Abstract: Systems, apparatuses, and methods related to host-based error correction are described. Error correction operations can be performed on a host computing system as opposed to on a memory system. For instance, data containing erroneous bits can be transferred from a memory system to a host computing system and error correction operations can be performed using circuitry resident on the host computing system. In an example, a method can include receiving, by a host computing system, data that comprises a plurality of uncorrected bits from a memory system coupleable to the host computing system, determining an acceptable error range for the data based at least in part on an application associated with the data, and performing, using error correction logic resident on the host computing system, an initial error correction operation on the data based at least in part on the acceptable error range.

Abstract: A variable configuration method and a variable configuration device thereof are disclosed. The variable configuration method for the variable configuration device includes receiving an incident prediction notification from a network at a first time instant, determining at least one variable at a second time instant in response to the incident prediction notification, and outputting the at least one variable at a third time instant. The incident prediction notification is used to instruct the variable configuration device to determine the at least one variable to respond to a quality of service (QoS) violation prediction at a fourth time instant later than the third time instant.

Abstract: This disclosure generally relate to a method and system for network policy simulation in a distributed computing system. The present technology relates techniques that enable simulation of a new network policy with regard to its effects on the network data flow. By enabling a simulation data flow that is parallel and independent from the regular data flow, the present technology can provide optimized network security management with improved efficiency.

Abstract: Disclosed herein are systems and methods that allow for secure access to websites and web-based applications. Also described are systems and methods for secure use and retention of user credentials, as well as methods for dynamic authentication of users and integrity checking of service providers in online environments. Thus, described in the present specification are systems and methods for constructing and destroying private, secure, browsing environments (a secure disposable browser), insulating the user from the threats associated with being online for the purposes of providing secure, policy-based interaction with online services.

Abstract: A host submits a command to a memory device, where a host status indicator (ID) for the host and a memory device status ID for the memory device are assigned with the command in at least one of a status command slot related to the command. An interrupt signal asserted during processing of the command is determined, where the interrupt signal is indicative of a change in at least one of the host status ID and the memory device status ID. After determining that the interrupt signal is asserted at least one of the host status ID and the memory device status ID are read. Based on the read information, a failure in at least one of the host and device is corrected prior to initiation of a timeout process.

Abstract: Techniques for autoscaling a deduplication process include receiving a first plurality of event records in an event stream during a first period of time and determining real-time characteristics of the event stream based on the event records received during the first period of time. Based on the real-time characteristics of the event stream, a level of similarity for a deduplication process is selected to apply for future event records received in the event stream. The deduplication process may also be enabled or disabled based on the real-time characteristics. A second plurality of event records is received in the event stream during a second period of time. If deduplication is enabled, the second plurality of event records are deduplicated based on the level of similarity.

Abstract: This application provide a memory fault handling method and apparatus, and relate to the field of computer technologies, to resolve a problem, in the conventional technology, that a system breaks down due to a memory fault. A specific solution is as follows: A management module obtains error information of a memory. The management module determines, based on the error information of the memory by using a machine learning algorithm, a fault feature mode of the memory or an isolation repair technology used to repair the memory. The management module determines, based on the fault feature mode of the memory or the isolation repair technology used to repair the memory, to repair the memory by using at least one of hardware isolation or software isolation.

Abstract: Provided are a communication device, a communication controlling method, and a non-transitory computer-readable medium storing a communication controlling program that each make it possible to grasp the condition of communication quality. A communication device (1) includes acquiring means (2) configured to acquire quality information concerning a burst error that has occurred in an optical communication line. The communication device (1) includes estimating means (3) configured to estimate a first index value based on the quality information acquired by the acquiring means (2), the first index value indicating a degree of influence of the burst error on communication quality in a first communication device.

Abstract: During the delivery of a sequence of packets from a server to a client device, when an expiration time associated with an initial payload of a data packet belonging to a sliding window for delivery is reached without reception of a corresponding acknowledgment from the device, the server (300) resends the data packet with a new payload corresponding to the initial payload of a next data packet to be transmitted through the sliding window.

Abstract: A fault diagnosis device 80 includes an input unit 81 and a generation unit 82. The input unit 81 receives input of fault data obtained from a vehicle when a fault of the vehicle occurs and observation data observed in time series by each device of the vehicle until immediately before the fault occurs. The generation unit 82 generates a feature master that associates a content of the fault indicated by the fault data with features extracted from the corresponding observation data.

