SYSTEM AND METHOD FOR EXTRACTING AND FORECASTING COMPUTING RESOURCE DATA SUCH AS CPU CONSUMPTION USING AUTOREGRESSIVE METHODOLOGY

Abstract: A system and method for extracting and forecasting computing resource data such as workload consumption of mainframe computing resources using an autoregressive model. The system and method foresast mainframe central processing unit (CPU) consumption with ninety-five percent accuracy using historical perfomance data. The system and method also provide an upper ninety-five percent confidence level and a lower ninety-five percent confidence level. The system and method retrieve performance records from a computer platform in one second intervals, statistically collapses the one second performance data into fifteen minute performance data, statistically collapses the fifteen minute performance data into a one week performance data, and generates a time series equivalent to collecting performance data at one week intervals. The system and method ensure that the resulting time series is statistically stationary, and applies an autoregressive construct to the time series to generate forecast of future CPU utilization, as well as to generate reports and graphs comparing actual vs. forecast CPU utilization. Because the system and method rely on electronically generated empirical historical computer performance data as an input, they provide a turnkey solution to CPU consumption forecasting that can be implemented easily by any system network manager.

Description: SYSTEM AND METHOD FOR EXTRACTING AND FORECASTING COMPUTING RESOURCE DATA SUCH AS CPU CONSUMPTION USING AUTOREGRESSIVE METHODOLOGY The present invention relates to a computer platform, and in particular, to a system and method to forecast the performance of computing resources. The computing resources of a large business represent a significant financial investment. When the business grows, resource managers must ensure that new resources are added as processing requirements increase. The fact that the growth and evolution of a computing platform is often rapid and irregular complicates management efforts. This is especially true for computing platforms common to banking institutions and telecommunications companies, for example, whose computing platforms typically include hundreds of geographically distributed computers. To effectively manage the vast resources of a computing platform and to justify any requests for acquisition of new resources, managers need accurate forecasts of computing platform resource performance. However, conventional forecasting tools may not be adequate for use on computing platforms. For example, conventional sales performance forecasting tools, which use linear regression and multivariable regression to analyze data, commonly factor in such causal variables as the effect of holiday demand, advertising campaigns, price changes, etc. Similarly, pollution forecasting tools typically consider the causal effect of variations in traffic patterns. As such, using these tools to forecast computing platform resources may be problematical because causal parameters generally are difficult to establish and are unreliable. Other conventional forecasting tools may be limited by the amount of data they can process. For example, some forecasting tools may not adequately purge older or non-essential data. Other forecasting tools may not appropriately incorporate new data as it becomes available. Still other forecasting tools may not have the computing power to perform calculations on large amounts of data. The limitations of established forecasting tools are particularly troublesome when forecasting resources in computing platforms that are expanding or are already re-engineered. These computing platforms need a forecasting system and method that deal appropriately with new data as well as unneeded data. Moreover, these computing platforms need a forecasting system and method that augment causal -based forecasting tools to provide accurate and reliable forecasts. Presented herein is a system and method to forecast computing platform resource performance that overcomes the limitations associated with conventional forecasting tools. An embodiment applies an autoregressive model to electronically generated empirical data to produce accurate and reliable computing platform resource performance forecasts. An embodiment of the present invention also statistically collapses large amounts of data, eliminates unneeded data, and recursively processes new data. The forecasts are compared to actual performance data, which may be graphically displayed or printed. A specific type of data is not important for the present invention, and those skilled in the art will understand that a wide variety of data may be used in the present invention. For example, the present invention contemplates any data that may be collected and verified over time. These data include, for example, Internet metering data, marketing data on the success or failure of product offerings, telephone usage patterns, cash flow analyses, financial data, customer survey data on product reliability, customer survey data on product preference, etc. The system and method operate within a computing platform. In one embodiment, the computing platform may be a multiple virtual storage (MVS) computing platform. In another embodiment, the computing platform may be a UNIX computing platform. In other embodiments, the computing platforms may be disk operating system (DOS) computing platforms. Those skilled in the art will appreciate that a variety of computing platforms may be used to implement the present invention. The computing platform includes at least one resource whose performance is forecast. In one embodiment, the computing platform resource may be a central processing unit (CPU) . In another embodiment, the computing platform resource may be a memory storage unit. In other embodiments, the computing platform resource may be a printer, a disk, or a disk drive unit. A specific computing platform resource is not important for the present invention, and those skilled in the art will understand that a number of resources may be used in the present invention. Each resource includes at least one aspect. The aspect may be a performance metric. The performance metric may be resource utilization. "Utilization" is defined generally herein as the percentage that a particular computing platform resource is kept busy. Utilization is often termed "consumption" . In another embodiment, the performance metric may be resource efficiency or resource redundancy. "Efficiency" is defined generally herein as the measure of the useful portion of the total work performed by the resource. "Redundancy" is defined generally herein as the measure of the increase in the workload of a particular resource. Of course, those skilled in the art will appreciate that a particular performance metric is not required by the present invention. Instead, a number of performance metrics may be used. In one embodiment, the computing platform includes a resource manager. The resource manager collects performance data from its associated resource. The performance data is associated with a performance metric. In one embodiment, the resource manager collects performance data representing a CPU utilization performance metric. The resource manager collects the performance data in regular intervals. In one embodiment, regular intervals include one-second intervals, for example. That is, in this embodiment, the resource manager collects performance data from its associated computer (s) every second. The interval size in which performance data is collected may be determined by the particular use for the performance metric, the particular resource, the particular