Abstract: Data is gathered from a log file on a first application server, a log file on a second application server, a database on a database server, or any suitable combination thereof. By correlating the data from different sources, XP-Functions that execute in sequence on a single application server are identified and combined into a sequence referred to as an executable process chain (XP-Chain). The automatic process discovery server reconstructs end-to-end processes out of XP-Chains, even when the XP-Chains are executed on different application servers, based on log files and database data. A test script may be generated for an identified end-to-end process. By running the test script, proper functioning of the end-to-end process may be confirmed. Existing test scripts may be disabled for a formerly identified end-to-end process that is no longer found to be executed.

Abstract: A computing system automatically manages error reports. Each error report specifies an error that occurred within a subsystem of the computing system. A received error report is added into a root cause grouping. Each root cause grouping contains error reports having error types traceable to a same root cause. A deployment time at which the subsystem corresponding to the error report was deployed within the computing system is determined. A severity score for the root cause grouping is generated as a function of the deployment time. The severity score inversely correlates to a time period length between the deployment time and the occurrence time of the error. The root cause grouping is assigned to a ranked error container of a plurality of ranked error containers based on the generated severity score. Each ranked error container contains root cause groupings having severity scores within a specified score range.

Abstract: A method of extending a conversational computing interface comprises obtaining data-flow traces indicating computational steps that occur based on execution of a nonnative skill implemented in a nonnative programming language of the conversational computing interface. A native computer-executable plan is automatically generated. The generated native computer-executable plan represents the data-flow traces in a native programming language of the conversational computing interface. The conversational computing interface is automatically trained based on the native computer-executable plan and a conversational event associated with the native computer-executable plan.

Abstract: An information processing device according to the present technology includes a transmission processing unit that performs processing for transmitting device state information relating to a selected item to an external device of a request source, in response to a request for the device state information relating to the selected item that has been made by the external device, by using code information indicating the selected item, the selected item being an item that has been selected by a user for the device state information indicating a state of a device.

Abstract: A system includes memory hardware that stores an event logging database including entries corresponding to events processed at local servers. The processor hardware executes instructions including, in response to receiving a first message from a first local server (the first message indicates that a first event occurred), identifying a causal parent event preceding the first event. The causal parent event is a most recent event that occurred at the first local server. The instructions include identifying a temporal parent event preceding the first event. The temporal parent event is a most recent event that occurred across all of the local servers. The instructions include generating a new entry based on data from the first message and a cryptographic hash based on a hash of a first entry recording the causal parent event and a hash of a second entry recording the temporal parent event.

Abstract: A method for execution by a storage network begins by creating a plurality of vaults in memory addressable by the storage network, where a vault is a virtual memory block associated with a portion of storage network memory, and then determining dispersed storage error encoding parameters for each vault. The method then continues by creating a plurality of vault regions within each vault, wherein a vault region is configured to store a data type of a plurality of data types, where at least one data type of the plurality of data types is associated with a unique access restriction.

Abstract: The present disclosure relates to an artificial intelligence apparatus capable of providing a user manual corresponding to an abnormality diagnosis by diagnosing an abnormality of a target device inquired by a user, and a method for providing a target device manual thereof, and may be configured to, when receiving a user inquiry from the user terminal through the communication unit, analyze the user inquiry to set a diagnosis range of a target device, perform a diagnosis corresponding to the user inquiry within the set diagnosis range of the target device, generate a user manual for the performed diagnosis result, and control the communication unit to transmit the generated a user manual to the user terminal.

Abstract: A method includes receiving, by a network management system, network data from a plurality of network devices configured to provide a network at a site; receiving, by the processing circuitry, user impact data from a plurality of client devices that access the network at the site; determining, based on the network data, a pattern of one or more network events occurring over time; correlating in time the pattern of the one or more network events to an adverse user impact event indicated by the user impact data received from the plurality of client devices; and determining, in response to the correlating, an instance of overwhelming network traffic having an adverse user impact. In some examples, the network data includes network traffic impact data, such as a number of packets dropped at a switch port due to congestion.