Abstract: A communication device configured to operate in a communications network that includes a network node can determine that the communication device will perform a radio link procedure (“RLP”) in a mode of operation. The communication device can further determine information associated with a channel monitoring pattern (“CMP”) based on determining that the communication device will perform the RLP in the mode of operation. The communication device can further monitor a channel between the network node and the communication device based on the information associated with the CMP.

Abstract: A circuit for detecting failure of a device includes an on-phase detector, an off-phase detector, and protection switch circuitry. The on-phase detector is configured to determine whether a first failure has occurred at the device based on a rate of change of a current at a high-side switching element. The off-phase detector is configured to determine whether a second failure has occurred at the device based on both a current at a low-side switching element and a voltage at a switch node that is electrically coupled to the high-side switching element and the low-side switch. The protection switch circuitry is configured to electrically disconnect the high-side switching element from a supply circuit in response to the on-phase detector determining that the first failure has occurred at the device or in response to the off-phase detector determining that the second failure has occurred at the device.

Abstract: An information processing system includes a host and a storage device that transmits a first pulse signal to the host and receives a second pulse signal from the host through a transmission line. The storage device has a first register to store a value of a first parameter and correction circuit to adjust a first duty ratio of the first pulse signal according to the value of the first parameter. The host includes a first calibration processor that measures a plurality of the first duty ratios as output from the storage device for different values of the first parameter to derive a first optimum value based on the measured first duty ratios and transmit the derived first optimum value to the storage device as the value of the first parameter to be stored in the first register.

Abstract: Techniques are described for predicting future behavior of links in a network and generating dynamic thresholds for link metrics for use in path selection. In one example, a computing system receives historical values of a link metric for links of a network. The computing system executes a machine learning system which processes the historical values of the link metric to generate: (1) a predicted future value of the link metric for each link; and (2) a threshold for the link metric indicating whether the predicted future value for each link is anomalous. The computing system computes a path based on the predicted future values of the link metric and the threshold for the link metric. The computing system provisions the computed path, thereby enabling a network device to forward network traffic along the computed path.

Abstract: A computer implemented method includes accessing performance trace data for executed code of multiple services. Symbols corresponding to functions of the executed code are identified. First sequences of functions from the identified symbols are identified and a first performance threshold for each identified first sequence of functions is computed. The method includes receiving an incoming performance trace, detecting second sequences of functions from the incoming performance trace, identifying second sequences equivalent to the first sequences, and comparing performance of the identified second sequences to the first performance threshold for each of the equivalent first sequences to identify second sequences as comprising a performance bottleneck.

Abstract: Systems, computer program products, and methods are described herein for dynamic error resolution in an extended reality environment. The present invention identifies user errors in real time based on user selections in an extended reality (XR) environment. In this regard, the present invention focuses on electronic applications (and the electronic work products/electronic data hosted thereon) within an XR environment and uses machine learning processes to identify real time user errors. The invention may then use a second set of machine learning processes to create, in real-time, digital support content which is visible via an XR platform (accessible using a virtual/augmented/mixed reality device). As such, the system may provide specific improvements over prior systems by automatically providing users with custom error resolution support in real time.

Abstract: The disclosed computer-implemented method includes receiving, by a first circuit subsystem, a hardware error signal and storing, in response to the hardware error signal, a signal state of the first circuit subsystem in a reset-persistent register. The method also includes sending, by the first circuit subsystem, the hardware error signal to a second circuit subsystem. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Computerized systems and methods are provided to intelligently and dynamically manage a data center comprising at least one server and at least one central manager. The central manager is programmed to access the at least one server on a predetermined schedule to determine whether at least one application is functioning properly by determining a functionality level. Alternatively, the central manager determines whether the at least one server is actively used by determining an activity level for the server. Based on the central manager's determinations, the system dynamically adjusts the power level of the server, resulting in reduced power consumption and a reduction in wasted resources and unnecessary processing power in the management of servers in a data center.

Abstract: System for delivering an event journal during a back-up session in a distributed file system is presented. The system includes an event intake module, a load balancer, a plurality of object creation modules, a journal manager, and a journal service module. Each object creation module of the plurality of object creation modules further includes an ingestor and a drainer. A related method is also presented. The system and method provide for reliable and time-ordered delivery of events in the event journal.

