Anomaly Analysis For Software Distribution

摘要

A population of devices provides telemetry data and receives software changes or updates. Event buckets for respective events are found. Event buckets have counts of event instances, where each event instance is an occurrence of a corresponding event reported as telemetry by a device. Records of the software changes are provided, each change record representing a software change on a corresponding device. The event buckets are analyzed to identify which indicate an anomaly. Based on the change records and the identified event buckets, correlations between the software changes and the identified event buckets are found.

主权项

1. A method of correlating software updates and indications of anomalies occurring on devices at least some of which have the software updates, the method comprising:
accessing update installation information indicating which devices have which updates; accessing a telemetry data source, the telemetry data source comprising indications of occurrences of same events on the devices, the indications of occurrences having been received from the devices via a data network, each indication of an occurrence indicating which event occurred and on which corresponding device and when; identifying anomalies in the telemetry data source; determining which of the anomalies are correlated with which of the updates; and for each anomaly, storing indications of any updates determined to be correlated with the anomaly.