Visual modification and training of an anomaly detection image

Patent metadata

Field	Value
Publication number	US-10222959-B2
Application number	US-201615087338-A
Country	US
Kind code	B2
Filing date	Mar 31, 2016
Priority date	Mar 31, 2016
Publication date	Mar 5, 2019
Grant date	Mar 5, 2019

Abstract

A method includes formatting for display, on a visual screen, an image comprising: (1) a coordinate system, (2) a plurality of distinguishable areas within the coordinate system, each distinguishable area graphically representing a respective formula, and (3) a plurality of data points. The method also includes receiving user input comprising a modification to a particular distinguishable area. In response to receiving the user input, the method includes modifying one or more respective formulas based on the modification to the distinguishable area. For each data point, the method further includes associating the data point with one of the distinguishable areas by determining which of the modified formulas the data point falls within. The method further includes formatting for display a graphical representation of each modified formula. The method additionally includes storing the graphical representation of each modified formula for use as a modified image in future operations.

First claim

The invention claimed is:

1. A method comprising:
formatting for display, on a visual screen, an image comprising: (1) a coordinate system, (2) a plurality of distinguishable areas within the coordinate system, each distinguishable area graphically representing a respective formula, and (3) a plurality of data points describing historical performance characteristics of a computing system within the coordinate system, wherein each distinguishable area is colored in the display in a respective color corresponding to an associated tolerance for observing that performance characteristic in the historical performance characteristics;
receiving a user input comprising a modification to a particular one of the plurality of distinguishable areas, wherein the modification comprises changing an area of the coordinate system covered by the particular one of the distinguishable areas, and changing the respective color to correspond to a different associated tolerance for observing that performance characteristic in data points describing future performance characteristics of the computing system;
in response to receiving the user input, modifying one or more respective formulas based on the modification to the distinguishable area;
for each data point in the plurality of data points, associating the data point with one of the plurality of distinguishable areas by determining which of the modified formulas the data point falls within;
formatting for display a graphical representation of each modified formula;
storing the graphical representation of each modified formula for use as a modified image in future operations;
receiving a new data point describing future performance characteristics of the computing system that falls within the area of the coordinate system covered by the particular one of the distinguishable areas and that exceeds the associated tolerance for observing that performance characteristic; and
generating an alert in response to receiving the new data point.

2. The method of claim 1 , wherein each of the plurality of distinguishable areas corresponds to a respective tolerance category, each tolerance category representing an expected frequency of observing a data point.

3. The method of claim 2 , wherein the respective tolerance categories include an anomalous category, an acceptable category, and a normal category.

4. The method of claim 1 , wherein the coordinate system is three-dimensional.

5. The method of claim 1 , wherein associating the data point with one of the plurality of distinguishable areas comprises removing the data point from the image.

6. The method of claim 5 , wherein the plurality of data points within the coordinate system comprise a first variable and a second variable, the first variable being a time variable and the second variable being a performance variable.

7. The method of claim 1 , wherein the image is the modified image stored during a previous operation.

8. The method of claim 1 , further comprising:
receiving a second user input comprising a second modification to a particular one of the plurality of distinguishable areas; and
in response to receiving the second user input, modifying one or more respective formulas based on the second modification to the distinguishable area.

9. The method of claim 1 , wherein receiving the user input comprising a modification to a particular one of the plurality of distinguishable areas further comprises:
receiving a selected area of the coordinate system, and
receiving an instruction to associate the selected area with a particular one of the plurality of distinguishable areas.

10. The method of claim 9 , further comprising detecting a range of axis values corresponding to the selected area of the coordinate system.

11. The method of claim 1 , wherein each respective formula comprises a range of axis values corresponding to the area of the coordinate system associated with a corresponding respective distinguishable area.

12. The method of claim 11 , wherein at least one range of axis values is disjointed.

13. The method of claim 11 , wherein modifying one or more respective formulas based on the modification to the particular one of the plurality of distinguishable areas comprises removing a range of the coordinate system from a particular formula.

14. The method of claim 11 , wherein modifying one or more respective formulas based on the modification to the particular one of the plurality of distinguishable areas comprises adding a range of the coordinate system to a particular formula.

15. The method of claim 1 , wherein formatting for display a graphical representation of each modified formula comprises formatting for display, on a visual screen, an image comprising: (1) the coordinate system, and (2) the plurality of distinguishable areas within the coordinate system graphically representing the formulas including the modified one or more formulas.

16. A non-transitory computer readable storage medium storing instructions that are executable to cause a system to perform operations comprising:
formatting for display, on a visual screen, an image comprising: (1) a coordinate system having three dimensions, (2) a plurality of distinguishable areas within the coordinate system, each distinguishable area having three dimensions and graphically representing a respective formula, and (3) a plurality of data points describing historical performance characteristics of a computing system within the coordinate system corresponding to three variables, wherein each distinguishable area is colored in the display in a respective color corresponding to an associated tolerance for observing that performance characteristic in the historical performance characteristics;
receiving a user input comprising a modification to a particular one of the plurality of distinguishable areas, wherein the user input further comprises:
receiving a selected range of the coordinate system,
receiving an instruction to associate the selected range with a particular one of the plurality of distinguishable areas, and
receiving a change to the respective color for the particular one of the distinguishable areas to correspond to a different associated tolerance for observing that performance characteristic in data points describing future performance characteristics of the computing system;

in response to receiving the user input, modifying a plurality of formulas based on the modification to the particular one of the plurality of distinguishable areas;
for each data point in the plurality of data points, associating the data point with one of the plurality of distinguishable areas by determining which of the modified formulas the data point falls within;
formatting for display a graphical representation of each modified formula;
receiving a new data point describing future performance characteristics of the computing system that falls within the area of the coordinate system covered by the particular one of the distinguishable areas and that exceeds the associated tolerance for observing that performance characteristic; and
generating an alert in response to receiving the new data point.

17. The computer readable storage medium of claim 16 , wherein formatting for display a graphical representation of each modified formula comprises formatting for display, on a visual screen, an image comprising: (1) the coordinate system, and (2) the plurality of distinguishable areas within the coordinate system graphically representing the modified one or more formulas.

18. The computer readable storage medium of

Assignees

• Mankovskii Serguei
• Davis Ian
• Godfrey Michael
• Ca Inc

Inventors

• Mankovskii Serguei
• Davis Ian
• Godfrey Michael

Classifications

• G06T11/26

  Drawing of charts or graphs · CPC title

• G06F3/04845 Primary

  for image manipulation, e.g. dragging, rotation, expansion or change of colour · CPC title

• G06F3/04842

  Selection of displayed objects or displayed text elements (G06F3/0482 takes precedence) · CPC title

• G06T11/206

  Physics · mapped topic

• G06F11/3433

  for load management (allocation of a server based on load conditions G06F9/505; load rebalancing G06F9/5083; redistributing the load in a network by a load balancer H04L67/1029) · CPC title