Abstract: Techniques and mechanisms for logging crash event information based on a high-level representation of a structure that a crash log is to have. In an embodiment, a crash log agent logs information which describes system state to a record of a crash log. A structure of the record is defined by instructions which include a high-level reference to a type of information that is to be retrieved for logging to the record. Based on the high-level reference, the crash log agent accesses reference information which indicates a correspondence of the information type to a circuit resource with which state information is to be retrieved. A transaction unit of the crash log agent generates a command to target the circuit resource in response to an indication of a crash log event. In another embodiment, the transaction unit identifies the circuit resource prior to the crash log event.

Abstract: The present disclosure relates to identifying process flows from log sources (e.g., log files), and generating visual representations (e.g., flow diagrams, Sankey diagrams, etc.) of the identified process flows. In addition, the present disclosure relates to clustering of tree structures based on the shape of the tree structure using one or more hashing algorithms. The present disclosure also relates to a user interface that presents a query builder for efficiently querying a log analytics system for tree structures that satisfy a user-defined range.

Abstract: Some embodiments of the invention provide a method of dynamically scaling a hub cluster in a software-defined wide area network (SD-WAN) based on particular traffic statistics, the hub cluster being located in a datacenter of the SD-WAN and allowing branch sites of the SD-WAN to access resource of the datacenter by connecting to the hub cluster. A controller of the SD-WAN receives, from the hub cluster, traffic statistics centrally captured at the hub cluster. The controller then analyzes these statistics to identify traffic load fluctuations, and determines that a number of hubs in the hub cluster should be adjusted based on the identified fluctuations. The controller adjusts the number of hubs in the hub cluster based on the determination.

Abstract: System calls can be used to troubleshoot problems with software services. For example, a system can receive tracing data indicating system calls executed by a group of software services. The system can analyze parameters of the system calls described in the tracing data to identify relationships between the system calls. The system can determine a sequence of system calls between a predefined starting event and a predefined ending event based on the relationships between the system calls. The system can then generate an output to a user indicating the sequence of system calls. The output can be used by the user to troubleshoot a problem associated with executing the plurality of software services.

Abstract: An ultrasound imaging system includes an ultrasound probe designed to produce an ultrasound image including one or more blood vessels below a skin surface of a patient, and a console with a display. The console is operably coupled to the ultrasound probe. The console includes a memory including instructions capable of causing a processor to determine a depth of the user selected blood vessel and a selection of medical devices based on a user selection including one or both of a minimum dwell length and an angle of insertion. The processor can be configured to determine these parameters prior to insertion of a user selected medical device into a user selected blood vessel from the one or more blood vessels below the skin surface of the patient. The display depicts the ultrasound image, the user selected blood vessel, and the user selected medical device.

Abstract: Techniques for causal modeling. Historical feature data is received, relating to a plurality of nodes in a system. A machine learning (ML) model is generated, for a node of the plurality of nodes. The ML model is trained to predict a plurality of future feature values for the node based on at least a portion of the historical feature data. A causal graph is generated, for the plurality of nodes, using a feature selection mechanism within the ML model. The feature selection mechanism includes a regularization term encouraging sparsity of nodes in selected features in the ML model.

Abstract: Systems and methods for predictively detecting vehicle failure based on diagnostic trouble codes are provided. In one example, a method is provided, comprising determining a probability of failure of a vehicle based on one or more diagnostic trouble codes (DTCs); and indicating to an operator of the vehicle that failure is likely in response to the probability exceeding a threshold.

