Abstract: Systems and methods are provided for detecting an anomaly in a performance indicator associated with a network device. One method may include: generating a plurality of hints; identifying a subset of hints from the plurality of hints, where each hint in the subset is associated with an open alert and has a same severity level as the associated open alert; querying in bulk from a time series data store a set of historical data; processing the set of historical data and the remaining hints that are not in the subset of hints to form processed data; determining whether the processed data exceeds a threshold parameter associated with the performance indicator; and performing an alert action in bulk based on the processed data exceeding the threshold parameter of the performance indicator.

Abstract: In some examples, a method can include applying a respective label of a plurality of labels to a network device of a plurality of network devices on a network; determining a respective amount of a performance attribute over a period of time for each client device associated with the network devices; generating an implicit data heap structure of top N client devices across a plurality of distributed processes for each label of the plurality of labels; determining, based on an implicit data heap structure, a client device having the greatest amount of the performance attribute over the period of time for a label of the plurality of labels; and displaying a client identifier of the client device having the greatest amount of the performance attribute.

Abstract: The present disclosure provides an effective solution to accurately determine branch gateway device availability within a computer network. The present disclosure can be employed to accurately determine branch gateway device availability when branch gateway devices are configured in a high-availability peer configuration state and managed by a cloud management service. In some implementations, when branch gateway devices are in a high-availability peer configuration state, they send status messages to their peers which in turn can forward to a cloud management service such that the availability of each branch gateway device on a network can be readily obtained.

Abstract: The present disclosure provides an effective solution to accurately determine branch gateway device availability within a computer network. The present disclosure can be employed to accurately determine branch gateway device availability when branch gateway devices are configured in a high-availability peer configuration state and managed by a cloud management service. In some implementations, when branch gateway devices are in a high-availability peer configuration state, they send status messages to their peers which in turn can forward to a cloud management service such that the availability of each branch gateway device on a network can be readily obtained.

Abstract: Systems and methods are provided for detecting an anomaly in a performance indicator associated with a network device. One method may include: generating a plurality of hints; identifying a subset of hints from the plurality of hints, where each hint in the subset is associated with an open alert and has a same severity level as the associated open alert; querying in bulk from a time series data store a set of historical data; processing the set of historical data and the remaining hints that are not in the subset of hints to form processed data; determining whether the processed data exceeds a threshold parameter associated with the performance indicator; and performing an alert action in bulk based on the processed data exceeding the threshold parameter of the performance indicator.

Abstract: In some examples, a method can include applying a respective label of a plurality of labels to a network device of a plurality of network devices on a network; determining a respective amount of a performance attribute over a period of time for each client device associated with the network devices; generating an implicit data heap structure of top N client devices across a plurality of distributed processes for each label of the plurality of labels; determining, based on an implicit data heap structure, a client device having the greatest amount of the performance attribute over the period of time for a label of the plurality of labels; and displaying a client identifier of the client device having the greatest amount of the performance attribute.