Abstract: Systems, methods, and techniques that facilitate application fingerprint generation are provided. One or more embodiments described herein can comprise a computer-implemented method comprising determining, by a device operatively coupled to a processor, fault proneness of one or more microservices regarding one or more fault categories, generating, by the device, an ordered seed set of the one or more microservices based on the determined fault proneness, generating, by the device, an augmented ordered seed set of the one or more microservices based on topological relationships of the one or more microservices and based on the ordered seed set, and building, by the device, a set of one or more patterns of resource constraint faults and a set of one or more patterns of entity experience faults based on the augmented ordered seed set of the one or more microservices.

Abstract: Systems, computer-implemented methods, and computer program products to facilitate proactive operational risk assessment of a proposed change in a computing environment are provided. According to an embodiment, a system can comprise a processor that executes computer executable components stored in memory. The computer executable components can comprise an extraction component that identifies change events in historic operational data that induced one or more incidents in a computing environment. The computer executable components further comprise an assessment component that employs a model to assign a change risk assessment score to a defined change in the computing environment based on the change events.

Abstract: Methods, systems, and computer program products for automatically detecting periods of normal activity by analyzing observability data in IT operations environments are provided herein. A computer-implemented method includes obtaining multiple types of data related to one or more artificial intelligence-related information technology operations; modelling at least a portion of the obtained data as time series data; automatically identifying, from the time series data, one or more time periods associated with one or more given levels of data activity; and performing one or more automated actions, in at least one artificial intelligence-related information technology operations environment, based at least in part on the data corresponding to the one or more identified time periods.

Abstract: Various systems and methods are presented herein regarding automatically identifying one or more entities to for assignment to resolving an issue and/or removing an entity from a group of entities assigned to resolve the issue. The issue can relate to an information technology/computer-based environment. The entities can be subject matter experts, having expertise identified to be related to the issue. A summary of the issue and activity relating to resolving the issue can be automatically generated and supplied to an entity who is being onboarded after the project is underway to resolve the issue. By implementing automated assignment/removal of entities, efficiency of the resolution is improved.

Abstract: An example operation may include one or more of accessing table data including columns corresponding to candidate attributes, respectively, and a target column corresponding to a target attribute, determining, by executing an entropy function, entropy values of the candidate attributes based on randomness of values in the columns, respectively, identifying a subset of candidate attributes that have entropy values between a predefined range of entropy values, determining a correlation between the subset of attributes by executing a correlation function on values in columns, determining at least one machine learning (ML) model to be generated based on the correlation between the subset of candidate attributes, and training the at least one ML model to determine the target attribute based on execution of the at least one ML model on training data to generate a trained at least one ML model.

Abstract: Embodiments of the present invention provide methods, computer program products, and systems. Embodiments of the present invention can in response to receiving information associated with an activity, identify requirements associated with performance of the activity. Embodiments of the present invention can then determine relevancy of each requirement of the identified requirements. Embodiments of the present invention can then define compliance mechanisms needed to verify compliance of the identified requirements that were determined relevant, and in response to detecting a violation, execute one or more remedial actions to satisfy an identified requirement that was determined relevant of the identified requirements.

Abstract: In some implementations, a computing device may obtain a set of log lines associated with operations performed at a computing device. The computing device may select a first sample of the set of log lines. The computing device may identify a first set of log templates from the first sample, the first set of log templates having a first quantity of log templates. The computing device may select a second sample of the set of log lines. The computing device may identify a second set of log templates from the second sample, the second set of log templates having a second quantity of log templates. The computing device may apply the first set of log templates to the set of log lines for log templatization based at least in part on the first quantity of log templates being equal to the second quantity of log templates.

Abstract: An approach is provided for controlling an alert suppression policy. Using historical training data and for a time period, an expected alert reduction for an alert suppression policy (ASP) is computed. The ASP is recommended for an information technology (IT) environment. During runtime and for the time period, an observed alert reduction for the ASP is computed. A visualization of a benefit of the ASP is generated by generating a visualization of a comparison of the observed alert reduction and the expected alert reduction. An explanation of why the ASP is recommended for the IT environment is generated by determining persistent regions for respective event time series from the historical training data and generating a visualization of the persistent regions on a time graph that includes a duration and a number of events for a given persistent region. Each event time series corresponds to a given resource for the ASP.

Abstract: Systems, methods, and techniques that facilitate application fingerprint generation are provided. One or more embodiments described herein can comprise a computer-implemented method comprising determining, by a device operatively coupled to a processor, fault proneness of one or more microservices regarding one or more fault categories, generating, by the device, an ordered seed set of the one or more microservices based on the determined fault proneness, generating, by the device, an augmented ordered seed set of the one or more microservices based on topological relationships of the one or more microservices and based on the ordered seed set, and building, by the device, a set of one or more patterns of resource constraint faults and a set of one or more patterns of entity experience faults based on the augmented ordered seed set of the one or more microservices.