computing platform, etc. The computing platform also includes a plurality of statistical collapsers that statistically collapse the performance data into a series. In one embodiment, the series may be a time series representing a performance metric. A "time series" is defined generally herein as any ordered sequence of observations . Each observation represents a given point in time and is thus termed a "time point" . Accordingly, a time series includes at least one time point. A first statistical collapser generates a first time series representing a performance metric as though its associated performance data had been collected at a first interval. The first time series includes a first set of time points. In one embodiment, the first statistical collapser generates a time series representing a performance metric as though its associated performance data had been collected in fifteen minute intervals. Accordingly, the time series includes four time points for each hour. In another embodiment, the first statistical collapser generates a time series representing a performance metric as though its associated performance data had been collected hourly. Accordingly, the time series includes one time point for each hour. It will be understood by persons skilled in the relevant art that the present invention encompasses statistical collapsers that generate time series representing performance metrics as though their associated performance data had been collected at any of a variety of suitable intervals. The interval size and corresponding number of time points generated by the first statistical collapser may be determined by the particular use for the performance metric, the particular resource, the particular computing platform, etc. The computing platform also includes a database that stores data. In one embodiment, the database stores the time series representing the performance metric as though its associated performance data had been collected at fifteen-minute intervals. The computing platform also includes a data extractor to extract data from the database. According to one embodiment, the data extractor extracts from the database the time series representing the performance metric as though its associated performance data had been collected at fifteen minute intervals. The computing platform also includes a second statistical collapser. The second statistical collapser statistically collapses the first time series, producing a second time series. The second time series includes a second set of time points. In one embodiment, the second statistical collapser statically collapses the fifteen minute time series into a one-week series. That is, the second statistical collapser generates a time series representing a performance metric an though its associated performance data had been collected weekly. Accordingly, the time series includes approximately four time points for each month. In another embodiment, the second statistical collapser generates a time series representing a performance metric as though its associated performance data had been collected daily. The corresponding time series includes approximately thirty time points for each month. I will be understood by persons skilled in the relevant art that the second statistical collapser may generate time series representing a performance metric as though its performance data had been collected at any of a variety of suitable intervals. As described above with reference to the first statistical collapser, the interval size and corresponding number of time points generated by the second statistical collapser may be determined by the particular use for the performance metric, the particular resource, the particular computing platform, etc. The computing platform also includes a time series analyzer to determine whether the second time series is statistically stationary. The time series analyzer uses a plurality of X 2 (chi- square) tests to make this determination. The time series analyzer also evaluates autocorrelation statistics and autocovariance statistics. If the time series analyzer determines that the time series is statistically nonstationary, which is likely the case, then the time series analyzer converts the statistically nonstationary time series to a statistically stationary time series by differencing each time point in the time series. The statistically stationary time series now represents the differenced values of performance data. The computing platform also includes a time point converter. If the time series is already statistically stationary or after the time series analyzer converts the time series to statistical stationarity, the time point converter applies a statistical data set to the time series. Recall that the time series represents the performance metric as though its associated performance data had been collected from the computing platform at regular intervals. As such, the time series includes information indicating the time that the performance data was collected. In one embodiment, this information incudes a date/time stamp. That is, each data point in the time series includes a date/time stamp. The statistical data set converts each date/time stamp in the time series into a value representing a decimal number equivalent to the date/time stamp. One feature of the present invention is an autoregressive modeling tool, which is applied to the converted time series to forecast a particular aspect of the computing platform. The autoregressive modeling tool is chosen by calculating autocorrelation, inverse autocorrelation, and partial autocorrelation functions, and by comparing these functions to theoretical correlation functions of several autoregressive constructs. In particular, one embodiment applies a first order mixed autoregressive construct, such as an autoregressive moving average (ARMA) construct, to the differenced time series. Another embodiment applies an autoregressive integrated moving average (ARIMA) construct to the differenced time series. In the embodiment where the performance metric is resource utilization and the resource is a CPU, the resulting autoregressive modeling tool reliably forecasts CPU consumption with a ninety- five percent accuracy, provides an upper ninety- five percent confidence level, and provides a lower ninety- five percent confidence level. Conventional systems and methods that rely on linear regression or multivariable regression techniques may carry a lower confidence level. Another feature of the present invention is that it uses empirical data as inputs to the autoregressive modeling tool. Using empirical data rather than causal variables provides more accurate forecasts. In the embodiment where the performance metric is resource utilization and the resource is a central processing unit, the empirical data is actual historical performance data, including logical CPU utilization information as well as physical CPU utilization information. Moreover, the system and method generate recursive forecasts whereby actual future performance data is fed back into the autoregressive modeling tool to calibrate the autoregressive modeling tool. The computing platform includes a results processor, which generates graphical representations of a performance metric. The results processor also generates information for use in written reports that document the results of the forecasting process. The graphical and textual representations demonstrate the greater accuracy and reliability the present invention provides over conventional forecasting systems and methods . In one embodiment, the results processor may be a graphical display unit, such as a computer display screen. In another embodiment, the results processor may be a textual display unit, such