A method performed by a wireless device (121, 122) for determining Channel State Information, CSI, estimates to be transmitted in a CSI report for the wireless device (121, 122) to a network node (110) in a radio communications network (100) is provided. The wireless device (121, 122) receives a message comprising an indication to use CSI estimates corresponding to a determined period of time. In response to said message, the wireless device (121, 122) determines CSI estimates to be used in the CSI report to the network node (110) according to the received indication. A wireless device (121, 122) is also described.

A network node (110) and method therein for controlling CSI estimates transmitted by one or more wireless devices (121, 122) in CSI reports to the network node (110) in a radio communications network (100) are also provided.

A method for improving performance of a streaming media session between a plurality of communicating entities. Observation reports are collected from a plurality of monitoring entities. Each observation report includes information pertaining to events observed and recorded at a corresponding monitoring entity. A size of at least one window to be used for analyzing the observation reports is determined. The observation reports are analyzed using the at least one window of the determined size, to determine a correlation between the events across the observation reports. A problem encountered during the streaming media session is identified, based upon the correlation between the events. A notification is sent to at least one of the monitoring entities, based upon the problem. The notification is sent during the streaming media session.

A method for improving performance of a streaming media session between a plurality of communicating entities. Observation reports are collected from a plurality of monitoring entities. Each observation report includes information pertaining to events observed and recorded at a corresponding monitoring entity. A size of at least one window to be used for analyzing the observation reports is determined. The observation reports are analyzed using the at least one window of the determined size, to determine a correlation between the events across the observation reports. A problem encountered during the streaming media session is identified, based upon the correlation between the events. A notification is sent to at least one of the monitoring entities, based upon the problem. The notification is sent during the streaming media session.

Described herein are systems, methods, and software to manage workflow monitoring between a client and one or more web servers. In one implementation, a client may initiate a workflow and maintain timing information associated with HTTP requests to one or more web servers as part of the workflow. The client further obtains, from the one or more web servers, log information for operations initiated from the HTTP requests to the one or more web servers and generates a timing diagram display based on the timing information and the log information.

A system, method, and computer program product are provided for a determining a network situation in a communication network. In use, at least one threshold value of at least one operational parameter of a communication network is obtained, the at least one operational parameter representing at least one operational status of at least one of a computational device or a communication device. Additionally, log data of the communication network is obtained, the log data containing at least one value of the at least one operational parameter reported by at least one network entity of the communication network. The at least one value of the at least one operational parameter of the log data is compared with a corresponding threshold value of the at least one threshold value to form a detection of a network situation. Further, the detection of the network situation is reported if the at least one value of the at least one operational parameter of the log data traverses the corresponding threshold value of the at least one threshold value.

A system, method, and computer program product are provided for a determining a network situation in a communication network. In use, at least one threshold value of at least one operational parameter of a communication network is obtained, the at least one operational parameter representing at least one operational status of at least one of a computational device or a communication device. Additionally, log data of the communication network is obtained, the log data containing at least one value of the at least one operational parameter reported by at least one network entity of the communication network. The at least one value of the at least one operational parameter of the log data is compared with a corresponding threshold value of the at least one threshold value to form a detection of a network situation. Further, the detection of the network situation is reported if the at least one value of the at least one operational parameter of the log data traverses the corresponding threshold value of the at least one threshold value.

Techniques for Qprints using telemetry-based similarity for DNS are provided. In some embodiments, a system/process/computer program product for Qprints using telemetry-based similarity for DNS in accordance with some embodiments includes aggregating a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related query data; clustering the DNS related query data; and generating similarity clusters for domains based on their DNS related query data. For example, the set of network related event data can include passive DNS (pDNS) data aggregated over a period of time to express pDNS data at-scale, and similarity of the pDNS data aggregated over the period of time is quantified, within and across networks based on telemetry-based similarity for DNS using a statistical model.

Techniques for Qprints using telemetry-based similarity for DNS are provided. In some embodiments, a system/process/computer program product for Qprints using telemetry-based similarity for DNS in accordance with some embodiments includes aggregating a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related query data; clustering the DNS related query data; and generating similarity clusters for domains based on their DNS related query data. For example, the set of network related event data can include passive DNS (pDNS) data aggregated over a period of time to express pDNS data at-scale, and similarity of the pDNS data aggregated over the period of time is quantified, within and across networks based on telemetry-based similarity for DNS using a statistical model.

Methods and systems for performing operations comprising: accessing one or more data objects including a data set that has been collected over a given span of time, the data set representing a plurality of parameters corresponding to resource utilization of a given server; computing first and second statistical measures based on the plurality of parameters; obtaining current resource utilization corresponding to at least a subset of the plurality of parameters; determining a first condition in which values of the current resource utilization exceed a first threshold associated with the first statistical measure; determining a second condition in which values of the data set corresponding to a time period associated with the current resource utilization exceed a second threshold associated with the second statistical measure; and triggering an anomaly detection operation in response to determining the first and second conditions.

Methods and systems for performing operations comprising: accessing one or more data objects including a data set that has been collected over a given span of time, the data set representing a plurality of parameters corresponding to resource utilization of a given server; computing first and second statistical measures based on the plurality of parameters; obtaining current resource utilization corresponding to at least a subset of the plurality of parameters; determining a first condition in which values of the current resource utilization exceed a first threshold associated with the first statistical measure; determining a second condition in which values of the data set corresponding to a time period associated with the current resource utilization exceed a second threshold associated with the second statistical measure; and triggering an anomaly detection operation in response to determining the first and second conditions.