Abstract: Techniques for failure prediction of controllers are disclosed. For example, a method comprises collecting data corresponding to operation of a plurality of controllers from one or more devices, and predicting, using one or more machine learning algorithms, at least one of degradation and failure of one or more controllers of the plurality of controllers based, at least in part, on the data corresponding to the operation of the plurality of controllers. Using the one or more machine learning algorithms, one or more corrective actions to prevent the at least one of the degradation and the failure of the one or more controllers are identified. Instructions comprising the one or more corrective actions are generated and transmitted to at least one user device.

Abstract: Systems, apparatuses, and methods for transmission failure feedback associated with a memory device are described. A memory device may detect errors in received data and transmit an indication of the error when detected. The memory device may receive data and checksum information for the data from a controller. The memory device may generate a checksum for the received data and may detect transmission errors. The memory device may transmit an indication of detected errors to the controller, and the indication may be transmitted using a line that is different than an error detection code (EDC) line. A low-speed tracking clock signal may also be transmitted by the memory device over a line different than the EDC line. The memory device may transmit a generated checksum to the controller with a time offset applied to the checksum signaled over the EDC line.

Abstract: Embodiments herein describe integrity check techniques that are efficient and flexible by using local registers in a segment to store check values which can be used to detect errors in the local configuration data in the same segment. In addition to containing local registers storing the check values, each segment can include a mask register indicated which of the configuration registers should be checked and which can be ignored. Further, the segments can include a next segment register indicating the next segment the check engine should evaluate for errors.

Abstract: In some embodiments, Uniform Resource Locator (URL) parameters may be used to bind access tokens to authorize web-browser-initiated network operations. In some embodiments, a user input at a data exchange gateway associated with a first website to perform a first network operation (e.g., a request to access resources associated with the first website) may be detected. In response to the detected user input, an access token may be generated based on user specific information associated with the user, where the access token is associated with one or more network operation parameters. In response to a use of the access token for authorizing the first network operation and successful authorization of the first network operation, the access token may be configured to be bound to a first URL identifier parameter associated with the first website.

Abstract: The present application provides a three-mode storage method for program blocks based on check, comprising: first dividing the program to be injected into N blocks and checking each block to obtain the first checksum; then injecting the program to be injected and the first checksum twice in the program storage area, and the two injected programs are noted as the main program and the backup program, respectively; dividing the main program into N blocks, and checking each program block to obtain the second checksum during program run; dividing the backup program into N blocks and checking each block to obtain the third checksum; and comparing the checksum, second checksum and third checksum: if the three are consistent, performing no operation; updating the program or checksum and checking again, if the three are inconsistent.

Abstract: In an approach to improve platform modification by dynamically modifying content based on user feedback. Embodiments suggest one or more solutions and recommendations, via a user interface, to one or more users that comply with one or more standards, regulations, and resources of an organization. Further, embodiments verify the solutions and recommendations that comply with the one or more standards, regulations, and resources of the organization, and automatically generate a prototype solution. Additionally, embodiments provide, by the user interface, one or more augmented solutions for the one or more users, wherein augmented solutions are provided to the one or more users requiring a temporary solution; and label and cluster user feedback and associated solutions of the one or more users to provide effective solutions for future users based on a similarity of the feedback of the one or more users.

Abstract: Novel tools and techniques are provided for implementing intelligent alert automation (“IAA”). In various embodiments, IAA receives alert/event feeds from several different alerting and ticketing systems via input Redis queues, and uses a triage system to determine whether to process the alert/event or disregard it. If so, IAA may create a flow instance, assign a unique instance ID, and place the flow instance in one of a plurality of jobs queues based on alert/event type and/or or source. An abattoir system retrieves a flow instance from one of the jobs queues (in order of the queue's priority), and processes the next node or step in the flow instance. The flow instance is placed back into the jobs queue for subsequent processing by the same or different abattoir system until no additional nodes or steps remain in the flow, at which point the flow instance is considered complete.

Abstract: An automated method for detecting anomalous activity in a private computer network comprises: collecting, over a current time period at an ingesting network device of the computer network, non-routable network packets routed to the ingesting network device from other network devices of the computer network; parsing the current collected network packets into corresponding current network flow records each including a source field and a destination field representing a non-routable network address; and for each distinct source identified in the source fields of the current network flow records: aggregating the current network flow records of that source into a current aggregated flow record; analyzing the current aggregated flow record using an anomaly detection module trained through machine learning on previous aggregated flow records of that source from previous time periods in order to detect anomalous activity in that source; and acting in response to detecting the anomalous activity in that source.