Abstract: An error management system can provide search results based on a received stack trace. For example, the error management system receives, from a client device, a search query including a stack trace. The error management system parses the search query to identify at least a first class and one or more errors associated with the first class, yielding a parsed search query. The error management system searches a class mapping table based on the parsed search query. The class mapping table includes a listing of classes and corresponding links to source code. The error management system searches an error discussion database based on the parsed search query. The error discussion database includes one or more user generated postings regarding programming errors. The error management system provides, to the client device, search results resulting from searching the class mapping table and the error discussion database.

Abstract: A monitoring system that monitors a monitoring-target system is disclosed. The monitoring system includes one or more storage apparatuses that store a program, and one or more processors that operate according to the program. The one or more processors determine an estimated value of a monitoring-target response variable of the monitoring-target system on a basis of measurement data included in test data of the monitoring-target system and a causal structure model of the monitoring-target system. The one or more processors decide whether an abnormality has occurred in the monitoring-target system on a basis of a result of a comparison between a measurement value of the monitoring-target response variable included in the test data, and the estimated value.

Abstract: A system, method, and computer-readable medium are disclosed for performing a data center monitoring and management operation. The data center monitoring and management operation includes: monitoring a plurality of data center assets contained within a data center; receiving a data center asset data stream, the data center asset data stream comprising a plurality of data center events, at least some of the plurality of data center events having associated data center issues; capturing asset alert data from the plurality of data center events; and, performing a data center issue analysis operation, the data center issue analysis operation using the asset alert data from the plurality of data center events, the data center issue analysis operation identifying a data center asset from the plurality of data center assets affected by the particular data center issue.

Abstract: A method for execution by a storage network begins by issuing a decode threshold number of read requests for a set of encoded data slices to a plurality of storage units of a set of storage units and continues by determining whether less than a decode threshold number of read requests has been received in a time window. The method continues by identifying one or more encoded data slices encoded data slices associated with read requests of the decode threshold number of read requests that have not been received and for an encoded data slice of the one or more encoded data slices, issuing a priority read request to a storage unit storing a copy of the encoded data slice. The method then continues by receiving a response from the storage unit storing the copy of the encoded data, where the storage unit storing the copy of the encoded data slice is adapted to delay one or more maintenance tasks in response to the priority read request.

Abstract: A processing device in a memory system detects a data loss occurrence in a block of a memory component. The processing device further designates the block as a quarantined block, performs a stress test on the block, and depending on whether the stress test on the block satisfies a testing criterion, either designates the block as usable by the memory component or retires the block of the memory component.

Abstract: A computer-implemented method according to one embodiment includes creating a log of one or more events occurring during a performance of continuous data protection (CDP) for an instance of data; in response to identifying a conclusion of the performance of CDP for the instance of data, determining a value for the one or more events within the log; and conditionally creating and storing a snapshot of the instance of data, based on a comparison of the value for the one or more events to a predetermined threshold.

Abstract: A method of automatic troubleshooting, includes determining that a first parameter was degraded; identifying at least one first process corresponding to the first parameter; determining whether the at least one first process was operating while the first parameter was degraded; based on determining that the at least one first process was operating while the first parameter was degraded, identifying a problem scenario corresponding to the first parameter and the at least one first process; identifying a plurality of second parameters associated with the problem scenario; determining whether the plurality of second parameters were degraded; based on determining that the plurality of second parameters were degraded, determining that the problem scenario occurred; and based on determining that the problem scenario occurred, displaying information indicating the problem scenario.

Abstract: Systems and methods that may be used to provide an inference-based incident detection and reporting process. In one or more embodiments, an inference model may be used to track and analyze changes and incident data from various sources of record to quickly predict potential sources of errors and help focus in on the root cause of a software incident.

Abstract: Disclosed in some examples are systems, methods, devices, and machine-readable mediums to detect and terminate programmable atomic transactions that are stuck in an infinite loop. In order to detect and terminate these transactions, the programmable atomic unit may use an instruction counter that increments each time an instruction is executed during execution of a programmable atomic transaction. If the instruction counter meets or exceeds a threshold instruction execution limit without reaching the termination instruction, the programmable atomic transaction may be terminated, all resources used (e.g., memory locks) may be freed, and a response may be sent to a calling processor.

