A computer-implemented method for monitoring a communication system includes identifying a set of signals that need to be transmitted over the communication system for proper functioning of the control and/or surveillance; for each signal from the identified set of signals, identifying one or more resources of the communication system that are needed for transmission of this signal; obtaining information that is indicative of the operational state of the identified resources; and evaluating, from the obtained information, at least one remedial activity which, when performed on at least one resource, and/or on the control and/or surveillance, is likely to improve, and/or to restore, the reliability of the control and/or surveillance.

A method for detecting anomalies in one or more network performance metrics stream for one or more monitored object comprising using a discrete window on the stream to extract a motif from said stream for a first of said network performance metric for a first of said monitored object. Maintaining an abnormal and a normal cluster center of historical time series for said first network performance metric for said first monitored object. Classifying said motif based on a distance between said new time series and said abnormal and said normal cluster center. Determining whether an anomaly for said motif occurred based on said distance and a predetermined decision boundary.

In one example, one or more devices monitor one or more data feeds from one or more sources of updates regarding networking impact related events for an indication that one or more networking impact related events are occurring or will occur. Based on the one or more data feeds, the device(s) determine that a networking impact related event of the one or more networking impact related events is occurring or will occur in a geographic region. In response to determining that the networking impact related event is occurring or will occur in the geographic region, the device(s) automatically identify one or more target adjustments to a network and/or to one or more services provided over the network. The device(s) implement the one or more target adjustments to the network and/or to the one or more services provided over the network.

A method includes generating a plurality of vectors representing words in a plurality of documents about an information technology (IT) system and clustering the plurality of vectors to produce a plurality of clusters. The method also includes identifying a cluster of the plurality of clusters that contains a plurality of clustered vectors, generating a feature based on a plurality of words represented by the plurality of clustered vectors, and training a machine learning model to identify an anomaly in the IT system based on the feature.

Methods and systems for managing health of devices in an Internet of Things (IoT) environment. A method includes detecting an occurrence of at least one event on a device of a plurality of devices and determining a change in ambience in the device. The method also includes detecting at least one anomaly in the device if the determined change in the ambience of the at least one device does not satisfy threshold criteria determined for the at least one event. The method further includes determining at least one root cause for the at least one anomaly detected in the device.

Example aspects include techniques for implementing peer group evaluation for comparative anomaly. These techniques may include determining a candidate group including a plurality of component metrics, and determining that the plurality of component metrics are a peer group based at least in part on a cluster profile of the candidate group and the candidate group exhibiting peer-like behavior of a period of time. In addition, the techniques may include detecting anomalous activity based at least in part on first performance information of a component metric deviating from second performance information for the peer group, and providing a notification of the anomalous activity.

Systems and methods for analyzing the root cause of service failures and service degradation in a telecommunications network are provided. A method, according to one implementation, includes a step of receiving any of Performance Monitoring (PM) data, standard path alarms, service PM data, standard service alarms, network topology information, and configuration logs from equipment configured to provide services in a network. The method also includes a step of automatically detecting a root cause of a service failure or signal degradation from the available PM data, standard path alarms, service PM data, standard service alarms, network topology information, and configuration logs.

A network-management system capable of reducing negative impacts of natural disasters on network services. In an example embodiment, in response to an indication of potential failure of one or more network resources in a meteorological event, the network controller operates to orchestrate re-hosting of affected VNFs and perform SDN-based reconfiguration of switches to adapt the traffic flows to the re-hosted VNFs. The indication of potential failure can be provided, e.g., by a specialized application capable of estimating the probabilities of failure for individual network resources based on a plurality of inputs, such as digital weather forecasts for the corresponding geographical area, geographical locations of individual network resources, tolerances of different network resources to specific environmental conditions, previous history of network damage in the same geographical area, alerts from power suppliers, etc. Upon reconfiguration, the network may beneficially have a lower likelihood of service disruptions and/or outages during the meteorological event.

A system and method to determine an event for an executing integration flow defining how messages are passed between a sender system and a receiver system; determine message processing states of messages of the integration flow before an event time; determine message processing states of messages of the integration flow after the event time; determine, based on an evaluation of failed message processing states for the messages before and after the event time, whether the event is associated with a problem; assign, in response to the determination that the event time is associated with a problem, one or more categories to the problem; and store a record of the assignment of the one or more categories to the problem.

The present disclosure relates generally to facilitating routing of communications across external systems. More specifically, techniques are provided to dynamically route issue tracking tickets to disparate endpoints based on the content of the ticket.