as a printer. In the embodiment where the performance metric is resource utilization and the resource is a central processing unit, the results processor produces reports and graphical representations of comparisons of actual CPU utilization with CPU utilization forecasts. Further features and advantages of the present invention as well as the structure and operation of various embodiments are described in detail below. The present invention is best understood by reference to the figures, wherein references with like reference numbers indicate identical or functionally similar elements. In addition, the left-most digits refer to the figure in which the reference first appears in the accompanying figures in which: Fig. 1 is a high-level block diagram of a computer platform suitable for use in an embodiment of the present invention; Fig. 2 is a more detailed depiction of the block diagram of the computer platform of Fig. 1; Fig. 3 is a more detailed depiction of the block diagram of the computer platform of Fig. 2; Fig. 4 shows a flowchart of a forecasting process suitable for use in an embodiment of the present invention; and Fig. 5 graphically depicts the comparisons of actual CPU utilization with CPU utilization forecasts which may be produced by one embodiment of the present invention. A computer platform, and in particular, a system and method for forecasting computer platform resource performance is described herein. In the following description, numerous specific details, such as specific statistical symbols and relationships, specific methods of analyzing and processing computer performance data, etc., are set forth in order to provide a full understanding of the present invention. One skilled in the relevant art, however, will readily recognize that the present invention can be practiced without one or more of the specific details, or with other methods, etc. In other instances, well-known structures or operations are not shown in detail in order to avoid obscuring the present invention. For illustrative purposes, embodiments of the present invention are sometimes described with respect to a system and method for forecasting computer platform resource performance. It should be understood that the present invention is not limited to these embodiments. Instead, the present invention contemplates any data that may be collected and verified over time. These data may include, for example, Internet metering data, marketing data on the success or failure of product offerings, telephone usage patterns, cash flow analyses, financial data, customer survey data on product reliability, customer survey data on product preference, etc. I. Example Environment; Fig. 1 is a high-level block diagram of a computing platform 100 suitable for implementing an embodiment of the present invention. In this embodiment, the computer platform 100 is a multiple virtual storage (MVS) platform available from International Business Machines (IBM) , or equivalent platform available from Amdahl and Hitachi Data Systems. In another embodiment, the computing platform 100 may be a UNIX computing platform. In other embodiments, the computing platform 100 may be a disk operating system (DOS) or a personal computer disk operating system (PC-DOS) computing platform. Those skilled in the art will appreciate that a variety of computing platforms may be used to implement the present invention. The computing platform 100 includes a computing network 102. Typically, the computing network 102 may be a manufacturing facility, a telecommunications network, a multinational corporation, a financial institution, or a university, for example, that operates in a client- server environment. In that instance, the computer network 102 may connect "client" systems with "server" systems so that the server systems may perform a computation, retrieve a file, or search a database for a particular entry in response to a request by the client system. It is not uncommon for the client system to subsequently translate the response from the server system into a format that a human can understand. To illustrate, suppose that the computing network 102 supports a bank. The bank has customer financial records, including personal bank account information stored in a large database. The personal bank account database acts as a server. The bank also provides access to its personal account database by certain client systems. For example, one client system may include a large number of point-of -sale cash registers or gas pump bank card readers. As a customer with a bank account at the bank attempts to purchase merchandise or gas using her bank card, the point-of - sale cash register or gas pump bank card reader accesses the customer's bank account information stored in the database. The point-of -sale cash register or gas pump bank card reader acting as a client system requests a determination from the bank personal account database of whether the customer has funds to cover the purchase price. The database responds accordingly, and the purchase is either authorized or refused. A particular type of client- server environment is not essential to the present invention. It will be apparent to those skilled in the art that the exemplary embodiment may be implemented in other client -server environments, such as an airline flight reservation system, a mail-order facility, etc. In one embodiment, the computing network 102 includes a plurality of computers 106, as represented by computers 106a-106d. For ease of explanation, however, the various embodiments generally are described with respect to only one computer 106. Moreover, although an embodiment is sometimes described in the context of a large complex of distributed computers, the present invention is not limited to this embodiment. For example, the computers 106 may be arranged in a local area network (LAN) configuration in a building or in a group of buildings within a few miles of each other. Alternatively, the computers 106 may be located in a wide area network (WAN) configuration, wherein the computers 106 are linked together but geographically separated by great distances. The computers 106 may also be stand-alone devices not necessarily in communication with each other. The computer 106 in one embodiment is a mainframe computer available from IBM or equivalent mainframe computer available from Amdahl and Hitachi Data Systems. Alternatively, the computer 106 may be a high-performance workstation. Alternatively still, the computer 106 may be a personal computer. The computing platform 100 includes at least one resource. In one embodiment, the computing platform resource may be a central processing unit (CPU) . In another embodiment, the computing platform resource may be a memory storage unit. In other embodiments, the computing platform resource may be a printer, a disk, or a disk drive unit. While a specific computing platform resource is not important for the present invention, those skilled in the art will understand that any number of resources can be used in the present invention. Each resource includes at least one aspect. The aspect may be a performance metric. In one embodiment the performance metric may be resource utilization. Utilization is the measure of the percentage that a particular computing platform resource is kept busy, and is sometimes termed consumption. In another embodiment, the performance metric may be resource efficiency, which is defined as the measure of the useful portion of the total work performed by resource. In another embodiment, the performance metric may be resource redundancy, which is defined as the measure of the increase in the workload of a particular resource. Of course, those skilled in the art will appreciate that a particular