Abstract: Detecting system log anomalies by receiving multivariate time-series system log data an multivariate metric data, inferring system metrics from the system log data and metric data, receiving a metric causal graph including causal relationships between system metrics, determining a univariate variation score for the system metrics, determining a causal variation score for the multivariate time series system metric data, according to the causal graph, determining an overall activity score according to the univariate variation score, and causal variation score, and altering a review window duration according to the activity score.

Abstract: Methods, systems, and computer program products for mining multi-party collaboration platforms to create triaging trees and playbooks are provided herein. A computer-implemented method includes obtaining, from a multi-user platform, conversations related to at least one technical issue; generating a plurality of triaging trees by analyzing the conversations, wherein each of the triaging trees stores information corresponding to temporal sequences of steps related to diagnosing and resolving said at least one technical issue; and deriving a playbook for resolving said at least one technical issue at least in part by combining two or more of the plurality of triaging trees.

Abstract: An embodiment includes detecting a set of anomalies recorded during a first predefined window of time in log entries for a computer environment. The embodiment also includes generating cluster data representative of a cluster of anomalies from among the set of anomalies, where the cluster is formed using a lattice clustering algorithm that spatially distinguishes the cluster of anomalies from other anomalies in the set of anomalies. The embodiment also includes composing an explanation using log templates generated from log entries associated with the cluster of anomalies.

Abstract: Detecting system log anomalies by receiving multivariate time-series system log data an multivariate metric data, inferring system metrics from the system log data and metric data, receiving a metric causal graph including causal relationships between system metrics, determining a univariate variation score for the system metrics, determining a causal variation score for the multivariate time series system metric data, according to the causal graph, determining an overall activity score according to the univariate variation score, and causal variation score, and altering a review window duration according to the activity score.

Abstract: A method and system is provided for utilizing a causal dependence graph of events in a large enterprise-related system to determine a most frequently utilized corrective action for a set of actions that the enterprise requires. Typically, with large sets of data related to actions that an enterprise system performs, it is non-trivial to correlate a set of actions (or workflows) with a set of corrective actions.

Abstract: Embodiments relate to a computer platform to support processing of informational logs and corresponding performance data to detect and mitigate occurrence of anomalous behavior. Metrics are extracted from the informational logs and correlated with performance data, and in an exemplary embodiment golden signal metrics. A window or block of the logs is classified as potential candidates or indicators of anomalous behavior, which in an embodiment is indicative of potential failure or service outage. A control signal is dynamically issued to an operatively coupled device associated with the window or block of logs. The control signal is configured to selectively control a state of a physical device or process controlled by software, with the control directed at mitigating or eliminating the effect(s) of the anomalous behavior.

Abstract: A computer-implemented method, system and computer program product for generating rules to be utilized by a rule-based system. A parser analyzes a received string of words according to grammatical rules to generate a parse tree. The parse tree may then be reviewed by a user to determine if such a parse tree represents the appropriate syntactic structure of the string of words. If the user believes that the parse tree does not represent the appropriate syntactic structure of the string, then the user, who does not need to possess the expertise of natural language processing, may select the nodes and/or edges of the parse tree in a particular order that corresponds to the correct syntactic structure of the string of words. A grammatical rule is then created for parsing the string of words based on the user selection of nodes and/or edges of the parse tree in a particular order.

Abstract: Methods, systems, and computer program products for fault localization for cloud-native applications are provided herein. A computer-implemented method includes classifying an event-related alert directed to at least one system by processing one or more characteristics of the event-related alert; obtaining and processing multiple application logs based at least in part on the classification of the event-related alert; identifying error logs among the multiple application logs based at least in part on the processing of the multiple application logs; ordering the error logs using one or more prioritization techniques; and performing at least one automated action based at least in part on the ordering of the error logs.

Abstract: Methods, systems, and computer program products for mining multi-party collaboration platforms to create triaging trees and playbooks are provided herein. A computer-implemented method includes obtaining, from a multi-user platform, conversations related to at least one technical issue; generating a plurality of triaging trees by analyzing the conversations, wherein each of the triaging trees stores information corresponding to temporal sequences of steps related to diagnosing and resolving said at least one technical issue; and deriving a playbook for resolving said at least one technical issue at least in part by combining two or more of the plurality of triaging trees.

Abstract: Methods, systems, and computer program products for fault localization for cloud-native applications are provided herein. A computer-implemented method includes classifying an event-related alert directed to at least one system by processing one or more characteristics of the event-related alert; obtaining and processing multiple application logs based at least in part on the classification of the event-related alert; identifying error logs among the multiple application logs based at least in part on the processing of the multiple application logs; ordering the error logs using one or more prioritization techniques; and performing at least one automated action based at least in part on the ordering of the error logs.

Abstract: An automated system and method to generate functional conformance tests for applications are provided. The system and method in one aspect use Inputs, Outputs, Preconditions, Effects (IOPEs) paradigm associated with an application for automatically generating test goals. A planner component may accept these testing goals to generate a sequence of operations or invocations as a test case. Verification sequences are also generated. The system and method also allow generation of executable test cases, which can be applied to the various interfaces through which the application may be accessed.

Abstract: A system (and method, and method for deploying computing infrastructure) for facilitating fixing program development errors found during different phases of program development using different programming tools, such as compilers, linkers, library managers, and debuggers, and can be integrated into a program development environment encompassing all tools. The exemplary aspects of the present invention can detect a qualified set of problems from which to recover with sufficient information, as typically provided by a user or other intelligent or artificial intelligent means, and upon error detection, can initiate a communication with the user (or other support software), to acquire information that could remedy the problem.

Abstract: An automated system and method to generate functional conformance tests for applications are provided. The system and method in one aspect use Inputs, Outputs, Preconditions, Effects (IOPEs) paradigm associated with an application for automatically generating test goals. A planner component may accept these testing goals to generate a sequence of operations or invocations as a test case. Verification sequences are also generated. The system and method also allow generation of executable test cases, which can be applied to the various interfaces through which the application may be accessed.