Abstract: Techniques are described for generating period profiles. According to an embodiment, a set of time series data is received, where the set of time series data includes data spanning a plurality of time windows having a seasonal period. Based at least in part on the set of time-series data, a first set of sub-periods of the seasonal period is associated with a particular class of seasonal pattern. A profile for a seasonal period that identifies which sub-periods of the seasonal period are associated with the particular class of seasonal pattern is generated and stored, in volatile or non-volatile storage. Based on the profile, a visualization is generated for at least one sub-period of the first set of sub-periods of the seasonal period that indicates that the at least one sub-period is part of the particular class of seasonal pattern.

Abstract: Techniques for artificial intelligence driven configuration management are described herein. In some embodiments, a machine-learning process determines a feature set for a plurality of deployments of a software resource. Based on varying values in the feature set, the process clusters each of the plurality of deployments into a cluster of a plurality of clusters. Each cluster of the plurality of clusters comprises one or more nodes and each node of the one or more nodes corresponds to at least a subset of values of the feature set that are detected in at least one deployment of the plurality of deployments of the software resource. The process determines a representative node for each cluster of the plurality of clusters. An operation may be performed based on the representative node for at least one cluster.

Abstract: Systems and methods for performing unsupervised baselining and anomaly detection using time-series data are described. In one or more embodiments, a baselining and anomaly detection system receives a set of time-series data. Based on the set of time-series, the system generates a first interval that represents a first distribution of sample values associated with the first seasonal pattern and a second interval that represents a second distribution of sample values associated with the second seasonal pattern. The system then monitors a time-series signals using the first interval during a first time period and the second interval during a second time period. In response to detecting an anomaly in the first seasonal pattern or the second seasonal pattern, the system generates an alert.

Abstract: Generating persistent multifaceted statistical distributions of event data associated with computing nodes is disclosed. From a data stream, events are identified that occur during a first time interval. Characteristics associated with the events are determined. Based on a primary characteristic, it is determined that an event corresponds to an event cluster. The event count for that cluster is incremented. It is determined that the characteristics correspond to an event descriptor of events in the cluster. Responsive to requests to view the event cluster, information about descriptors from the cluster are displayed indicating events having a particular event descriptor, or a summary of characteristics that distinguish the descriptor from other event descriptors.

Abstract: Techniques for training and evaluating seasonal forecasting models are disclosed. In some embodiments, a network service generates, in memory, a set of data structures that separate sample values by season type and season space. The set of data structures may include a first set of clusters corresponding to different season types in the first season space and a second set of clusters corresponding to different season types in the second season space. The network service merges two or more clusters the first set and/or second set of clusters. Clusters from the first set are not merged with clusters from the second set. After merging the clusters, the network serves determines a trend pattern for each of the remaining clusters in the first and second set of clusters. The network service then generates a forecast for a metric of a computing resource based on the trend patterns for each remaining cluster.

Abstract: Techniques for machine-learning of long-term seasonal patterns are disclosed. In some embodiments, a network service receives a set of time-series data that tracks metric values of at least one computing resource over time. Responsive to receiving the time-series data, the network service detects a subset of metric values that are outliers and associated with a plurality of timestamps. The network service maps the plurality of timestamps to one or more encodings of at least one encoding space that defines a plurality of encodings for different seasonal patterns. Based on the mapped encodings, the network service generates a representation of a seasonal pattern. Based on the representation of the seasonal pattern, the network service may perform one or more operations in association with the at least one computing resource.

Abstract: Systems and methods are described for efficiently detecting an optimal number of behaviors to model software system performance data and the aspects of the software systems that best separate the behaviors. The behaviors may be ranked according to how well fitting functions partition the performance data.

Abstract: Techniques are described herein for scalable clustering of target resources by parameter set. In some embodiments, a plurality of parameter sets of varying length are received, where a parameter set identifies attributes of a target resource. A plurality of signature vectors are generated based on the plurality of parameter sets such that the signature vectors have equal lengths. A signature vector may map to one or more parameter sets of the plurality of parameter sets. A plurality of clusters are generated based on the similarity between signature vectors. Operations may be performed on a target resource based on one or more nodes in the plurality of clusters.

Abstract: Techniques for analyzing an execution of a query statement based on a random archive are disclosed. A plurality of query statements that are executed during a particular time period are identified. A random sampling function is executed to randomly select a set of query statements from the plurality of query statements. Execution plans and/or performance metrics associated with each execution of the randomly-selected query statements are stored into a random archive. Responsive to determining that a performance metric for a current execution of a particular query statement does not satisfy a performance criteria, information associated with the particular query statement from the random archive is analyzed. A model plan characteristic associated with an execution of the particular query statement stored in the random archive is determined. An execution plan associated with the model plan characteristic is determined for another execution of the particular query statement.

Abstract: Techniques for generating distribution approximations with low memory footprints are disclosed. In some embodiments, a system receives a first set of values that measure one or more metrics of at least one computing resource. A set of clusters are generated, within volatile or non-volatile memory, that approximate a distribution of the first set of values measuring the one or more metrics of the at least one computing resource. The set of clusters is transformed, within volatile or non-volatile memory, to a piecewise approximation of a function for the first set of values.

