Patent Document ID: 9772895
Application ID: 14887354
Patent Flag: 1

Claim One:
1. A computer program product for identifying unusual intervals in an information technology (IT) system, the computer program product comprising: a non-transitory storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising: training, by a processor, a log analysis system based on historical data for the IT system, the historical data including a plurality of intervals each having an interval anomaly score, wherein the training comprises: ordering the plurality of intervals in ascending order based on the interval anomaly scores: dividing the ordered intervals evenly into a fixed number of groups; and calculating a cumulative anomaly score for each of the groups; receiving, by the log analysis system, status messages from a plurality of pieces of IT equipment in the IT system; grouping the status messages into an interval and calculating an interval anomaly score for the interval; and comparing the interval anomaly score with one or more priority level cutoffs created by the training and responsively generating an alert based on the comparison, wherein the alert indicates that the interval is unusual.