International Business Machines Corporation

Guo Ran Sun

Wei Liu

Ke Wei Wei

Yi Dai

Shuang Ys Yu

Meichi M Lin

Xiao Jing Wang

Dong Ying Jiao

Technology for computerized anomaly detection, where the machine logic (for example, software) utilizes a multi-layer anomaly detection method that may include three (3) layers: (a) a baseline model for each feature at a single point, (b) a dynamic time window for historical data, and/or (c) correlation analysis for different model features.

Machine logic for performing anomaly detection

A method includes generating a plurality of vectors representing words in a plurality of documents about an information technology (IT) system and clustering the plurality of vectors to produce a plurality of clusters. The method also includes identifying a cluster of the plurality of clusters that contains a plurality of clustered vectors, generating a feature based on a plurality of words represented by the plurality of clustered vectors, and training a machine learning model to identify an anomaly in the IT system based on the feature.

Automatic anomaly detection

Growing community of inventors

Beijing, China

Guo Ran Sun