Abstract: This disclosure is directed to performing diagnostics on deployed devices that use network connectivity to transmit data in response to at least partially automated processes. In some embodiments, a diagnostic entity may monitor network traffic from deployed devices. The diagnostic entity may aggregate at least some of the network traffic to create profiles for at least some of the deployed devices and/or for some activities. The diagnostic entity may then identify outlier devices/activities from observed network behavior of deployed devices and/or activities based on the accessed network traffic and the profiles. The diagnostic entity may generate reports and/or perform or cause some corrective operations in response to identification of the outliers. In various embodiments, the diagnostic entity may predict network usage information for a group of devices and may possibly suggest revisions to service plans and/or usage of the deployed devices based at least partly on the predicted usage.