmitter for transmitting a third message to the locating unit.

Abstract: A computer readable storage medium includes executable instructions to evaluate an expanded shared-nothing data store configuration. A data redistribution schedule table with specified parameters is formed. Data is redistributed within the expanded shared-nothing data store in accordance with the data redistribution schedule table.

Abstract: Values of a metric are provided at irregular intervals. A forgetting factor is calculated based on a difference between the intervals, and a statistical parameter is computed using the forgetting factor that causes different weights to be placed on the corresponding values of the metric, where the statistical parameter is part of an adaptive baseline.

Abstract: A computer readable storage medium includes executable instructions to store load data in new rows of an append only table within a data warehouse, without updating or deleting existing rows in the append only table. The new rows are added in a database transaction that guarantees that the distributed reads and writes of all transactions are processed reliably and that the transactions obey snapshot isolation rules. Data changes associated with the load data are maintained in a separate update table. Data from the append only table is merged with data changes from the update table to supply read data.

Abstract: Systems, methods, and machine-readable and executable instructions are provided for dynamically ranking and scheduling monitoring tasks. Dynamically ranking and scheduling monitoring tasks can include determining an updated ranking for each of a number of monitoring tasks, where the updated ranking can include analyzing historical measurements of each of the number of monitoring tasks. An order of execution can be scheduled for each of the number of monitoring tasks based on the updated ranking for each of the number of monitoring tasks.

Abstract: A process for upgrading a mirrored shared-nothing database system comprises a sequence of short well-defined idempotent steps, and at least one non-idempotent step involving transforming a master catalog. The upgrade process is managed and controlled by a state machine that has a persistent memory running on the master node. In the event of a failure or crash during an idempotent step, the process stops the database in the current state and repeats the step. If a failure or crash occurs during a non-idempotent step, the upgrade process is rolled back to the beginning and repeated.

Abstract: A script is run on a database to transform the metadata and produce an upgraded database. A new database corresponding to the upgraded database is initialized, and the metadata in the new database catalog is verified by comparing it to the upgraded database metadata. A fast verification is performed on a partial upgrade by dumping the catalogs of master nodes and comparing the results, and a thorough verification is performed on a full upgrade by querying and comparing both master node catalogs and segment node catalogs.

Abstract: Determining root causes of network issues includes identifying a previous network issue, comparing a first behavior of network components during the previous network issue with a second behavior of the network components during a current issue of a network, and obtaining a previous user input about a previous root cause of the previous network issue collected while diagnosing the previous issue.

Abstract: A computer readable storage medium includes executable instructions to define a map-reduce document that coordinates processing of data in a distributed database. The map-reduce document complies with a map-reduce specification that integrates map-reduce functions with queries in a query language. The operations specified by the map-reduce document are executed in the distributed database.

Abstract: Systems, methods, and machine-readable and executable instructions are provided for incident assignment. Incident assignment can include selecting a number of incidents that have been resolved, wherein the number of incidents are similar to a pending incident. Incident assignment can also include identifying a first number of users that resolved the number of incidents and a number of skills associated with the first number of users. Incident assignment can include creating a target user profile based on the number of skills. Incident assignment can include computing a distance from each of a second number of users to the target user profile, wherein the distance computation does not penalize the second number of users for being over qualified. Incident assignment can also include assigning the pending incident to a selected user from the second number of users wherein the selected user is selected based on the computed distances.

Abstract: Disclosed herein are a system, non-transitory computer-readable medium, and method for responding to natural language queries. Keywords likely to appear in a natural language query are determined and each likely keyword is associated with a module. A response to a natural language query comprises information generated by each module associated with a likely keyword appearing in the natural language query.

Abstract: Defining relationships are described. Defining relationships can include retrieving a number of event notifications that correspond to a number of nodes. Defining relationships can include defining a number of group patterns that correspond to the number of event notifications. Defining relationships can also include grouping the number of nodes into a number of groups that correlate with the number of group patterns, the number of groups defining a number of relationships between the number of nodes. Defining relationships can include assigning a number of weights to the number of relationships between the number of nodes, wherein the number of weights are based on a strength of the number of relationships between the number of nodes.

Abstract: A method for pattern recognition performed by a physical computing system includes, with the physical computing system, structuring data as a bi-partite graph, a set of instance nodes within the graph representing instances within the data and a set of property nodes within the graph representing properties of the instances, edges between the instance nodes and the property nodes representing values of the properties, assigning a transition probability function to each of the instance nodes and to each of the property nodes, and applying a random walker to the graph, the random walker utilizing the transition probability functions.

Abstract: Systems, methods, and machine-readable and executable instructions are provided for detecting abnormal behavior. Detecting abnormal behavior can include receiving a mean at a previous time interval, a sum of squares at the previous time interval, and a first sample of a metric at a current time interval from a system and adjusting a first weight and a second weight at the current time interval to the first sample and a system change report. Detecting abnormal behavior can also include calculating a mean and a standard deviation of the metric at the current time interval by assigning the first sample the adjusted first weight and by assigning the mean and the sum of squares at a previous time interval the adjusted second weight and detecting abnormal behavior by comparing the first sample to an outlier value based on the mean and the standard deviation at the previous time interval.

Abstract: At least one value of abnormal metrics is identified as being an abnormal dimension value. A dominant dimension related to the anomaly is identified based on the identified abnormal dimension value.

Abstract: Methods, systems, and computer-readable media with executable instructions stored thereon for determining root cause are provided. A method for determining root cause can include receiving values for at least one performance metric for each of a plurality of components of an IT system to establish a normal value for each of the performance metrics, receiving an abnormal value that differs from the normal value for at least one of the plurality of components of the IT system, and determining a probability that the at least one of the plurality of components of the IT system is a root cause of the abnormal value.