Predicting anomalies and incidents in a computer application

摘要

A method for predicting anomalies in a computer application includes during runtime of the computer application, detecting traffic metrics and incident tickets associated with the computer application, the incident ticket indicating an incident might occur in the computer application; calculating a threshold based on absolute values of second order differences associated with the traffic metrics, wherein the threshold is such that when the absolute value of the second order difference associated with the traffic metrics exceeds the threshold, a recall rate Rrecall that the computer application is recalled is maximized; obtaining predicted metrics of the computer application in a next time period based on the traffic metrics; and in response to an absolute value of a second order difference associated with the predicted metrics exceeding the threshold, predicting potential anomalies of the computer application in the next time period.

主权项

1. An apparatus for predicting anomalies in a computer application, the apparatus comprising a processor configured to execute a plurality of software modules, the modules comprising:
a detecting module configured to, during runtime of the computer application, detect traffic metrics and incident tickets associated with the computer application, the incident ticket indicating an incident might occur in the computer application; a calculating module configured to calculate a threshold based on absolute values of second order differences associated with the traffic metrics, wherein the threshold is such that when the absolute value of the second order difference associated with the traffic metrics exceeds the threshold, a recall rate Rrecall that the computer application is recalled is maximized, the recall rate Rrecall describing a ratio of the number of incident tickets causing the computer application to be recalled to the total number of the incident tickets; an obtaining module configured to obtain predicted metrics of the computer application in a next time period based on the traffic metrics; and a predicting module configured to, in response to an absolute value of a second order difference associated with the predicted metrics exceeding the threshold, predict potential anomalies of the computer application in the next time period.