performance metric is not required by the present invention. Instead, the present invention supports any of a number of performance metrics. Fig. 2 is a more detailed block diagram of the computing platform 100 according to one embodiment. As illustrated, each computer 106 includes a resource manager 202. Each resource manager 202 collects performance data from its associated resource. The performance data is associated with a performance metric. According to one embodiment, the resource manager 202 is a resource management facility (RMF) available with the multiple virtual storage (MVS) operating system that is running on the IBM mainframe computer as noted above or an equivalent mainframe computer available from Amdahl and Hitachi Data Systems. According to this embodiment, the resource manager 202 extracts historical performance data from a processor resource/systems manager (PR/SM) (not shown) of the computer 106. This historical computer performance data represents the CPU utilization and is equivalent to performance metering data obtained by real-time monitors. Thus, the CPU utilization information collected by the resource manager 202 are CPU utilization records that contain CPU activity measurements . The resource manager 202 collects the performance data from the computer 106 at regular intervals. According to an exemplary embodiment, the regular intervals are one- second intervals. That is, according to the exemplary embodiment, the resource manager collects CPU workload performance data every second from computer 106, In this way, the resource manager 202 provides the percent busy for each computer 106 each second in time. The interval size in which performance data is collected may be determined by the particular use of the performance metric, the particular resource, the particular computing platform, etc. Because the computers 106 typically are maintained by large entities, the amount of data collected usually is quite large. Consequently, the data must be reduced to a manageable level. Statistically collapsing the one- second records generated by the resource manager 202 serves this purpose. The computing platform 100 thus also includes a plurality of statistical collapsers that statistically collapse the performance data into time series representing a performance metric. A "time series" is defined herein generally as any ordered sequence of observations. Each observation represents a given point in time and is thus termed a "time pont" . A statistical collapser averages a series of time points and generates a time series representing a performance metric as though its associated performance data had been collected at a particular interval. The resulting time series contains a set of time points commensurate with the representative collection interval . According to one embodiment, the computing platform 100 includes a statistical collapser 204 that statistically collapses the performance data collected by the resource manager 202 into a time series. The statistical collapser 204 generates a time series representing performance data as though it had been collected at fifteen-minute intervals. Accordingly, the time series would include four time points for each hour. In another embodiment, the first statistical collapser generates a time series representing a performance metric as though its associated performance data had been collected hourly. Accordingly, the time series would include one time point for each hour. Thus, the statistical collapser 204 statistically collapses the CPU utilization records generated every second by the resource manager 202 into CPU utilization records representing fifteen-minute intervals. Nine hundred original CPU utilization records ([60 seconds/minutes] x [15 minutes] =900) are averaged to produce one collapsed time point. The statistical collapser 204 calculates the mean for all metering records collected by the resource manager 202, as described in greater detail below. The statistical collapser 204 then determines the median for each mean at fifteen-minute intervals. The time series generated by the statistical collapser 204 thus consists of four data points (or time points) per hour representing the mean CPU utilization percentage. It will be understood by persons skilled in the relevant art that the present invention encompasses statistical collapsers that generate time series representing performance metrics as though its associated performance data had been collected at any of a variety of suitable intervals. The interval size and corresponding number of time points generated by the statistical collapser may be determined by the particular use of the performance metric, the particular resource, the particular computing platform, etc. A stochastic process, such as the time series representing the performance metric as though its performance data had been collected at fifteen-minute intervals, may be represented by Z(ω,t) . As used herein, a stochastic process is generally a family of time indexed random variables, Z(ω,t), where ω belongs to a sample space and t belongs to a time index set. That is, for a fixed time t, Z(ω,t) is a random variable. For a given ω, Z(ω,t), as a function of time, t, is called a sample function or realization. Thus, a time series is a realization or sample function from a certain stochastic process. Typically, however, the variable ω is suppressed, and the process is written Z(t) or Z t . The process is then called a real - valued process because it assumes only real values. The imaginary value, ω, is not treated. Moreover, for any given real-valued process {Z(ω, t) : t=0, +1 , ±2...}, the mean function of the process is given by μ t =e(Z ft ) , which may be used by the statistical collapser 204 to calculate the mean for all metering records collected by the resource manager 202. The computing platform also includes a database 206 that stores data. In one embodiment, the database 206 stores the time series representing a performance metric as though its associated performance data had been collected at fifteen-minute intervals. That is, after the resource manager 202 collects the performance data from the computers 106 and after the statistical collapser 204 generates the time series representing performance data collected at fifteen- minute intervals, the database 206 stores the time series. The database 206, in one embodiment, is capable of storing at least sixty gigabytes of performance data and can process at least one record per second. For example, the database 206 stores thousands of mainframe computer performance statistical descriptors and resource utilization data. Although the database 206 is depicted as a single database, according to the exemplary embodiment, the database 206 may be a plurality of databases. A database suitable for implementing the database 206 is a MICS database available from Computer Associates located in Santa Clara, California, or an SAS IT Service Vision database available from SAS Institute located in Cary, North Carolina. The computing platform also includes a data extractor 208 to extract data from the database 206. According to an exemplary embodiment, the data extractor 208 extracts from the database 206 the time series representing a performance metric as though its associated performance data had been collected at fifteen minute intervals. Because the statistically collapsed data stored in the database 206 representing nine hundred original CPU utilization records still may be unwieldy, it may be reduced to a more manageable level. The computing platform 100 thus includes a second statistical collapser 210. In general, the second statistical collapser 210 statistically collapses the first time series, producing a second time series. The second