Abstract: A valid node management method, a memory storage device and a memory control circuit unit are disclosed. The method includes: establishing a valid node management table corresponding to a first physical management unit; storing valid node management data in the valid node management table, wherein the valid node management data reflects a distribution status of a valid node in the first physical management unit; receiving an operation command from a host system, wherein the operation command is configured to change a data storage status of the first physical management unit; and updating the valid node management data in the valid node management table in response to the operation command.

Abstract: An apparatus and method for supporting communication during error handling in a computing system. A computing system includes a first partition and a second partition, each capable of performing error management based on a respective machine check architecture (MCA). The first partition includes a host processor that executes an exception handler for managing reported errors. A message converter unit of the second partition assists in generating messages based on detected errors in the second partition. The message converter unit receives requests from hardware components of the second partition for handling errors and translates MCA addresses between the first partition and the second partition. To support the message converter unit, during an earlier bootup operation, the second partition communicates the hardware topology of the second partition to the host processor, and the host processor sends address translation information.

Abstract: A system and method for evaluating optimization of a hardware engine are described herein. In an example embodiment, a first operation of a desired application is performed using one or more hardware resources each associated with one or more task graphs of a plurality of task graphs. A first result is recorded from a first simulation based on a first task graph of the plurality of task graphs implemented using a first configuration of a first hardware resource associated with the first task graph. A second result is recorded from a second simulation based on a second task graph of the plurality of task graphs implemented using a second configuration of a second hardware resource associated with the second task graph. An interface is generated based on the first result and the second result for rendering by a display device.

Abstract: Methods, systems, and devices for parity-based error management are described. A processing system that performs a computational operation on a set of operands may perform a computational operation, (e.g., the same computational operation) on parity bits for the operands. The processing system may then use the parity bits that result from the computational operation on the parity bits to detect, and discretionarily correct, one or more errors in the output that results from the computational operation on the operands.

Abstract: At least one processing device is configured to control delivery of input-output (IO) operations from a host device to a storage system over selected ones of a plurality of paths through a network. The at least one processing device is further configured to designate one or more of the paths as being associated with a link performance issue, to temporarily suspend utilization of the one or more designated paths for delivery of IO operations from the host device to the storage system, to detect a configuration change that is indicative of potential resolution of the link performance issue, and to resume utilization of the one or more designated paths responsive to the detected configuration change. The at least one processing device illustratively comprises a multi-path input-output (MPIO) driver of the host device.

Abstract: Apparatus and methods for intelligently monitoring multiple bots for failure or predicted failure and notifying a user through a proximate Internet-of-Things (“IoT”) device are provided. A program may receive configuration files for each IoT device and access to monitor each bot. The program may monitor each bot through a resiliency scanner module. The program may generate a report about a failure or predicted failure of a bot. The program may activate a self-healing engine to attempt to heal the bot. The program may activate an event-stream engine. The event-stream engine may determine which IoT device to transmit a report and notify the user through that IoT device to the failure or predicted failure. The user may respond through the IoT device or another device.

Abstract: Techniques for storage testing involve: acquiring a first state of a storage system including first input/output (IO) load information; taking a first action based on the first state, the first action causing the first IO load information to be changed to second IO load information; updating the first action to be a reserved action for the first state if it is obtained based on the second IO load information that the storage system reaches a preset condition; and obtaining an action combination of a plurality of IO load information changes based on a plurality of reserved actions corresponding to a plurality of states, wherein the plurality of states include the first state. Accordingly, the most effective load combination change mode for the storage system can be found automatically and more accurately, so as to find more vulnerabilities of the storage system, thereby improving the efficiency of storage system testing.

Abstract: A control device of a technical installation receives in normal operation cyclically measurement variables from sensors, and outputs control variables to actuators. In normal operation, the control device stores the history of at least some of the measurement variables at least for a limited time and monitors the measurement variables for the occurrence of a fault. If a fault occurs, the control device transmits a fault message identifying the fault and the history to a knowledge base. In response to the fault message and the histories, the control device receives a reply from the knowledge base and outputs the reply to an operator. Before the normal operation is performed, the control device receives from the operator specifications which allow the control device to defines the histories. In the event of a fault, the control device determines, in dependence on the specifications, which histories to transmit to the knowledge base.

