Patent ID: 7869967
Filing Date: 2011-01-11
Classification: G05B,G06F,G06K

Abstract:
1. A device for determining dynamic thresholds comprising: an initializer device configured to: a cumulative sum analyzer configured to compare incoming data for each metric against the threshold by performing a cumulative sum analysis on a set of incoming metric data in real time by calculating a cumulative sum value for each metric and comparing the cumulative sum value to the threshold to detect anomalous events; and an alerting device configured to initiate an alert state when an anomalous event is detected that effects at least one response to address the conditions triggering the anomalous event in the affected component of the IT infrastructure; wherein each cumulative sum value is calculated by adding to the previous cumulative sum value the difference between the value of a metric and a value for normal behavior for a current timeslot within the monitoring period; and wherein if the calculation of the cumulative sum value is negative, it is set to zero.