time series incudes a second set of time points. In one embodiment, the second statistical collapser 210 statistically collapses the fifteen minute time series into a one-week time series. That is, the second statistical collapser 210 averages the fifteen minute time series and generates a time series representing a performance metric as though its associated performance data had been collected weekly. Accordingly, the time series includes approximately four time points for each mont . In another embodiment, the second statistical collapser 210 averages the fifteen minute time series and generates a time series representing the performance metric as though its associated performance data had been collected daily. Accordingly, the time series includes approximately thirty time points for each month. It will be understood by persons skilled in the relevant art that the second statistical collapser 210 may generate time series representing performance data as though it had been collected at any of the variety of suitable intervals. It must be noted that if a time series contains too few time points, the time series may not be representative of the particular data under analysis, including, but not limited to Internet metering data, marketing data on the success or failure of product offerings, telephone usage patterns, cash flow analyses, financial data, customer survey data and product reliability, customer survey data on product preference, etc. For example, if the time series in the above example embodiment contains too few time points, the time series may not be representative of actual resource performance. That is, peak usages (or spikes) may not be detected if too few time points are taken. Therefore, sampling intervals which exclude such peaks may inaccurately represent the resource utilization. Thus, the number of time points in the time series may be determined by the particular use of the performance metric, the particular resource, the particular computing platform, etc. To illustrate, suppose a network manager that is responsible for monitoring the behavior and effectiveness of the computing platform 100 resources monitors the performance and activities for each computer 106. The system network manager tracks the computing platform 100 resources performances by gathering the appropriate performance data from each component or network element in the computing platform 100. As described, performance metrics to be monitored include, but are not limited to, CPU consumption percentage, disk drive usage percentage, Internet traffic, users logged on to the Internet, network communication packet traffic, and users logged on to a particular server computer, for example. Suppose further that the computing network 102 typically includes entities such as a configuration management team and a performance management team. The configuration management team would plan the computing platform 100' s growth and modernization. Accordingly, weekly data points would be adequate for these network planning purposes. Daily data points may be more appropriate for use by the performance management team, however. This is because the performance management team would be concerned with maintaining the computing platform 100" s error- free performance. Accordingly, the performance management team would be concerned about peak usages (or spikes) in resource consumption of the computing platform 100. Monitoring spikes in the computing platform 100 would facilitate load sharing, for example. Referring to Fig. 3, one embodiment of the present invention generates accurate CPU utilization descriptors in the following manner. The resource manager 202 for the computer 106 collects the performance data 301 and provides it in the form of one- second metering records 302 to the statistical collapser 204. The statistical collapser 204 statistically collapses the one- second records 302 into fifteen-minute data, which is stored in a file of performance data 304 of the database 206. The data extractor 208 extracts the performance data 304 from the database 206 and provides it to the statistical collapser 210. The statistical collapser 210 statistically collapses the fifteen-minute data into one-week data. As described above, the records 302 are metering records for PR/SM computers. Accordingly, the records 302 include both a percentage logical processor busy variable "LPCPCSSU" from a PR/SM LPAR configuration file from the computer 106, as well as a percentage CPU busy variable "CPU PCBSY" from the computer 106 hardware utilization CPU activity file, which variables are well-known. According to one embodiment, a set of one-week records 306 represents ([4 records/hour] x [10 hours/day] x [5 days/week] =200) two hundred records. The four records per hour variable represents four time points. The ten hours per day variable represents a prime ten hour operating shift for the computing platform 100. The five days per week variable represents a prime operating work week for the computing platform 100. In other words, the one-week interval records 306 are each a collapse of two hundred fifteen-minute interval records stored in the file 304 of the database 206. Recall that a time series analogous to the one-week interval data resulted from collapsing the fifteen-minute interval data. According to the constraints of one embodiment, this time period must be statistically stationary. A statistically stationary time series is generally regarded as a time series which as a stochastic process, as defined above, is unchanged by a uniform increment in the time parameter defining the time series. It must be noted that few time series are statistically stationary. The computing platform 100 thus includes a time series analyzer 212 to determine whether the time series generated by the statistical collapser 210 is statistically stationary. According to one embodiment, the time series analyzer 212 analyzes probability values for a plurality of X 2 (chi- square) tests to make this determination. "Chi -square tests" as used herein generally define generalizations and extensions of a test for significant differences between a binomial population and a polynomial population, wherein each observation may fall into one of several classes and which furnishes a comparison among several samples rather than just between two samples. Such chi- square tests include a test of residuals, tests of hypotheses, tests of significance, tests of homogeneity, tests of association, goodness of fit tests, etc., as is known in the relevant art. In the embodiment where the resource is computer 106 and the performance metric is CPU utilization, the time series analyzer 212 determines whether there is a statistically significant correlation between a particular CPU utilization value and the value for CPU utilization for the previous time period by reviewing correlation and covariance statistics. Tables 1-4 list chi - square values for a test for residuals for the computers 106a-106d, respectively. The column "DF" refers to the degrees of freedom of variation among a set of scores. In particular, column "DF" refers to the degrees of freedom of variation among a set of metering records for CPU utilization. To illustrate, suppose there is a set of ten scores. Statistically the degrees of freedom given by DF=n-l, when n is the number of scores. Thus, with a set of ten scores, there would be nine degrees of freedom. In effect, nine sets of scores are free to vary statistically while one set is fixed in value. Table 1 ChiSquare Values for the Autocorrelation Test of Residuals for the Computer 106a. Table 2 Chi Square Values for the Autocorrelation Test of Residuals for the Computer 106b. 22 SUBSTITUTE SHEET (RULE 26 Table 3 Chi Square Values for the