Abstract: System and methods for IoT event detector correctness verification. Detector models (e.g., state-based models including variables, states, transitions and actions) take IoT device data as input and detect, based on the data, events that triggers actions. To verify a correctness of the models prior to deploying the models at scale, an event detector model correctness checker obtains a representation of a definition of the model, verifies, based on analysis of the model definition, whether the model complies with correctness properties, and generates a report indicating whether the model complies. Example correctness properties include a reachability correctness property that indicates that respective states or actions are reachable according to the definition of the event detector model. The analysis may be accessed via an interface element and may result in generation of a report that identifies a location of non-compliance within the model definition.

Abstract: Operations include: determining that the first event record does not meet similarity criteria in relation to any of a plurality of representative records in an event log; adding a new representative record, to the plurality of representative records, that is based on the first event record; determining that the second event record meets the similarity criteria in relation to a first representative record of the plurality of representative records; incrementing the numerical value, associated with the first representative record in the event log, that indicates the number of event records that are represented by the first representative record; generating log data that (a) comprises the incremented numerical value associated with the first representative record and (b) does not include the second event record; and updating the event log based on the log data to generate an updated event log that does not include the second event record.

Abstract: Disclosed herein is a server management apparatus, comprising: a server information acquisition unit configured to acquire, from a plurality of servers respectively, server information on a server and hardware component information on hardware components included in the server, using an identifier of a control board of the server as a key; an analysis unit configured to analyze the server information and the hardware component information acquired by the server information acquisition unit, and generate a server status flag indicating whether or not any of the server and the hardware components has an abnormality; and a structured file generation unit configured to generate a structured file that hierarchically stores, in a human-readable format, the server information and the hardware component information acquired by the server information acquisition unit, the structured file including a header describing the server status flag generated by the analysis unit.

Abstract: A method for operating an eVTOL multirotor aircraft having distributed actuators activated by controllers that each determines an associated manipulated variable signal at least for a subset of actuators and provides it for the relevant actuator. The method provides that for an actuator: i) assigning a different priority ranking for each controller; ii) determining, by way of a given controller having a given priority ranking, at least one manipulated variable signal for the actuator and transmitting the signal identified by the given priority ranking to the relevant actuator and to a controller having a successive priority ranking; iii) receiving, via a given controller having a given priority ranking, manipulated variable signals from controllers having higher priority ranking and relaying these signals to the actuator and to a controller having a successive priority ranking; and iv) activating the actuator using the manipulated variable signal identified by the highest priority ranking.

Abstract: Techniques are disclosed relating to maintaining a high availability (HA) database. In some embodiments, a computer system receives, from a plurality of host computers, a plurality of requests to access data stored in a database implemented using a plurality of clusters. In some embodiments, the computer system responds to the plurality of requests by accessing data stored in an active cluster. The computer system may then determine, based on the responding, health information for ones of the plurality of clusters, wherein the health information is generated based on real-time traffic for the database. In some embodiments, the computer system determines, based on the health information, whether to switch from accessing the active cluster to accessing a backup cluster. In some embodiments, the computer system stores, in respective clusters of the database, a changeover decision generated based on the determining.

Abstract: A method of distributing alerts based on received internet of things device information includes: receiving, by the alert routing system, first information from a first internet of things device relating to a first condition monitored by the first internet of things device, determining, by the alert routing system, that the first information corresponds to a first alert condition, generating, by the alert routing system, a listing of alert conditions, where the listing of alert conditions includes the first alert condition, receiving, by the alert routing system, second information from a second internet of things device relating to a second condition monitored by the second internet of things device, determining, by the alert routing system, that the second information corresponds to a second alert condition; and adding, by the alert routing system, the second alert condition to the listing of alert conditions.

Abstract: A data backup method, a data recovery method, and an electronic device are disclosed. The data backup method includes: determining a data set to be backed up, performing a status update operation on a data block in the data set, determining the time points when the data block changes from the first phase to the second phase, and when the data block changes from the second phase to the third phase, and performing data backup on the data set to generate backup files. With this method, upon data seal time point, no fresh data can be reached in any data block, and the data block back-up persists, so that the time point of the data backup operation is more accurate, the cut point of which deleted data should be included in the back up is easy to locate, and the deleted data may be accurately processed.

