Patent Document ID: 10055275
Application ID: 15210840
Patent Flag: 1

Claim One:
1. In a host device, a method for performing an anomaly analysis of a computer environment, comprising: determining, by the host device, an anomaly associated with an attribute of a computer environment resource of the computer infrastructure, comprising: applying, by host device, a classification function to a set of data elements related to the attribute of the computer infrastructure resources of the computer infrastructure to define at least one group of data elements of the set of data elements, and identifying, by host device, a data element of the set of data elements as an anomalous element associated with the attribute when the data element falls outside of the at least one group of data elements; correlating, by the host device, an object associated with the attribute of the detected anomaly with a related object of the computer infrastructure; determining, by the host device, a root cause probability for each object of the correlated objects, the root cause probability identifying a probability of the correlated object functioning as a cause of the detected anomaly; and outputting, by the host device, an identification of a root object associated with the anomaly based upon the identified root cause probability.