Patent ID: 8275563
Filing Date: 2012-09-25
Classification: G05B,G06F,G06K

Abstract:
1. A method for determining the end point of an anomalous event in an information technology (IT) infrastructure comprising: on a computer, measuring and collecting data for a metric in the IT infrastructure; obtaining a cusum value for the metric over a series of time periods; obtaining a linear regression of cusum values for a set of v time periods, wherein if the slope of linear regression is positive, increasing v by w (v=v+w), where w is an integer, and obtaining a new linear regression for the new set of v time periods and repeating until the regression slope is negative; designating a time period in the set of v historical cusum values in which the regression slope is negative as the end point of the anomalous event; and when the anomalous event is detected using the cusum values, initiating an alert state that effects at least one response to address at least one condition triggering the anomalous event in an affected component of the IT infrastructure, the designated end point of the anomalous event being used for reset to avoid subsequent false alert states, wherein regressions over v cusum values begins at the first cusum statistic to exceed the threshold and progresses for each cusum statistic thereafter until a negative or flat slope is calculated.