Autocorrelation Test of Residuals for the Computer 106c. Table 4 Chi Square Values for the Autocorrelation Test of Residuals for the Computer 106d. As described above, few time series are statistically stationary. Accordingly, the time series analyzer 212 confirms that the time series representing CPU consumption at one-week intervals are likewise not statistically stationary. That is, the time series analyzer 212 confirms that there is a statistically significant correlation between one value of CPU utilization and the value of CPU utilization for the previous time period. Such correlation is undesirable according to the constraints of one embodiment because the time series thus contains statistical artifacts extraneous to the data represented by the time series. The correlation within the time series therefore should be broken. This is accomplished by differencing the time analyzer 212 converts the time series to a statistically stationary time series by differencing each time point in the time series. The time series analyzer 212 averages the differences among the time points and then subtracts the averages from each time point. Thus, rather than modeling the CPU utilization per se, this embodiment models the differenced values of CPU utilization from one period to the next. A differencing period must be determined that produces the most accurate forecast. The location of points selected, as well as the number of points selected from the time series when differencing determines how robust the resulting construct is. Tables 5-8 list weekly data points selected using one embodiment to represent CPU utilization for the computers 106a- 106d, respectively, in the "mean CPU busy" column. Table 5 Table 6 Table 7 Table 8 As described above, the statistically stationary time series generated by the time series analyzer 212 represents performance data that is collected from the computer platform 100 at regular intervals. As such, the time series includes information indicating the time that the performance data was collected from the computers 106. In one embodiment, each data point in the time series includes a date/time stamp. Note that Tables 5-8 include a date/time stamp in the "week" column. The date/time stamp provided takes a form that in one embodiment is not as compatible with the system and method as desired and therefore must be converted to a more usable form. According to one embodiment, the computing platform 100 includes a time point converter 214, which utilizes a data set and converts the time series date/time stamp to a number of seconds equivalent to the value represented by the date/time stamp under the data set. A data set suitable for implementing the time point converter 214 is available from SAS in Cary, North Carolina, which converts a date/stamp, to a decimal number. One feature of the system and method is an autoregressive modeling tool 216. In one embodiment, the autoregressive modeling tool 216 is applied to the statistically stationary time series representing a performance metric as though its performance data had been collected in weekly intervals to forecast the performance of the computing platform 100. The autoregressive modeling tool 216 is selected by calculating autocorrelation, inverse autocorrelation, and partial autocorrelation functions, and comparing these functions to theoretical correlation functions expected from various autoregressive constructs. For example, in a process, if only a finite number of π rates are non -zero, i.e., π 1 =φ 1 ,π 2 =φ 2 π p = Φ p and π k =0, for k > p, then the process is generally considered an autoregressive model of order p, which is denoted as AR(p) . An autoregressive model of order p is given by where φ p (B) = (l-φ 1 B- ...l-φ p B p ) . Thus, the autoregressive modeling tool 216 takes the times series, Z t , and regresses the value of Z at time t on its own past values plus a random shock value, i.e., Z t =π 1 +π 2 Z t . 2 +...+ t or equivalently, π(B)Z t : = t where π(5) = 1 - and 1 + ∑" |π/|<oo . The autocorrelation function becomes pk= φlPk-l=l , where k>l , and where P 0 =l. The inverse autocorrelation function becomes and the partial autocorrelation function becomes The resulting autoregressive modeling tool 216 may be a first order mixed autoregressive construct. In particular, the autoregressive modeling tool 216 that the system and method apply to the time series may be an autoregressive integrated moving average (ARIMA) model to forecast the level of mean CPU utilization for each computer 106 over time. In another embodiment, the resultant autoregressive modeling tool 216 may be an autoregressive moving average (ARMA) model. These constructs predict a moving average parameter estimate divided by a coefficient of the lagged autoregressive value of CPU utilization for each computer 106 and its estimated value. These constructs also predict a random error. Table 9-12 list the regression estimates for the moving average parameters (MA) and the autoregressive parameters (AR) of the mean CPU utilization (MU) for the computers 106a- 106d, respectively. The column "T Ratio" indicates values for a "T" test of validity for a particular statistic. For example, the T Ratio indicate whether "t" values are less than or equal to a given level of confidence. Table 9 Conditional Least Squares Estimation of the Time Series for the Computer 106a. Constant Estimate = 0.2757353 Table 10 Conditional Least Squares Estimation of the Time Series for the Computer 106b. Constant Estimate = 0.18911627 Table 11 Conditional Least Squares Estimation of the Time Series for the Computer 106c. Constant Estimate = 0.25564741 Table 12 Conditional Least Squares Estimation of the Time Series for the Computer 106d. Constant Estimate = 0.07628922 The autoregressive modeling tool 216 "fits the data" or matches the theoretical autocorrelation functions of different atuoregressive modeling constructs to the autocorrelation functions computed from the time series. The autoregressive modeling tool 216 thus forecasts CPU utilization with ninety- five percent accuracy, provides an upper ninety- five percent confidence level, and provides a lower ninety- five percent confidence level for all computers 106. This embodiment of the present invention is therefore advantageous over conventional systems and methods that rely on linear regression or multivariable regression techniques, which may carry a lower confidence level. An ARIMA (1,1,1) construct in one embodiment forecasts the level of CPU utilization. This represents that the ARIMA construct has one (1) autoregressive term, one (1) nonseasonal difference, and one (1) lagged forecast error in its prediction equation, ^=μ + z ( A) + Φ > (Z(t - l) - Z(t - 2)) -θ ,e(t - l) , where θ 1 is a moving average parameter and φ x is an autoregressive parameter. The ARIMA (1,1,1) construct for forecasting the level of CPU utilization is equivalent to an ARMA (1,1) construct, while forecasts the change in CPU utilization. The ARMA construct has one (1) autoregressive term, one (1) nonseasonal difference, and zero (0) lagged forecast errors in its prediction equation, (l-φ 1 B) Z t = (1 -θ j B) t , where θ r is a moving average parameter, φ 1 is an autoregressive parameter, B is a backshift operator, and a t is a zero mean white noise process. Accordingly, the autoregressive moving average for the computer 106a is given by (1-B) cpubusy t =0.89909+ (1+0.51935 B) / (1-0.73434 B) a t . The autoregressive moving average for the computer 106b is given by (1-b) cpubusy t =0.75565+(l+0.48501 B)/(l-0.71503) a t . The autoregressive moving average for the computer 106c is given by (1-B) cpubusy t =0.87759+ (1+0.99100 B) / (1- 0.77904 B) a t . The autoregressive moving average for the computer 106d is