Behavioral rules discovery for intelligent computing environment administration

摘要

A management system for determining causal relationships among system entities may include a causal relationship detector configured to receive events from a computing environment having a plurality of entities, and detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the events, and a rules converter configured to convert one or more of the causal relationships into at least one behavioral rule. The at least one behavioral rule may indicate a causal relationship between at least two entities of the plurality of entities.

主权项

1. A management system for determining causal relationships among system entities, the management system comprising:
at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, a causal relationship detector configured to receive events from a computing environment having a plurality of entities, and configured to detect causal relationships among the plurality of entities, during runtime of the computing environment, based on the events, the causal relationship detector being configured to create vertices and arcs connecting temporally adjacent vertices, and annotate each arc with a coefficient value representing a level of connectivity between the temporally adjacent vertices based on the events; and a rules converter configured to convert one or more of the causal relationships into at least one behavioral rule, the rules converter configured to map the temporally adjacent vertices to corresponding entities of the plurality of entities that generated the temporally adjacent vertices when the coefficient value is above a threshold value, the at least one behavioral rule indicating a causal relationship between the corresponding entities.