Abstract: A method for ranking detected anomalies is disclosed. The method includes generating a graph based on a plurality of rules, wherein the graph comprises nodes representing metrics identified in the rules, edges connecting nodes where metrics associated with connected nodes are identified in a given rule, and edge weights of the edges each representing a severity level assigned to the given rule. The method further includes ranking nodes of the graph based on the edge weights. The method further includes ranking detected anomalies based on the ranking of the nodes corresponding to the metrics associated with the detected anomalies.

Abstract: A method for ranking detected anomalies is disclosed. The method includes generating a graph based on a plurality of rules, wherein the graph comprises nodes representing metrics identified in the rules, edges connecting nodes where metrics associated with connected nodes are identified in a given rule, and edge weights of the edges each representing a severity level assigned to the given rule. The method further includes ranking nodes of the graph based on the edge weights. The method further includes ranking detected anomalies based on the ranking of the nodes corresponding to the metrics associated with the detected anomalies.

Abstract: In one embodiment, a method for serverless computing comprises: receiving a task definition, wherein the task definition comprises a first task and a second task chained to the first task; adding the first task and the second task to a task queue; executing the first task from the task queue using hardware computing resources in a first serverless environment associated with a first serverless environment provider; and executing the second task from the task queue using hardware computing resources in a second serverless environment selected based on a condition on an output of the first task.

Abstract: In one embodiment, a server in a network reports one or more symptoms of a monitored device that is malfunctioning to a user interface via a particular chatbot session. The server receives, via the particular chatbot session, a triage request to enter a triage mode regarding the one or more reported symptoms. The server predicts a corrective action using the one or more reported symptoms as input to a machine learning model. The machine learning model is trained using a history of observed symptoms in the network, a history of corrective actions initiated via chatbot sessions and associated with the observed symptoms, and a history of feedback regarding the corrective actions received via the chatbot sessions. The server provides the predicted corrective action to the user interface via the particular chatbot session as a suggested corrective action, in response to the received triage request.

Abstract: In an example, there is disclosed a logging server computing apparatus, having: a processor; a memory; and a logging engine to: analyze a network; build an entity-state matrix M from an entity vector e and a state vector s; determine that there is a strong correlation between an entity ec and a state sc; and report the strong correlation.

Abstract: In one embodiment, a device in a network aggregates values for a set of key performance indicators (KPIs) for a system the network to form a plurality of KPI states. The device associates a plurality of observed performance metric values from the system with the KPI states. The device constructs a machine learning-based decision tree. Internal vertices of the decision tree represent conditions for the plurality of observed performance metric values and leaves of the tree represent the KPI states. The device predicts a KPI state by using the machine learning-based decision tree to analyze live performance metric values streamed from the system. The device generates a proactive alert based on the predicted KPI state.

Abstract: In one embodiment, a method for serverless computing comprises: receiving a task definition, wherein the task definition comprises a first task and a second task chained to the first task; adding the first task and the second task to a task queue; executing the first task from the task queue using hardware computing resources in a first serverless environment associated with a first serverless environment provider; and executing the second task from the task queue using hardware computing resources in a second serverless environment selected based on a condition on an output of the first task.

Abstract: In one embodiment, a device in a network aggregates values for a set of key performance indicators (KPIs) for a system the network to form a plurality of KPI states. The device associates a plurality of observed performance metric values from the system with the KPI states. The device constructs a machine learning-based decision tree. Internal vertices of the decision tree represent conditions for the plurality of observed performance metric values and leaves of the tree represent the KPI states. The device predicts a KPI state by using the machine learning-based decision tree to analyze live performance metric values streamed from the system. The device generates a proactive alert based on the predicted KPI state.

Abstract: In one embodiment, a server in a network reports one or more symptoms of a monitored device that is malfunctioning to a user interface via a particular chatbot session. The server receives, via the particular chatbot session, a triage request to enter a triage mode regarding the one or more reported symptoms. The server predicts a corrective action using the one or more reported symptoms as input to a machine learning model. The machine learning model is trained using a history of observed symptoms in the network, a history of corrective actions initiated via chatbot sessions and associated with the observed symptoms, and a history of feedback regarding the corrective actions received via the chatbot sessions. The server provides the predicted corrective action to the user interface via the particular chatbot session as a suggested corrective action, in response to the received triage request.

Abstract: In an example, there is disclosed a logging server computing apparatus, having: a processor; a memory; and a logging engine to: analyze a network; build an entity-state matrix M from an entity vector e and a state vector s; determine that there is a strong correlation between an entity ec and a state sc; and report the strong correlation.

Abstract: A method for ranking detected anomalies is disclosed. The method includes generating a graph based on a plurality of rules, wherein the graph comprises nodes representing metrics identified in the rules, edges connecting nodes where metrics associated with connected nodes are identified in a given rule, and edge weights of the edges each representing a severity level assigned to the given rule. The method further includes ranking nodes of the graph based on the edge weights. The method further includes ranking detected anomalies based on the ranking of the nodes corresponding to the metrics associated with the detected anomalies.