Abstract: A data processing method includes receiving a first dataset sent by a network element, where the first dataset includes a plurality of pieces of first data obtained by the network element; obtaining, based on the first dataset, at least one data feature corresponding to the plurality of pieces of first data; and sending trigger information to the network element, where the trigger information includes at least one data feature and/or at least one feature type, and at least one feature type is related to at least one data feature.

Abstract: A method includes obtaining a first memory log, where the first memory log includes log information of a plurality of garbage collections, and log information of each garbage collection includes a garbage collection time, and includes at least one of a downtime, memory usage after garbage collection, and memory usage before garbage collection, obtaining, based on log information in a first detection time window, first statistical information corresponding to the first detection time window, and determining, based on the first statistical information corresponding to the first detection time window, an anomaly degree corresponding to the log information in the first detection time window.

Abstract: Apparatus and methods for detecting an anomaly in a dataset by using two or more anomaly detection algorithms, as well as to corresponding computer program products, are described. The results obtained by using the two or more anomaly detection algorithms are combined in accordance with a certain rule of combination, thereby providing an improved accuracy of anomaly detection.

Abstract: In the method, a detection agent apparatus receives location information of a monitoring point on a service path that is sent by a detection control apparatus, where the detection agent apparatus is located in the NFV system; the detection agent apparatus obtains fault locating information from the monitoring point based on the location information of the monitoring point, where the fault locating information is information obtained by the monitoring point according to a filter criterion, and the fault locating information includes the location information of the monitoring point; and the detection agent apparatus sends the fault locating information to the detection control apparatus, where the detection control apparatus may determine a faulty monitoring point based on the fault locating information and a service model corresponding to the service path.

Abstract: A memory anomaly detection method and device are provided. The method includes: obtaining a first memory log, where the first memory log includes log information of a plurality of garbage collections, and log information of each garbage collection includes a garbage collection time, and includes at least one of a downtime, memory usage after garbage collection, and memory usage before garbage collection; obtaining, based on log information in a first detection time window, first statistical information corresponding to the first detection time window; and determining, based on the first statistical information corresponding to the first detection time window, an anomaly degree corresponding to the log information in the first detection time window. It can be learned that by implementing the method described in the embodiments of this application, accuracy of a detection result of a memory anomaly degree is improved.

Abstract: In the method, a detection agent apparatus receives location information of a monitoring point on a service path that is sent by a detection control apparatus, where the detection agent apparatus is located in the NFV system; the detection agent apparatus obtains fault locating information from the monitoring point based on the location information of the monitoring point, where the fault locating information is information obtained by the monitoring point according to a filter criterion, and the fault locating information includes the location information of the monitoring point; and the detection agent apparatus sends the fault locating information to the detection control apparatus, where the detection control apparatus may determine a faulty monitoring point based on the fault locating information and a service model corresponding to the service path.