given by (1-B) cpubusy t =0.77650+ (1+0.99240 B) / (1- 0.83932 B) a t . II. Autoregressive Forecasting of Computing Resources; Fig. 4 depicts a flow chart of a collecting, collapsing, and regressing process 400 suitable for use in one embodiment of the present invention. Task 402 starts the process 400, where control immediately passes to task 404. Task 404 extracts performance data from at least one of the computers 106. In one embodiment, the resource manager 202 extracts the performance data from its associated computer every second. Task 406 statistically collapses the performance data into a first time series. In one embodiment, the statistical colapser 204 generates a time series representing a performance metric as though its associated performance data had been collected at fifteen minute intervals. The database 206 then stores the fifteen minute time series. The data extractor 208 extracts the time series representing performance data collected at fifteen minute intervals from the database 206. Task 408 statistically collapses the first time series into a second time series. In one embodiment, the statistical collapser 210 generates a second time series representing performance data as though it had been collected weekly. Task 408 then determines whether the weekly time series is statistically stationary. If the time series is statistically stationary, then task 408 writes the time series to the time point converter 214. If, on the other hand, the time series is statistically non- stationary, then task 410 converts the statistically non- stationary time series to a statistically stationary time series by differencing each time point, as explained above. After task 410 generates the statistically stationary time series, task 410 writes the converted time series to the time point converter 214. The time point converter 214 converts the date/time stamp associated with each data point in the time series to an equivalent data point suitable for use in the autoregressive modeling tool 216, as explained above. Task 412 applies the autoregressive modeling tool 216 to the time series to generate forecasts of the computing platform 100 resources, Task 412 also generates recursive forecasts whereby actual future performance data is fed back into the autoregressive modeling tool 216 to calibrate the system and method. Task 414 completes the process 400. This process provides a turnkey solution to CPU utilization forecasting that can be implemented easily by any system network manager. Referring back to Fig. 1, the computing platform 100 may include a results processor 104. The results processor 104 generates representations of performance data extracted from the computing platform 100. The results processor 104 generates information for use in written reports that document the results of the process 400. In the embodiment where the performance metric is resource utilization and the resource is a central processing unit of the computers 106, the results processor 104 produces reports and graphical representations of comparisons of actual CPU utilization with CPU utilization forecasts. For example, Tables 5-8, above, are textual representations produced by the results processor 104. Recall that Tables 5-8 represent the CPU utilization performance metric for the computers 106a- 106d, respectively. Tables 5-8 include a "forecast" column, a "lower 95% confidence level" column, and an "upper 95% confidence level" column. Fig. 5 depicts an exemplary graphical representation produced utilizing one embodiment of the results processor 104. The graphical representation 500 corresponds to the data contained in Table 1 above of CPU utilization for the computer 106a. Graph 502 represents actual CPU utilization. Graph 504 represents forecast CPU utilization. Note that the Tables 5-8 and the graphical representation 500 illustrate that the forecast performance metric somewhat accurately represents actual CPU utilization. Graph 506 represents the upper ninety- five percent confidence interval. This confidence interval provides an estimated range of values which is likely to include an unknown parameter. For example, for each weekly time point taken, ninety- five percent of the time points will include an unknown parameter. Graph 508 represents the lower ninety- five percent confidence interval. Note that the forecast values fall within the ninety- five percent confidence intervals. The graphical and textual representations demonstrate the greater accuracy and reliability which the present invention provides over conventional forecasting systems and methods. Referring back to Fig. 1, in one embodiment, the results processor 104 is external to the computing network 102, as represented by the results processor 104a. In an alternate embodiment, the results processor 104 is internal to the computing network 102, as represented by the results processor 104b. The system and method may be implemented in computer software run on a computer. Alternately, the system and method may be implemented using hardware or a combination of hardware and software, and may be implemented in a computer system or other processing system. In an embodiment where the invention is implemented using software, the software may be stored on a computer program product (such as an optical disk, a magnetic disk, a floppy disk, etc.) or program storage device (such as an optical disk drive, magnetic disk drive, floppy disk drive, etc.) . After reading this description, it will become apparent to a person skilled in the relevant art how to implement the system and method using computer systems and architectures. Although specific embodiments of, and examples for, the present invention are described herein for illustrative purposes, various equivalent modifications are possible within the scope of the invention, as will be recognized by those skilled in the relevant art. The teachings provided herein of the present invention can be applied to other computing platforms, not necessarily the exemplary computing platform described above. For example, the teachings provided herein can be applied to UNIX machines as well . In a telecommunications environment, aspects of the present invention generally can be applied to Internet metering data, marketing data on the success or failure of product offerings, telephone usage patterns, cash flow analyses, financial data, customer survey data on product reliability, customer survey data on product preference, etc. Moreover, aspects of the present invention can be applied not only to a single performance metric of a computing platform, such as CPU utilization, but also to a plurality of performance metrics, such as disk drive usage percentage, Internet traffic, users logged on to the Internet, network communications packet traffic, and users logged onto a particular server, for example. The system and method may also be utilized to forecast these and other performance metrics for con iguration management or performance management purposes. These and other changes can be made to the invention in light of the above-detailed description. In general, in the following claims, the terms used should not be construed to limit the invention to the specific embodiments disclosed in the specification and claims, but should be construed to include all computer platforms that operate under the claims to provide a system and method for computing resource forecasting unitization. From the foregoing it will be appreciated that, although specific embodiments of the invention have been described herein for purposes of illustration, various modifications may be made without deviating from the spirit and scope of the invention. Accordingly, the invention is not limited except as by the appended claims.

