Systems and methods for proactive service health detection

Patent metadata

Field	Value
Publication number	US-12135604-B2
Application number	US-202217662362-A
Country	US
Kind code	B2
Filing date	May 6, 2022
Priority date	May 6, 2022
Publication date	Nov 5, 2024
Grant date	Nov 5, 2024

Abstract

Disclosed are systems and methods for proactive service health detection. An example method may include receiving, by a first computing system, first data associated with a first application at a first time and second data associated with the first application at a second time. The example method may also include receiving an indication of an anomaly associated with the first application at the second time. The example method may also include comparing, by a first natural language processing model on the first computing system, the second data and the first data. The example method may also include determining, by the first natural language processing model and based on the comparison, a first difference indicative that a portion of the first data is different than a same portion of the second data. The example method may also include receiving third data associated with the first application. The example method may also include determining, by the first natural language processing model, that the first difference exists in the third data. The example method may also include automatically initiating a first action to prevent or mitigate a second anomaly associated with the first application.

First claim

What is claimed is:

1. A system comprising:
a processor; and
a memory storing computer-executable instructions that, when executed by the processor, cause the processor to:
receive, by one or more computing systems, first data associated with a first application at a first time and second data associated with the first application at a second time;
determine a first anomaly associated with the first application at the second time;
compare, by a first natural language processing model on the one or more computing systems, the second data and the first data;
determine, by the first natural language processing model and based on the comparison, a first difference indicative that a portion of the first data is different than a same portion of the second data;
receive third data associated with the first application;
receive fourth data associated with a second application;
determine, by the first natural language processing model and in parallel, that the first difference exists in the third data and that a second difference exists in the fourth data; and
automatically initiate a first action to prevent or mitigate a second anomaly associated with the first application and a second action to prevent or mitigate a third anomaly associated with the second application.

2. The system of claim 1 , wherein determining that the first difference exists in the third data is performed by a second natural language processing model that is based on the first natural language processing model.

3. The system of claim 2 , wherein the computer-executable instructions further cause the processor to:
train the first natural language processing model based on determining the first difference; and
update the second natural language processing model based on the training.

4. The system of claim 1 , wherein the computer-executable instructions further cause the processor to:
receive fifth data associated with the first application at the first time, wherein the fifth data is a different type of data than the first data; and
determine an association between the first data and the fifth data based on the first data and the fifth data being associated with the first time.

5. The system of claim 1 , wherein the first data, second data, and third data, and fourth data include at least one of: an access log and a developer log.

6. The system of claim 1 , wherein the first action includes automatically initiating a change to a computing system associated with the first application.

7. A method comprising;
receiving, by one or more computing systems, first data associated with a first application at a first time and second data associated with the first application at a second time;
determining a first anomaly associated with the first application at the second time;
comparing, by a first natural language processing model on the one or more computing systems, the second data and the first data;
determining, by the first natural language processing model and based on the comparison, a first difference indicative that a portion of the first data is different than a same portion of the second data;
receiving third data associated with the first application;
receiving fourth data associated with a second application;
determining, by the first natural language processing model and in parallel, that the first difference exists in the third data and that a second difference exists in the fourth data; and
automatically initiating a first action to prevent or mitigate a second anomaly associated with the first application and a second action to prevent or mitigate a third anomaly associated with the second application.

8. The method of claim 7 , wherein determining that the first difference exists in the third data is performed by a second natural language processing model that is based on the first natural language processing model.

9. The method of claim 8 , further comprising:
training the first natural language processing model based on determining the first difference; and
updating the second natural language processing model based on the training.

10. The method of claim 7 , further comprising:
receiving fifth data associated with the first application at the first time, wherein the fifth data is a different type of data than the first data; and
determining an association between the first data and the fifth data based on the first data and the fifth data being associated with the first time.

11. The method of claim 7 , wherein the first data, second data, third data, and fourth data include at least one of: an access log and a developer log.

12. The method of claim 7 , wherein the first action includes automatically initiating a change to a computing system associated with the first application.

13. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a processor, cause the processor to:
receive, by one or more computing systems, first data associated with a first application at a first time and second data associated with the first application at a second time;
determine a first anomaly associated with the first application at the second time;
compare, by a first natural language processing model on the one or more computing systems, the second data and the first data;
determine, by the first natural language processing model and based on the comparison, a first difference indicative that a portion of the first data is different than a same portion of the second data;
receive third data associated with the first application;
receive fourth data associated with a second application;
determine, by the first natural language processing model and in parallel, that the first difference exists in the third data and that a second difference exists in the fourth data; and
automatically initiate a first action to prevent or mitigate a second anomaly associated with the first application and a second action to prevent or mitigate a third anomaly associated with the second application.

14. The non-transitory computer-readable medium of claim 13 , wherein determining that the first difference exists in the third data is performed by a second natural language processing model that is based on the first natural language processing model.

15. The non-transitory computer-readable medium of claim 14 , wherein the computer-executable instructions further cause the processor to:
train the first natural language processing model based on determining the first difference; and
update the second natural language processing model based on the training.

16. The non-transitory computer-readable medium of claim 13 , wherein the computer-executable instructions further cause the processor to:
receive fifth data associated with the first application at the first time, wherein the fifth data is a different type of data than the first data; and
determine an association between the first data and the fifth data based on the first data and the fifth data being associated with the first time.

17. The non-transitory computer-readable medium of claim 13 , wherein the first data, second data, third data, and fourth data include at least one of: an access log and a developer log.

Assignees

• Cox Communications Inc

Inventors

• Patel Jignesh
• Lev Ron
• Chau Kenny

Classifications

• G06F11/0769

  Readable error formats, e.g. cross-platform generic formats, human understandable formats · CPC title

• G06F11/0706

  the processing taking place on a specific hardware platform or in a specific software environment · CPC title

• G06F11/366

  using diagnostics (G06F11/0703 takes precedence) · CPC title

• G06N5/022

  Knowledge engineering; Knowledge acquisition · CPC title

• G06F11/0793

  Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40) · CPC title