Abstract: Change incident data in an enterprise computing system may be linked to other data in conversations. The link creation includes receiving electronic conversations associated with an issue in the enterprise computing system. A change request is identified in electronic conversations. An incident number is identified in the electronic conversations. A first link is generated associating the change request to the incident number. The first link is applied to a downstream application.

Abstract: Systems and methods include reception of a plurality of item descriptions associated with a respective hierarchical code which includes a plurality of group codes, extraction of a respective plurality of phrases from each item description, assignment, for each item description, a phrase embedding determined for each of the extracted respective plurality of phrases to each of the plurality group codes included in the hierarchical code associated with the item description, generation of a composite embedding for each of the plurality of group codes based on the phrase embeddings assigned to the group code, and storage of each composite embedding in association with the group code for which the composite embedding was generated.

Abstract: A composite conversation from a collaborative channel is obtained and independent conversations within the composite conversation are separated. An intent of each message in each of the independent conversations is determined and those messages with a same intent are clustered together to form artifact clusters. A summary for each artifact cluster is generated and the summaries of the artifact clusters are combined. A final coherent interaction summary is created based on the artifact clusters and a network-based computer system is reconfigured based on the final coherent interaction summary.

Abstract: A computer-implemented method, according to one approach, includes: receiving one or more streams of system log information from one or more microservices, and comparing the received system log information to compressed templates. One or more blocks of the system log information that correspond to one or more of the compressed templates are identified. All static text is removed from the identified blocks. Moreover, runtime variables from the identified blocks are inserted into respective ones of the compressed templates. The streams of system log information are further updated by replacing the identified blocks with the compressed templates having the runtime variables therein.

Abstract: A computer-implemented method, according to one approach, includes: receiving observability data produced by a first portion of a distributed application. The observability data is evaluated and in response to determining that the observability data indicates the first portion of the distributed application is degraded, the amount of the observability data produced by the first portion of the distributed application is increased. Additionally, the amount of observability data produced by other portions of the distributed application that are correlated with the first portion of the distributed application is also increased.

Abstract: Systems and methods include receipt of search terms, determination of an embedding for each of the search terms, generation of a composite embedding based on the determined embeddings, determination of similarities between the composite embedding and second composite embeddings associated with each of a plurality of hierarchical group codes, determination of a hierarchical group code of the plurality of hierarchical group codes based on the determined similarities, and generation of search results based on the search terms and the hierarchical group code.

Abstract: Techniques are provided for dynamic alert suppression policy management. In one embodiment, the techniques involve receiving an event stream, wherein the event stream includes metric values comprising at least one of: log anomaly data and metric anomaly data, determining an anomalous event based on the event stream, determining a persistent region of the anomalous event, determining a quantum representation of the persistent region, determining X-Y values of the persistent region based on the quantum representation, and generating a policy based on a set of the X-Y values.

Abstract: A computer-implemented method, according to one approach, includes: receiving observability data produced by a first portion of a distributed application. The observability data is evaluated and in response to determining that the observability data indicates the first portion of the distributed application is degraded, the amount of the observability data produced by the first portion of the distributed application is increased. Additionally, the amount of observability data produced by other portions of the distributed application that are correlated with the first portion of the distributed application is also increased.

Abstract: Various systems and methods are presented herein regarding automatically identifying one or more entities to for assignment to resolving an issue and/or removing an entity from a group of entities assigned to resolve the issue. The issue can relate to an information technology/computer-based environment. The entities can be subject matter experts, having expertise identified to be related to the issue. A summary of the issue and activity relating to resolving the issue can be automatically generated and supplied to an entity who is being onboarded after the project is underway to resolve the issue. By implementing automated assignment/removal of entities, efficiency of the resolution is improved.

Abstract: Techniques are provided for dynamic alert suppression policy management. In one embodiment, the techniques involve receiving an event stream, wherein the event stream includes metric values comprising at least one of: log anomaly data and metric anomaly data, determining an anomalous event based on the event stream, determining a persistent region of the anomalous event, determining a quantum representation of the persistent region, determining X-Y values of the persistent region based on the quantum representation, and generating a policy based on a set of the X-Y values.

Abstract: Embodiments receive a plurality of faults for at least one microservice in a cloud native based application within a fault set selection server; inject the faults into at least one microservice in the cloud native based application within the fault set selection server; obtain a system state representation for each of the injected faults in the at least one microservice in the cloud native based application using an unsupervised clustering algorithm; derive a fault subset based on the system state representation for each the faults in the at least one microservice in the cloud native based application; and inject the derived fault subset into the at least one microservice in the cloud native based application and logging behavior of the at least one microservice in the cloud native based application with the injected derived fault subset.