Micro Focus Lcc

Entit Software LLC

Nurit Peres

Ron Maurer

Yair Horovitz

Fernando Vizer

Pavel Danichev

Maria Smolkov

In one example of the disclosure, an expected measurement range is identified for each of a set of metrics. Actual value measurements are obtained for each of the metrics. Each of the identified expected measurement ranges and the actual value measurements are normalized according to a common scale. A graph is caused to be displayed. The graph includes a baseline band representative of the normalized measurement ranges, and includes the normalized actual value measurements plotted relative to the baseline band.

Graphs with normalized actual value measurements and baseline bands representative of normalized measurement ranges

Event-time pairs are received for a current time slot. Each event-time pair denotes the occurrence of an event at a system by an event type as well as an occurrence time. For each different event type, a property value for the time slot is computed for each different property of a number of different properties, from the event-time pairs having the different event type. For each different property, a time-decaying histogram of identified property values of the different property is updated using the property value computed for the different property for the current time slot. An anomaly score for each identified property value within the time-decaying histogram of each different property is computed to detect occurrence of an anomaly within the system.

Anomaly detection

Growing community of inventors

Yehud, Israel

Nurit Peres