Karan Bhukar, Harshit Kumar, Seema Nagar, Pooja Aggarwal, Ian Manning, Rohan Arora, R. Mahindru, Amit Paradkar, Matthew Thornhill, Stephen Cook, Jack Buggins
{"title":"Dynamic- X-Y: A Tool for Learning Dynamic Alert Suppression Policies in AIOps","authors":"Karan Bhukar, Harshit Kumar, Seema Nagar, Pooja Aggarwal, Ian Manning, Rohan Arora, R. Mahindru, Amit Paradkar, Matthew Thornhill, Stephen Cook, Jack Buggins","doi":"10.1109/COMSNETS59351.2024.10427540","DOIUrl":null,"url":null,"abstract":"Although Cloud Native Network functions (CNFs) provide greater agility, manageability, and significantly lower operational costs, the reliability and performance assurance is getting increasingly complex, therefore observability tools are needed to monitor and detect anomalous events, triggering alert notifications and creation of incidents. However, most of these notifications turn out to be false alarms, leading to alert fatigue, inefficiencies, and the risk of missing critical alerts. Existing approaches for reducing alert noise rely on static policies that can quickly become outdated in dynamic IT environments. We demonstrate a novel unsupervised approach, Dynamic-X-Y, which learns dynamic alert suppression policies from historical alert data and applies them to incoming events/alerts at runtime, thereby reducing unnecessary alert notifications. Our approach achieves an accuracy of 93.93% in identifying correct alerts, outperforming the baselines by a significant margin. Additionally, we present a case study demonstrating the effectiveness of our approach vis-a-vis the No-Sunnression annroach.","PeriodicalId":518748,"journal":{"name":"2024 16th International Conference on COMmunication Systems & NETworkS (COMSNETS)","volume":"107 1-3","pages":"291-293"},"PeriodicalIF":0.0000,"publicationDate":"2024-01-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2024 16th International Conference on COMmunication Systems & NETworkS (COMSNETS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/COMSNETS59351.2024.10427540","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
Although Cloud Native Network functions (CNFs) provide greater agility, manageability, and significantly lower operational costs, the reliability and performance assurance is getting increasingly complex, therefore observability tools are needed to monitor and detect anomalous events, triggering alert notifications and creation of incidents. However, most of these notifications turn out to be false alarms, leading to alert fatigue, inefficiencies, and the risk of missing critical alerts. Existing approaches for reducing alert noise rely on static policies that can quickly become outdated in dynamic IT environments. We demonstrate a novel unsupervised approach, Dynamic-X-Y, which learns dynamic alert suppression policies from historical alert data and applies them to incoming events/alerts at runtime, thereby reducing unnecessary alert notifications. Our approach achieves an accuracy of 93.93% in identifying correct alerts, outperforming the baselines by a significant margin. Additionally, we present a case study demonstrating the effectiveness of our approach vis-a-vis the No-Sunnression annroach.