Claims: CLAIMS 1. In a computing platform having a plurality of resources, a method for forecasting at least one aspect of the plurality of resources, the method comprising the steps of: collecting at intervals a metric from a computing platform resource; and applying an autoregressive modeling tool to the collected metrics to produce a forecast of the metric of the plurality of resources. 2. The method according to claim 1, further comprising the step of statistically collapsing the collected metrics to produce a first time series. 3. The method according to claim 1, further comprising the step of outputting the forecast of the metric. 4. The method according to claim 1, further comprising the step of extracting the first time series from the database. 5. The method according to claim 1, further comprising the step of statistically collapsing the first time series to produce a second series. 6. The method according to claim 1, further comprising the step of ensuring that the first time series is statistically stationary. 7. A system to forecast performance of at least one computing platform resource, comprising: a computing platform resource having at least one performance metric; and an autoregressive modeling tool for receiving a representation of the performance metric and providing a forecast of the computing platform resource. 8. The system of claim 7, wherein the autoregressive modeling tool is an autoregressive moving average modeling tool. 9. The system of claim 7, wherein the autoregressive modeling tool is an autoregressive integrated moving average modeling tool. 10. The system of claim 7, wherein the performance metric represents utilization of at least one computing platform resource. 11. The system of claim 7, wherein the performance metric represents one of redundancy or efficiency of at least one computing platform resource, 12. The system of claim 7, wherein the performance metric represents utilization and the computing platform resource comprises a central processing unit. 13. The system of claim 7, wherein the performance metric represents users logged on to the Internet. 14. The system of claim 7, wherein the performance metric represents Internet traffic. 15. A system to forecast at least one aspect of a plurality of computing platform resources, comprising: a resource manager; a first statistical collapser coupled to the resource manager; a time series analyzer coupled to the first statistical collapser; and and autoregressive modeling tool coupled to the time series analyzer. 16. The system according to claim 15, further comprising a database coupled to the first statistical collapser. 17. The system according to claim 15, further comprising a data extractor coupled to the database. 18. The system according to claim 15 further comprising a second statistical collapser coupled to the data extractor. 19. The system according to claim 15, further comprising a time point converter coupled to the time series analyzer. 20. The system according to claim 15, wherein the first statistical collapser comprises a fifteen minute time series generator. 21. The system according to claim 15, wherein the second statistical collapser comprises a weekly time series generator. 22. The system according to claim 15, wherein the time series analyzer comprises a time series differencer. 23. The system according to claim 15, wherein the autoregressive modeling tool comprises an autoregressive moving average modeling tool. 24. The system according to claim 15, wherein the auotregressive modeling tool comprises an autoregressive integrated moving average modeling tool. 25. In a computing platform having a plurality of resources, a method for forecasting at least one aspect of the plurality of resources, the method comprising the steps of: statistically collapsing a metric of a computing platform resource; and applying an autoregressive modeling tool to a series of the statistically collapsed metrics to produce a forecast of the metric. 26. The method according to claim 25, further comprising the step of collecting at intervals the metric from the computing platform resource. 27. The method according to claim 25, further comprising the step of storing the series in a database. 28. The method according to claim 25, further comprising the step of extracting the series from the database. 29. The method according to claim 25, further comprising the step of statistically collapsing the series to produce a set of points. 30. The method according to claim 25, further comprising the step of ensuring that the set of points is statistically stationary. 31. In a computing platform having a plurality of resources, a method for producing a series of data values of the computing platform resources, the method comprising the steps of: receiving a series of metrics representing at least one computing platform resource; calculating a set of mean or median values based on the series of metrics; determining a set of mean or median values for each calculated set of values; collating the determined values to produce a series of data values representing the series of metrics; and storing the series of metrics in a database. 32. The method according to claim 31, further comprising the step of collapsing the stored series of metrics to produce a first time series. 33. The method according to claim 31, further comprising the step of collapsing the first time series to produce a second time series. 34. The method according to claim 31, further comprising the step of applying an autoregressive model to the second time series.

Inventors: WACLAWSKI ANTHONY C, WACLAWSKI, ANTHONY, C.
Applicants: MCI WORLDCOM INC, MCI WORLDCOM, INC.
Application year: 1999
Main classification: G06F
IPC codes: G06F11