Abstract: In several aspects for detecting a computing system resource schedule, a computing device performs a pre-analysis process utilizing a collected log from multiple sources. The pre-analysis process including a data formatter that identifies data based on a metric, and a dimensionality reduction process that distributes the data into an n-dimensional space. Key patterns are extracted to separate a normal status and an abnormal status for the extracted key patterns. A post-analysis process is performed on the extracted key patterns utilizing a threshold formatter to identify a threshold for a health check.