Abstract: Method and system for Root Cause Analysis (RCA) across multiple network systems. Update information of a first local root cause analysis mechanism is received. An RCA controller generates, based on the update information, a new node to be added to a global root cause decision tree, where the global root cause decision tree is to be shared by at least two of the plurality of network operators. The RCA controller requests storage of the new node in a distributed ledger that is shared by network operators. The RCA controller participates in a verification operation of the new node. In response to determining that the verification operation is successful, the RCA controller adds an entry including the new node to the distributed ledger as part of the global root cause decision tree. Alternatively, when the verification operation is not successful, the new node is not added to the distributed ledger.

Abstract: A computer network includes a server computer having communication ports that are wired to switch ports of two separate network switches. The network switches receive link layer discovery protocol (LLDP) packets from other network devices, and automatically aggregate corresponding switch ports into a port channel aggregation based on the contents of the LLDP packets.

Abstract: A method and apparatus where the method includes detecting a plurality of events related to the activities of users within a security system wherein the events are defined by a plurality of attributes, wherein at least one attribute is categorical and wherein a data distance between events is a function of event attributes, evaluating the detected events using a density based anomaly detection method f(r), where r is a size of a neighborhood around a data point, comparing a value of the evaluated expression with a margin threshold value (msg(r)) and setting an alarm upon detecting that the value exceeds the threshold value.

Abstract: A method for generating a set of analytical redundancy relations representative of a system with which a plurality of sensors is associated for the observation of variables indicative of operating conditions and adapted to enable detection and discrimination of faults. A complete set of analytical redundancy relations of the system is built from a set of intermediate relations established between observable and non-observable variables of the system, wherein each intermediate relation is generated by combining two predetermined relations Rj, Rk, each of which is expressed in an implicit form as a tuple (i) of a subset Sj of system variables, (ii) of the set Cj of the support components for said relation, and (iii) of the set Tj of the primary relations used to derive said intermediate relation.

Abstract: In one embodiment, the techniques herein provide that a node may receive indicia of a fault state in one or more components of a computer network. Based on the indicia, the node may then identify a network dependency group including a plurality of network components that are hierarchically associated with the one or more components. The node may then receive, from a database, a time series of performance data values corresponding to the network dependency group, wherein the time series comprises performance data values from before and after the onset of the fault state. The node may then identify altered performance data values in the time series comprising values which differ before and after onset of the fault state, and then determine a root cause of the fault state by identifying one or more particular components within the network dependency group that are associated with the altered performance data values.

Abstract: A method of correlating the timing of multiple interleaved trace data streams. A Time Stamp Trace stream logic monitors the event trace stream for a synchronization request. When a synchronization request, a CTI trigger or both are detected the EEP ID is incremented and the time stamp value is inserted into the trace stream along with the EEP ID and any relevant identification markers available in the detected synchronization request.

Abstract: Automated program testing is facilitated. Test results generated based on performance of one or more tests by a program are obtained, where a test passes or fails based on output obtained based on performance of the test by the program. A failure output of the test results is identified, the failure output being of a failing test that includes at least one command, and the failure output being obtained based on performing the at least one command. A modified test is automatically generated based on the failing test, where the modified test is provided for performance thereof by the program to facilitate testing of the program. The modified test includes the at least one command of the failing test, and the modified test passes based on obtaining the identified failure output of the failing test.

Abstract: Technologies are generally described for systems and methods effective to provide an automatic diagnostic data collection system to facilitate diagnosis of technical problems associated with computing device and to facilitate the analysis of marketing and performance metrics of the computing devices. When a user of a computing device calls or accesses a help desk and/or call center, data can be automatically collected from the computing device to allow the help desk operator quickly and accurately diagnose the problem. If no error is specified, general diagnosis data including results of a trace route between a server and the computing device can be collected. If an error is specified, error logs associated with the error can also be collected. The data can be filtered based on a diagnosis request and transferred to the relevant technical support system.

