Issue detection and signature generation

Patent metadata

Field	Value
Publication number	US-2018321997-A1
Application number	US-201715584133-A
Country	US
Kind code	A1
Filing date	May 2, 2017
Priority date	May 2, 2017
Publication date	Nov 8, 2018
Grant date	—

Abstract

A problem with a computing system is detected, a root cause is identified and a solution is also identified. Diagnostic data is obtained and an issue signature is generated that maps the issue to failed components and product functionality.

First claim

What is claimed is:

1 . A computing system, comprising:
problem signature generator logic that generates signature elements corresponding to a detected problem and that generates a signature from the signature elements, the problem signature generator logic receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer, the problem signature generator logic generating the problem signature corresponding to the detected problem based on the signature elements obtained from the aggregated problem diagnostic data; problem aggregation logic that groups problems by signature, to obtain grouped problem data, by combining the aggregated problem diagnostic data with other aggregated problem diagnostic data corresponding to other detected problems, based on the problem signature and problem signatures for the other detected problems; and grouped problem surfacing logic that surfaces a metric generated based on the grouped problems.

2 . The computing system of claim 1 wherein the problem signature generator logic comprises:
signature generation logic configured to assemble the signature elements corresponding to the detected problem into the problem signature.

3 . The computing system of claim 2 wherein the problem signature generator logic comprises:
problem identifier logic configured to generate a signature element as a problem identifier that identifies the problem.

4 . The computing system of claim 3 wherein the problem signature generator logic comprises:
applied solution identifier logic configured to generate a signature element as a solution identifier that identifies a solution applied to address the problem.

5 . The computing system of claim 4 wherein the problem signature generator logic comprises:
context identifier logic configured to generate a signature element as context information indicative of a context of the client computing system when the problem was detected.

6 . The computing system of claim 5 wherein the context identifier logic comprises:
operating system identifier logic configured to identify an operating system running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data.

7 . The computing system of claim 5 wherein the context identifier logic comprises:
running application identifier logic configured to identify any applications running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data.

8 . The computing system of claim 5 wherein the problem signature generator logic comprises:
diagnostic data parsing logic configured to generate a signature element as one or more event identifiers identifying an event or event sequence corresponding to the problem based on the aggregated problem diagnostic data.

9 . The computing system of claim 8 wherein the diagnostic data parsing logic comprises:
client/server log parsing logic that parses client and server log data received in the aggregated problem diagnostic data.

10 . The computing system of claim 2 wherein the problem aggregation logic comprises:
signature comparison logic that compares the problem signature to the other problem signatures to identify similar problem signatures.

11 . The computing system of claim 10 wherein the problem aggregation logic comprises:
problem grouping logic configured to group the aggregated problem diagnostic data for problems having similar signatures.

12 . A computer implemented method, comprising:
receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer; generating signature elements corresponding to the detected problem from the aggregated problem diagnostic data; generating a problem signature corresponding to the detected problem based on the signature elements obtained from the aggregated problem diagnostic data; grouping problems by signature, to obtain grouped problem data, by combining the aggregated problem diagnostic data with other aggregated problem diagnostic data corresponding to other detected problems, based on the problem signature and problem signatures for the other detected problems; and surfacing a metric generated based on the grouped problems.

13 . The computer implemented method of claim 12 wherein generating signature elements comprises:
generating a signature element as a problem identifier that identifies the problem.

14 . The computer implemented method of claim 13 wherein generating signature elements comprises:
generating a signature element as a solution identifier that identifies a solution applied to address the problem.

15 . The computer implemented method of claim 14 wherein generating signature elements comprises:
generating a signature element as context information indicative of a context of the client computing system when the problem was detected.

16 . The computer implemented method of claim 15 wherein generating a signature elements as context information comprises:
identifying an operating system running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data.

17 . The computer implemented method of claim 15 wherein generating a signature element as context information comprises:
identifying any applications running on the client computing system when the problem was detected, based on the aggregated problem diagnostic data.

18 . The computer implemented method of claim 15 wherein generating signature elements comprises:
generating a signature element as one or more event identifiers identifying an event or event sequence corresponding to the problem based on the aggregated problem diagnostic data.

19 . The computer implemented method of claim 13 wherein grouping problems by signature comprises:
comparing the problem signature to the other problem signatures to identify similar problem signatures; and
grouping the aggregated problem diagnostic data for problems having similar signatures.

20 . A computing system, comprising:
problem signature generator logic that generates signature elements corresponding to a detected problem, the problem signature generator logic receiving aggregated problem diagnostic data, corresponding to a detected problem, that includes a diagnostic data package received from a client computing system based on the detected problem and problem-specific diagnostic information generated at a remote server environment, remote from the client computing system and obtained by running a problem-specific diagnostic analyzer, the problem signature generator logic generating the signature elements based on the received aggregated problem diagnostic data; signature generation logic configured to assemble the signature elements corresponding to the detected problem into a problem signature corresponding to the detected problem; problem aggregation logic that groups p

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Palla Nagaraju
• Bhuthpur Raghavendra
• Alagiriswamy Narendra Babu
• Nehrhood Nicholas John
• Patil Nagaraj

Classifications

• G06F11/0709 Primary

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title

• G06F11/0751

  Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06) · CPC title

• G06F11/0775

  Content or structure details of the error report, e.g. specific table structure, specific error fields · CPC title

• G06F11/079 Primary

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• G06F11/30

  Monitoring · CPC title