Abstract: A cause analysis and remediation engine (CARE) can perform an analysis of inputs characterizing aspects of the system at the time an alert is generated in order to determine causes and remediation actions for the alert. The CARE can automatically detect and analyze inputs including configuration information, compliance information, and workload and performance information to determine one or more expected causes of the alert and one or more corresponding remediations that can be taken. The CARE can include a rules engine and a remediation service. The rules engine can include one or more trained models, such as trained machine learning models, each using rules to recognize inputs denoting a particular expected cause of the alert. The models can be decision trees trained using supervised learning. The remediation service can map one or more expected causes determined by the rules engine to the one or more corresponding remediations.

Abstract: A storage system management application receives reports describing operation of a storage system from a performance monitoring system, and compares the storage system operating metrics against a set of respective thresholds. If the metrics breach one or more thresholds, the seasonality boundaries for the respective metric are calculated, and an alert is only generated if the storage system operating metric is both outside the performance threshold and outside of the calculated seasonality boundaries. By determining the seasonality boundaries and using the seasonality boundaries to determine when to generate alerts, it is possible to reduce the number of alerts generated. By including the seasonality values in the alerts, the deviation from normal seasonably operating conditions can be determined from the alert, thus enabling a person who receives the alert to determine the magnitude of deviation of the storage system operation from seasonably adjusted normal operation.

Abstract: A storage system management application receives reports describing operation of a storage system from a performance monitoring system, and compares the storage system operating metrics against a set of respective thresholds. If the metrics breach one or more thresholds, the seasonality boundaries for the respective metric are calculated, and an alert is only generated if the storage system operating metric is both outside the performance threshold and outside of the calculated seasonality boundaries. By determining the seasonality boundaries and using the seasonality boundaries to determine when to generate alerts, it is possible to reduce the number of alerts generated. By including the seasonality values in the alerts, the deviation from normal seasonably operating conditions can be determined from the alert, thus enabling a person who receives the alert to determine the magnitude of deviation of the storage system operation from seasonably adjusted normal operation.