Abstract: Methods, apparatuses, and computer program products for administering checkpoints for incident analysis are provided. Embodiments include a checkpoint manager receiving from each incident analyzer of a plurality of incident analyzers, a checkpoint indicating an incident having the oldest identification number still in analysis by the incident analyzer at the time associated with the checkpoint. The checkpoint manager examines each received checkpoint to identify, as a restore incident, an incident having the oldest identification number indicated in any of the received checkpoints. A monitor sends to the incident analyzers, a stream of incidents beginning with the identified restore incident and continuing with any incidents having a newer identification number than the identified restore incident.

Abstract: A system is provided for integrating failure data for different failure analysis layouts. The system includes a data validator and layout engine. The data validator is configured to validate failure analysis data for a complex system including a plurality of systems. The failure analysis data includes failure data identifying failed systems, and design data describing the complex system and possible failures of at least some of its systems. In this regard, the data validator is configured to perform one or more consistency checks between the failure data and design data to thereby integrate the failure data for a plurality of different failure analysis layouts. The layout engine is in turn configured to selectively generate and communicate any one or more of the plurality of different layouts of the failure analysis data, with at least some of the failure analysis data being shared between at least some of the different layouts.

Abstract: Transactional execution branch indications are placed into one or more transaction diagnostic blocks when a transaction is aborted. Each branch indication specifies whether a branch was taken, as a result of executing a branch instruction within the transaction. As the transaction executes and a branch instruction is encountered, a branch indication is set in a vector indicating whether the branch was taken. Then, if the transaction aborts, the indicators are stored in one or more transaction diagnostic blocks providing a branch history usable in diagnosing the failure.

Abstract: Techniques for problem determination and diagnosis in a shared dynamic cloud environment. A method includes monitoring each virtual machine and physical server in the shared dynamic cloud environment for at least one metric, identifying a symptom of a problem and generating an event based on said monitoring, analyzing the event to determine a deviation from normal behavior, and classifying the event as a cloud-based anomaly or an application fault based on existing knowledge.

Abstract: A method, an apparatus and an article of manufacture for problem determination and diagnosis in a shared dynamic cloud environment. The method includes monitoring each virtual machine and physical server in the shared dynamic cloud environment for at least one metric, identifying a symptom of a problem and generating an event based on said monitoring, analyzing the event to determine a deviation from normal behavior, and classifying the event as a cloud-based anomaly or an application fault based on existing knowledge.

Abstract: A method for predicting failure in an Automated Teller Machine (ATM) is provided. The method may include using a database to store information relating to the performance of a component function by an ATM component. The information may include normal performance information and fault information. The method may further include using a computational module to calculate a fault rate for the ATM component. The method may also include using a processor to compare the calculated fault rate to a threshold value associated with the component function. In the event that the fault rate exceeds the threshold value, the processor may initiate a request for service of the ATM component.

Abstract: Disclosed is a dynamic fault tree analysis system including a fault tree module associated with a mission critical system (mcs), wherein said fault tree module includes at least one item characterized by an initial probability density function (pdf), at least one threshold value associated with the mcs, a sampling module to transform the initial pdf to a heterogeneous pdf (hpdf), wherein the hpdf includes at least one continuous segment and at least one discrete segment, and wherein transition between segments is at least partially based on the at least one threshold; and a stochastic simulator to determine the probability of an mcs failure condition by analyzing the fault tree module using the heterogeneous pdf.

Abstract: A method of ticket consolidation in computing environment may in one aspect analyze problem reports, determine whether problems reported by machines are caused by the same or substantially the same run-time configuration error or are occurring on the same physical server, and are within the given sensitivity time window, consolidate the problem tickets and increase the priority of the consolidated ticket.