Abstract: A system includes a memory and a processor coupled to the memory. The processor runs a software application on a simulated user device to render a virtual environment on the simulated user device. The processor detects that a first view of the virtual environment has been rendered and accesses from the memory a first expected view pattern that corresponds to the first view. The processor compares the first view to the first expected view pattern and detects that a pattern of one or more visual elements in the first view does not match with an expected pattern of visual elements in the first expected view pattern. In response, the processor determines that an error has occurred relating to rendering the virtual environment by the software application. The processor obtains a solution corresponding to the error and applies the solution to the software application to resolve the detected error.

Abstract: Methods, systems, and computer-readable storage media for receiving, by a service stack recovery engine, an error message indicating a failed service in a plurality of services executed in a cloud platform, determining, by the service stack recovery engine, a set of services for recovery in response to the error message, and, for each service in the set of services, identifying, by the service stack recovery engine, an error handler that is associated with a service recovery type in a set of service recovery types, the error handler including a set of error handling operations to be executed to recover the failed service, and transmitting, by the service stack recovery engine, the error handler to a service recovery agent associated with the respective service, the service recovery agent executing error handling operations of the error handler to recover the service.

Abstract: Described are examples for tracking memory usage of a driver. A memory allocation request related to the driver to allocate a portion of memory for the driver can be traced in a kernel mode of an operating system. One or more associated allocation parameters can be recorded, and an allocation history of the driver over a period of time can be reported during execution of the driver and based on the one or more allocation parameters indicated by the memory allocation request.

Abstract: Examples for enhancing sensitivity to reflected GNSS signals are presented herein. An example may involve identifying, by a receiver, a particular positioning signal that reflected off a reflecting plane prior to reaching the receiver. The receiver may be in motion. The example may also involve determining a reflected satellite position for a satellite that transmitted the particular positioning signal based on identifying the particular positioning signal. The reflected satellite position may be determined by reflecting a position of the satellite about the reflecting plane. The example may also involve determining a direction vector to the reflected satellite position for the satellite and performing coherent integration over a threshold duration of time to increase a signal to noise ratio for the particular positioning signal based on the direction vector to the reflected satellite position.

Abstract: Disclosed are methods and apparatuses for generating or updating dynamic context data associated with a digital request data object in a multi-application network. receiving, a first input associated with the digital request data object; determining based on the first input, the digital request data object from the one or more databases associated with the multi-application network; determining profile data indicating one or more of: user data associated with first input, and trajectory data associated with one or more computing operations executed on the digital request data object; extracting metadata associated with the digital request data object; receiving a second input associated with the digital request data object; generating, based on the metadata, the profile data, and the second input, dynamic context data for the digital request data object; and storing the dynamic context data in the one or more databases associated with the multi-application network.

Abstract: Systems, methods, and user interfaces provide integrated coordination of care. Care team coordination and collaboration is promoted by bringing together each of the necessary elements of a patient's plan into a single point of access. Current workflow silos that exist in the care planning space are eliminated. This allows seamless support for the many different care planning regulations across care settings and supports and involves the entire care team including the patient and personal care team.

Abstract: The confidentiality of data is maintained in a case where analysis of an operation state of a facility is entrusted to the outside. An embodiment of the present invention is configured to chronologically store log data in a first storage medium, and store attribute information indicating a relevance between a type of a failure expected to occur in a facility and each of a plurality of data users; The embodiment is further configured to select, at the occurrence of a failure in the facility, a data user who has a relevance to a type of the failure from among the plurality of data users based on the attribute information, selectively read log data relating to an operation state of the facility in which the failure has occurred, and transmits the read log data to the selected data user.

Abstract: A method, computer system, and a computer program for grouping a plurality of computing system fault events is provided. The present invention may include extracting a summary of computing system fault events based on at least one similarity detected. The present invention may then include generating a plurality of vectors in which each vector corresponds to a summary, clustering the plurality of vectors into a plurality of clusters based on the at least one similarity, and compressing each cluster of the plurality of clusters into at least one cluster centroid. The present invention may further include generating a group centroid for a group including the plurality of clusters based on the at least one cluster centroid. The present invention may also include presenting a correlation statement derived from a result associated with the group centroid and generating a system fault solution based on the correlation statement.