monasca-analytics/doc/use_cases.md

1.8 KiB
Raw Blame History

Example Use Cases

Below are few use cases that are relevant to OpenStack. However, MoNanas enables you to add your own data ingestors.

Example Alert Fatigue Management Anomaly Detection
Dataset Synthetic, but representative, set of Monasca alerts that are processed in a stream manner. This alert set represents alerts that are seen in a data center consisting of several racks, enclosures and nodes. iptables rules together with the number of times they are fired in a time period.
Parsing Monasca alert parser. Simple parser extracting period and number of fire events per rule.
SML algorithm flow filter(bad_formatted) -> filter(duplicates) -> aggregate() >> aggregator aggregation can utilize conditional independence causality, score-based causality, linear algebra causality. detect_anomaly() >> aggregator anomaly detection could be based on SVM, trend, etc.
Output Directed acyclic alert graph with potential root causes at the top. Rule set with an anomalous number of firing times in a time period.
Note Even though this could be consumed directly by devops, the usage of Vitrage MoNanas Sink is recommended. The output of this module can speed up creation of a Vitrage entity graph to do further analysis on it. None.

-> indicates a sequential operation in the flow.

// indicates beginning of group of operations running in parallel.

- indicates operations running in parallel.

>> indicates end of group of operations running in parallel.