Abstract: Provided is a fault tracing system and method for remote maintenance. The fault tracing method includes detecting faults by receiving error events or fault diagnosis request messages, generating transactions for the detected faults, tracing the faults according to the transactions, and notifying a client terminal or user of the fault diagnosis results. Accordingly, it is possible to accurately trace a fault even in a home/building network environment complicatedly consisting of various resources.

Abstract: A system error analysis device which includes a top unit and a storage unit coupled to the top module is mentioned. The storage unit is configured to store each of the input data, each of the output data and each of the bus data transmitted by the top unit. When receiving an interrupting signal, the system error analysis device outputs the input data, the output data and the bus data stored as soon as the interrupting signal is received and the input data, the output data and the bus data stored before the receiving of the interrupting signal. Accordingly, by comparing and analyzing the data output by system error analysis device, the system employing the system error analysis device is able to obtain the reason of the generation of the interrupting signal.

Abstract: A data processing apparatus has at least one circuit block accessible for debugging by a debugger, the block having a set of debug status registers and a debug event register which is set by the circuit block to indicate occurrence of a debug event. Debug interface circuitry interfaces with the set of debug status registers for each circuit block. The circuitry includes at least a first portion which is in a first power domain that remains in a fully powered state whilst the debugger is connected to the circuitry. Status registers are provided in a second power domain which transitions between the fully powered state and at least one low power state whilst the debugger is connected to the circuitry. Content of the debug status registers is only accessible to the debugger when the second power domain is in the fully powered state.

Abstract: A method of providing synchronization and integrity checking in a high integrity processing system having at least two redundant processing lanes, with each lane having an application processor, with the application processors running the same application software in a non-lockstep configuration, and outputting transactions requiring access to an addressable space.

Abstract: A method for distributed diagnostic reasoning is provided. The method includes establishing a computing node monitoring the operation of a component of a complex system and populating at least one of a processor and the memory of the computing node with one or more standardized executable application modules (SEAMs) and a workflow service. The method further includes creating a configuration file in combination with several SEAMS to create a distributed diagnostic reasoner (DDR) associated with the component. The method also comprises installing the configuration file in the computing node for execution by the processor; and initializing the one or more SEAMS, the configuration file and the workflow service, wherein the workflow service facilitates data flow between the one or more SEAMS and the static data associated with a fault condition resident in the configuration file.

Abstract: According to one embodiment, a maintenance device includes a first interface, a memory, and a processor. The first interface is configured to acquire setting information read by a reading unit configured to read the apparatus information including apparatus identification information and error information from an information processing device. The memory is configured to store an apparatus information table including registration error information corresponding to the registration apparatus identification information. The processor is configured to analyze the apparatus information based on the apparatus information table.

Abstract: A fault analyzing circuit has: a comparing circuit to compare fault data stored in a storage area with a fault being caused with data of an alternation register; and a position identifying circuit to identify an error bit position from data of a comparative result of the comparing circuit.

Abstract: A method for detecting failures and requesting failure diagnoses, includes receiving monitoring information from an resource object. Further, the method includes, if an error message is included in the received monitoring information, determining that a failure has been detected in the resource object to send a failure diagnosis request message to a failure diagnosis framework. Furthermore, the method includes receiving failure diagnosis result information from the failure diagnosis framework.

Abstract: A method detects soft failures as follows. A set of artifacts being generated by at least one process in a system is monitored. A number of artifacts being generated by the process is determined to be below a given threshold in response to the monitoring. The process is monitored in response to the determination. A current state of the process is determined in response to the analyzing. A notification is generated in response to the current state of the process including a set of abnormal behaviors.

Abstract: Methods and arrangements for detecting and diagnosing system outages. A system outage is ascertained and aberrant user activities are categorized, as possible contributors to the system outage, based on system impact. User activities and system impact are learned, and user activities and system impact are compared against predetermined rules. A system outage alert is generated, and a user activity responsible for the system outage is displayed.