Abstract: Techniques for grouping system logs using machine learning. The techniques include deriving an input matrix from the logs, in which rows represent the logs and columns represent unique words in the logs. The techniques include applying a TF-IDF algorithm to the input matrix and deriving a TF-IDF matrix from the TF-IDF algorithm output. The TF-IDF matrix reflects how important the unique words are to the respective logs. The techniques include applying a PCA algorithm to the TF-IDF matrix and deriving a PCA matrix having a reduced dimensionality from the PCA algorithm output. The techniques include applying a Cosine Similarity algorithm to the PCA matrix and deriving CS matrices from the CS algorithm output. Each CS matrix reflects the cosine similarity of a respective log relative to all the other logs. The techniques include applying a clustering algorithm to the CS matrices and deriving log groupings from the clustering algorithm output.

Abstract: Techniques for grouping system logs using machine learning. The techniques include deriving an input matrix from the logs, in which rows represent the logs and columns represent unique words in the logs. The techniques include applying a TF-IDF algorithm to the input matrix and deriving a TF-IDF matrix from the TF-IDF algorithm output. The TF-IDF matrix reflects how important the unique words are to the respective logs. The techniques include applying a PCA algorithm to the TF-IDF matrix and deriving a PCA matrix having a reduced dimensionality from the PCA algorithm output. The techniques include applying a Cosine Similarity algorithm to the PCA matrix and deriving CS matrices from the CS algorithm output. Each CS matrix reflects the cosine similarity of a respective log relative to all the other logs. The techniques include applying a clustering algorithm to the CS matrices and deriving log groupings from the clustering algorithm output.

Abstract: A method, computer program product, and computing system for processing historical input/output (IO) performance data associated with one or more storage objects of a storage system. A smoothing model may be applied on at least a portion of the historical IO performance data to generate forecast IO performance data. The forecast IO performance data may be compared to observed IO performance data to generate one or more performance differentials. A normal IO performance range may be generated based upon, at least in part, the one or more performance differentials. One or more IO performance anomalies may be detected based upon, at least in part, the normal IO performance range.

Abstract: A method, computer program product, and computing system for processing historical input/output (IO) performance data associated with one or more storage objects of a storage system. A plurality of IO modeling systems may be trained using the historical IO performance data. Modeling performance information may be determined for the plurality of IO modeling systems across the historical IO performance data. A forecast score may be determined for each IO modeling system based on the modeling performance information for the plurality of IO modeling systems. A subset of the plurality of IO modeling systems may be selected based upon the forecast score for each IO modeling system. The at least one IO modeling system may be trained using the historical IO performance data. IO performance data may be forecasted using the at least one trained IO modeling system from the subset of the plurality of IO modeling systems.