Techniques include collecting current logs from distributed sources, selecting a group of the current logs that are from a related source of the distributed sources, and generating a feature vector using the group of the current logs. A current status model is created for the feature vector using the group of the current logs. One or more anomalies are determined in the group of the current logs based on a difference between the current status model and a reference status model, the reference status model being based on history logs.

In some examples, a computer system may receive an indication to present a user interface presenting data for a plurality of metrics related to at least one of a status or a performance of a storage system. The computer system may determine a status of a workflow that processes messages received from the storage system. Further, the computer system may determine an end time for a plurality of metric visualizations to present in the user interface based on the status of the workflow. The computer system may render the plurality of metric visualizations, with each metric visualization having the determined end time. Further, the computer system may provide the plurality of rendered metric visualizations for presentation in the user interface on a display.

A system and method for determining and generating a visualization of processor utilization is described. The system accesses a source data set that indicates processor utilization rates of a plurality of servers over a plurality of sampling periods. The system defines a target data set that includes a plurality of processor utilization range buckets corresponding to the plurality of sampling periods. The system updates the target data set based on the source data set. A graphical user interface (GUI) is generated based on the updated target data set and includes a stacked area chart indicating percentages of samples corresponding to the processor utilization range buckets over time. The system distributes, based on the updated target data set, a load of from a first server to a second server based on the processor utilization range bucket of the first server and the processor utilization range bucket of the second server.

Methods and systems for providing distributed tracing for application performance monitoring utilizing a distributed search engine in a microservices architecture. An example method comprises providing a user interface (UI) including a distributed trace indicating in real time the services invoked to serve an incoming HTTP request including dependent services, the UI further including, in a single view, associated execution times for the services and dependent services shown as a timeline waterfall. The distributed trace automatically propagates a trace ID to link services end-to-end in real time until a response to the request is served. The single view also provides graphs of response time information and the distribution of response times for the services dependent services. In response to selection of a particular element of the distribution, the UI provides respective timing details. The graphs and data shown on the single view can be filtered based on metadata input into a search field of the single view. Spans associated with the services and dependent can be compressed using various techniques provided for herein.

Techniques for data processing involve: determining, from a disk array, a target disk used for data reconstruction of the disk array; and sending, to an indicating apparatus associated with the target disk, an indication that the target disk is used for the data reconstruction. In this way, such techniques can indicate to the user that the target disk is being used for data reconstruction to remind the user not to remove or move the target disk, thereby ensuring completion of the data reconstruction. Such a technique may improve data storage equipment operation by preventing user interference.

Managing data center recovery from failure events can include a failure event platform having aspects provided via a user interface that integrates multiple failure and recovery management and execution features. The features can include, among others, application drift monitoring between production and recovery environments, real-time health checks of system components, user-modifiable scripting for prioritizing and customizing data center recovery actions, and a recovery execution tool.

System and method for facilitating management of a time-varying resource pool are provided. The system includes a processor and a memory coupled to the processor. The memory stores processor-executable instructions that, when executed, configure the processor to: obtain a time-series data set including data entries associated with one or more consumed resources; identify one or more recurring resource allocations based on recurring data entries of the time-series data set; identify additional resource allocations based on irregularly-timed data entries of the time-series data set; determine a forecasted resource pool value based on a combination of the identified recurring resource allocations and the additional resource allocations; and upon detection of a trigger condition, generate data for display, via a user interface, a scaled resource allocation value based on the forecasted resource pool value.

A set of workload criteria is determined from a workload associated with a plurality of sources. The workload is divided among a set of workload groups according to the set of workload criteria and a first workload scheduler. A set of edge computing resources is assigned to each workload group within the set according to the set of workload criteria and the set of workload groups. A portion of the workload associated with a subset of the plurality of sources is handled by a first subset of edge computing resources and a second workload scheduler, where the subset of sources is associated with a first workload group. The handling includes balancing, by the second workload scheduler, the portion of the workload among the subset of sources. The handled workload is reported to a control center.

Systems and methods directed to generating a predicted quality metric are provided. Telemetry data may be received from a from a first group of devices executing first software. A quality metric for the first software may be generated based on the first telemetry data. Telemetry data from a second group of devices may be received, where the second group of devices is different from the first group of devices. Covariates impacting the quality metric based on features included in the first telemetry data and the second telemetry data may be identified, and a coarsened exact matching process may be performed utilizing the identified covariates to generate a predicted quality metric for the first software based on the second group of devices.

A displaying method and apparatus for application performance management are disclosed. The method includes obtaining data from a target application; mapping the data into a plurality of dimensions; displaying a plurality of layers corresponding to the plurality of dimensions; and displaying, based on a dimension associated with an object supported by the target application, a visualized node corresponding to the object at a corresponding layer of the plurality of layers.