Abstract: A method of grouping content requests by one or more behaviors is provided. Each content request is labeled. Sessions for various user and service types are defined. The sessions are then modeled to create representative sessions. Each session is then matched with one or more representative sessions.

Abstract: An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing channels for packets for a predetermined window of time. To generate an activity model, an input and an output channel are selected. A probability distribution function describing the observed waiting time between packet arrivals on the selected input channel and the selected output channel is generated by mining the data collected during the selected window of time. A probability distribution function describing the observed waiting time between a randomly chosen instant and receiving a packet on the selected input channel is also generated. The distance between the two generated probability distribution functions is computed. If the computed distance is greater than a predefined confidence level, then the two selected channels are deemed to be related. Otherwise, the selected channels are deemed to be unrelated.

Abstract: A method is provided for defining a required information delivery system capacity as a function of a user's service quality objectives. An information delivery system behavior is modeled to understand under what conditions the user's service quality objectives are met or not met. Conditions are captured in which the user's service quality objectives are met or not met. Statistical techniques are applied to the conditions captured. A model is induced that describes the conditions in which the user's service quality objectives are met or not met.

Abstract: Internet service providers and their clients communicate by transmitting messages across one or more networks and infrastructure components. At various points between the service provider and the clients, inclusively, records may be created of each messages occurrence and status. These records may be read and analyzed to determine the effects of the networks and infrastructure components on the provided quality of service. User-effecting incidents (e.g., failures) occurring at networks may also be identified and described.

Abstract: A method of determining behavior of an information system application is provided. The information system application's behavior for user content requests and load conditions is determined as is a user's quality of service objectives. The information system application's capacity allocation is then prioritized. Changes in the information system application's behavior are detected. The behavior of the information system applications is then updated in response to detecting changes that affect the user's quality of service objectives.

Abstract: An activity model is generated at a computer. The activity model may be generated by monitoring incoming and outgoing data in the computer. The collected data is analyzed to form a graph that describes and predicts what output is generated in response to received input. Later, a window of input and output data is collected from the computer. This collected window of data is used to query the activity model. The graph in the activity model is then used to give the probability that the collected window of data was collected from the computer used to generate the activity model. A high probability indicates that the computer is performing normally, while a low probability indicates that the computer may behaving erratically and there may be a problem with the computer.

Abstract: Activity models are maintained on a plurality of computers on a network. When a user or a particular activity model at a computer discovers an error, it may query its own activity model to determine a possible source of the error. If it is determined to not be the likely source of the error, the activity model queries the activity models of those computers on the network that it depends on. These activity models may then query the activity models of the computers that their particular host computer depends on and so forth. Ultimately the results of these activity model queries may be used to diagnose the likely source of the error and may be presented to the requesting user as a report.

Abstract: A classifier is calibrated to produce a calibration map and a threshold is derived from the calibration map. A probability assignment produced by the classifier for input data is then compared to the threshold.

Abstract: A computer system includes a signature creation engine operable to determine signatures representing states of a computer resource from metrics for the computer resource. The computer system also includes a database operable to store the signatures along with an annotation for each signature including information relating to a state of the computer resource. The computer system is operable to determine a recurrent problem of the computer resource from stored signatures.

Abstract: Metrics for a computer resource are collected. A signature representing a state of the computer resource from the metrics are determined by determining raw values for each of the metrics and generating a vector from at least some of the raw values for the metrics, where generating the vector further comprises generating models for possible system states of the computer resource, determining a model that closely matches a state of the computer resource, determining key metrics for the model, and determining a vector of values from the key metrics. An annotation that describes the state of the computer resource is received and associated with the signature. The signature and the associated annotation are stored such that they are searchable.

Abstract: A method for accepting a session in an information system server includes generating a representation of the session. The representation includes a first plurality of parameters that define a proposed additional load of the session on the information system server. A determination is made of a current state representation of the information system server. The current state representation is defined by a second plurality of parameters. The current state representation defines a current load on the information system server at a time instant. A determination is made of a headroom representation for the current state of the information system. The headroom representation is defined by a distance between a model surface.

Abstract: Systems, methods, and software used in performing automated diagnosis and identification of or forecasting service level object states. Some embodiments include building classifier models based on collected metric data to detect and forecast service level objective (SLO) violations. Some such systems, methods, and software further include automated detecting and forecasting of SLO violations along with providing alarms, messages, or commands to administrators or system components. Some such messages include diagnostic information with regard to a cause of a SLO violation. Some embodiments further include storing data representative of system performance and detected and forecast system SLO states. This data can then be used to generate reports of system performance including representations of system SLO states.

Abstract: A classifier is calibrated to produce a calibration map and a threshold is derived from the calibration map. A probability assignment produced by the classifier for input data is then compared to the threshold.

Abstract: A method for accepting a session in an information system server includes generating a representation of the session. The representation includes a first plurality of parameters that define a proposed additional load of the session on the information system server. A determination is made of a current state representation of the information system server. The current state representation is defined by a second plurality of parameters. The current state representation defines a current load on the information system server at a time instant. A determination is made of a headroom representation for the current state of the information system. The headroom representation is defined by a distance between a model surface.

Abstract: Models of capacity of an information system are described. The models may be queried when a new session arrives at the information system, to determine whether to accept the session as is, demand new capacity from an alternate server in order to fulfill the session, or reject the session. The models employ feature vectors to represents states of the information system. Parameters in the feature vectors may include load measurements on CPUs in the information system; load measurements on memory in servers employed in the information system; transactions per second conducted in databases in the information system; rate at which requests arrive from referral URLs to the information system; number of sessions in the information system; CPU utilization in the information system; database utilization in the information system.

Abstract: The present invention concerns an icon aided run function display system wherein a function may be selected from a plurality of choices shown on a display means and having a function selection means for selecting the function and terminating the selection. Further, the present invention comprises an apparatus for selecting an additional device display in a recording apparatus having a plurality of selectively attachable devices. Moreover, the present invention comprises a call selection system having a function selection key wherein a plurality of selection functions and a function selection message are simultaneously display with the operation of a cursor.