Abstract: Systems and methods for performing unsupervised baselining and anomaly detection using time-series data are described. In one or more embodiments, a baselining and anomaly detection system receives a set of time-series data. Based on the set of time-series, the system generates a first interval that represents a first distribution of sample values associated with the first seasonal pattern and a second interval that represents a second distribution of sample values associated with the second seasonal pattern. The system then monitors a time-series signals using the first interval during a first time period and the second interval during a second time period. In response to detecting an anomaly in the first seasonal pattern or the second seasonal pattern, the system performs a responsive action, such as generating an alert.

Abstract: Techniques for efficiently generating aggregate distribution approximations are disclosed. In some embodiments, a system receives a plurality of piecewise approximations that represent different distributions of a set of values on at least one computing resource. Based on the plurality of piecewise approximations, a set of clusters are generated, within volatile or non-volatile memory, that approximate an aggregate distribution of the set of metric values on the at least one computing resource. The set of clusters is transformed, within volatile or non-volatile memory, to an aggregate piecewise approximation of a function for the set of metric values on the at least one computing resource.

Abstract: Techniques are described herein for scalable clustering of target resources by parameter set. In some embodiments, a plurality of parameter sets of varying length are received, where a parameter set identifies attributes of a target resource. A plurality of signature vectors are generated based on the plurality of parameter sets such that the signature vectors have equal lengths. A signature vector may map to one or more parameter sets of the plurality of parameter sets. A plurality of clusters are generated based on the similarity between signature vectors. Operations may be performed on a target resource based on one or more nodes in the plurality of clusters.

Abstract: Techniques are described herein for scalable clustering of target resources by parameter set. In some embodiments, a plurality of parameter sets of varying length are received, where a parameter set identifies attributes of a target resource. A plurality of signature vectors are generated based on the plurality of parameter sets such that the signature vectors have equal lengths. A signature vector may map to one or more parameter sets of the plurality of parameter sets. A plurality of clusters are generated based on the similarity between signature vectors. Operations may be performed on a target resource based on one or more nodes in the plurality of clusters.

Abstract: Techniques for analyzing, understanding, and remediating differences in configurations among many software resources are described herein. Machine learning processes are applied to determine a small feature set of parameters from among the complete set of parameters configured for each software resource. The feature set of parameters is selected to optimally cluster configuration instances for each of the software resources. Once clustered based on the values of the feature set of parameters, a graph is generated for each cluster of configuration instances that depicts the differences among the configuration instances within the cluster. An interactive visualization tool renders the graph in a user interface, and a management tool allows changes to the graph and changes to the configuration of one or more software resources.

Abstract: According to an embodiment, storage configurations are identified for storing items, such as database tables, partitions, or any other types of objects or data structures, within a desired storage area, such as an in-memory data store or any other limited storage resource. Each of the storage configurations is assigned to a particular item of the items. Each of the storage configurations associates the assigned particular item with one or more storage configuration options. Storage recommendations are generated for at least a set of the storage configurations. A different storage recommendation exists for each storage configuration in the set of the storage configurations. The storage recommendation associates the storage configuration with a range of possible storage sizes for a particular storage area of a system. Based on the storage recommendations, recommended system configurations a generated for different possible storage sizes of the particular storage area.

Abstract: Techniques are described for characterizing and summarizing seasonal patterns detected within a time series. According to an embodiment, a set of time series data is analyzed to identify a plurality of instances of a season, where each instance corresponds to a respective sub-period within the season. A first set of instances from the plurality of instances are associated with a particular class of seasonal pattern. After classifying the first set of instances, a second set of instances may remain unclassified or otherwise may not be associated with the particular class of seasonal pattern. Based on the first and second set of instances, a summary may be generated that identifies one or more stretches of time that are associated with the particular class of seasonal pattern. The one or more stretches of time may span at least one sub-period corresponding to at least one instance in the second set of instances.

Abstract: Techniques are described for characterizing and summarizing seasonal patterns detected within a time series. A set of time series data is analyzed to identify a plurality of instances of a season, where each instance corresponds to a respective sub-period within the season. A first set of instances from the plurality of instances are associated with a particular class of seasonal pattern. After classifying the first set of instances, a second set of instances may remain unclassified or otherwise may not be associated with the particular class of seasonal pattern. Based on the first and second set of instances, a summary may be generated that identifies one or more stretches of time that are associated with the particular class of seasonal pattern. The one or more stretches of time may span at least one sub-period corresponding to at least one instance in the second set of instances.

Abstract: Techniques are described herein for scalable clustering of target resources by parameter set. In some embodiments, a plurality of parameter sets of varying length are received, where a parameter set identifies attributes of a target resource. A plurality of signature vectors are generated based on the plurality of parameter sets such that the signature vectors have equal lengths. A signature vector may map to one or more parameter sets of the plurality of parameter sets. A plurality of clusters are generated based on the similarity between signature vectors. Operations may be performed on a target resource based on one or more nodes in the plurality of clusters.

Abstract: Techniques are described for characterizing and summarizing seasonal patterns detected within a time series. A set of time series data is analyzed to identify a plurality of instances of a season, where each instance corresponds to a respective sub-period within the season. A first set of instances from the plurality of instances are associated with a particular class of seasonal pattern. After classifying the first set of instances, a second set of instances may remain unclassified or otherwise may not be associated with the particular class of seasonal pattern. Based on the first and second set of instances, a summary may be generated that identifies one or more stretches of time that are associated with the particular class of seasonal pattern. The one or more stretches of time may span at least one sub-period corresponding to at least one instance in the second set of instances.