850350
Online System Problem Detection by Mining Patterns of Console Logs
We describe a novel application of using data mining and statistical learning methods to automatically monitor and detect abnormal execution traces from console logs in an online setting. Different from existing solutions, we use a two stage detection system. The first stage uses frequent pattern mining and distribution estimation techniques to capture the dominant patterns (both frequent sequences and time duration). The second stage use principal component analysis based anomaly detection technique to identify actual problems. Using real system data from a 203-node Hadoop [1] cluster, we show that we can not only achieve highly accurate and fast problem detection, but also help operators better understand execution patterns in their system.
3222518
Control Considerations for Scalable Event Processing
The growth in the scale of systems and networks has created many challenges for their management, especially for event processing. Our premise is that scaling event processing requires parallelism. To this end, we observe that event processing can be divided into intra-event processing such as filtering and inter-event processing such as root cause analysis. Since intra-event processing is easily parallelized, we propose an architecture in which intra-event processing elements (IAPs) are replicated to scale to larger event input rates. We address two challenges in this architecture. First, the IAPs are subject to overloads that require effective flow control, a capability that was not present in the components we used to build IAPs. Second, we need to balance the loads on IAPs to avoid creating resource bottlenecks. These challenges are further complicated by the presence of disturbances such as CPU intensive administrative tasks that reduce event processing rates. We address these challenges using designs based on control theory, a technique for analyzing stability, accuracy, and settling times. We demonstrate the effectiveness of our approaches with testbed experiments that include a disturbance in the form of a CPU intensive application.
7346557
Predictive Control for Dynamic Resource Allocation in Enterprise Data Centers
It is challenging to reduce resource over-provisioning for enterprise applications while maintaining service level objectives (SLOs) due to their time-varying and stochastic workloads. In this paper, we study the effect of prediction on dynamic resource allocation to virtualized servers running enterprise applications. We present predictive controllers using three different prediction algorithms based on a standard auto-regressive (AR) model, a combined ANOVA-AR model, as well as a multi-pulse (MP) model. We compare the properties of the predictive controllers with an adaptive integral (I) controller designed in our earlier work on controlling relative utilization of resource containers. The controllers are evaluated in a hypothetical virtual server environment where we use the CPU utilization traces collected on 36 servers in an enterprise data center. Since these traces were collected in an open-loop environment, we use a simple queuing algorithm to simulate the closed-loop CPU usage under dynamic control of CPU allocation. We also study the controllers by emulating the utilization traces on a test bed where a Web server was hosted inside a Xen virtual machine. We compare the results of these controllers from all the servers and find that the MP-based predictive controller performed slightly better statistically than the other two predictive controllers. The ANOVA-AR-based approach is highly sensitive to the existence of periodic patterns in the trace, while the other three methods are not. In addition, all the three predictive schemes performed significantly better when the prediction error was accounted for using a feedback mechanism. The MP-based method also demonstrated an interesting self-learning behavior
1951107
CCSMOMS:A Composite Communication Scheme for Mobile Object Management System
In this paper, we discuss the design and implementation of a mobile object management system that makes use of the existing GSM (Global System for Mobile Communication) networks and it's extension-GPRS (general packet radio service) for data communication. We use a novel composite communication scheme (CCS), which uses SMS (short message service) and GPRS to achieve reliable and economical communication between mobile objects and the control center. We also use unified data management (UDM) for control center management, which significantly reduces the cost of maintaining separate data centers. We have deployed our services in two medium-sized cities with real users. The cost evaluation shows the high performance, usability and cost-effectiveness of this service in real production environment
2239051
Detecting large-scale system problems by mining console logs
Surprisingly, console logs rarely help operators detect problems in large-scale datacenter services, for they often consist of the voluminous intermixing of messages from many software components written by independent developers. We propose a general methodology to mine this rich source of information to automatically detect system runtime problems. We first parse console logs by combining source code analysis with information retrieval to create composite features. We then analyze these features using machine learning to detect operational problems. We show that our method enables analyses that are impossible with previous methods because of its superior ability to create sophisticated features. We also show how to distill the results of our analysis to an operator-friendly one-page decision tree showing the critical messages associated with the detected problems. We validate our approach using the Darkstar online game server and the Hadoop File System, where we detect numerous real problems with high accuracy and few false positives. In the Hadoop case, we are able to analyze 24 million lines of console logs in 3 minutes. Our methodology works on textual console logs of any size and requires no changes to the service software, no human input, and no knowledge of the software's internals.
14260748
Segment Clustering Radar Signal Sorting
Radar signal sorting is picking-up pulse serial of same radar emitter from dense complex pulse signal flow. The tolerance of radar signal sorting is analyzed in modern electronic warfare. The complex and dense pulses environment makes it become a vital factor to restrict the efficiency of sorting of the conventional multi-parameters signal sorting system. A segment clustering radar signal sorting method is presented based on support vector clustering (SVC) according to the idea of statistics learning theory. It prevents tolerance from affecting radar sorting. The accuracy of sorting and the sensitivity of algorithm on parameter variation is analyzed. The experimental results show that the sorting method presented is effective to overcome the tolerance of radar signal sorting.
9180515
Incremental Spectral Clustering With Application to Monitoring of Evolving Blog Communities
In recent years, spectral clustering method has gained attentions because of its superior performance compared to other traditional clustering algorithms such as K-means algorithm. The existing spectral clustering algorithms are all off-line algorithms, i.e., they can not incrementally update the clustering result given a small change of the data set. However, the capability of incrementally updating is essential to some applications such as real time monitoring of the evolving communities of websphere or blogsphere. Unlike traditional stream data, these applications require incremental algorithms to handle not only insertion/deletion of data points but also similarity changes between existing items. This paper extends the standard spectral clustering to such evolving data by introducing the incidence vector/matrix to represent two kinds of dynamics in the same framework and by incrementally updating the eigenvalue system. Our incremental algorithm, initialized by a standard spectral clustering, continuously and efficiently updates the eigenvalue system and generates instant cluster labels, as the data set is evolving. The algorithm is applied to a blog data set. Compared with recomputation of the solution by standard spectral clustering, it achieves similar accuracy but with much lower computational cost. Close inspection into the blog content shows that the incremental approach can discover not only the stable blog communities but also the evolution of the individual multi-topic blogs.
14083444
SoftCuts: A Soft Edge Smoothness Prior for Color Image Super-Resolution
Designing effective image priors is of great interest to image super-resolution (SR), which is a severely under-determined problem. An edge smoothness prior is favored since it is able to suppress the jagged edge artifact effectively. However, for soft image edges with gradual intensity transitions, it is generally difficult to obtain analytical forms for evaluating their smoothness. This paper characterizes soft edge smoothness based on a novel SoftCuts metric by generalizing the Geocuts method . The proposed soft edge smoothness measure can approximate the average length of all level lines in an intensity image. Thus, the total length of all level lines can be minimized effectively by integrating this new form of prior. In addition, this paper presents a novel combination of this soft edge smoothness prior and the alpha matting technique for color image SR, by adaptively normalizing image edges according to their alpha-channel description. This leads to the adaptive SoftCuts algorithm, which represents a unified treatment of edges with different contrasts and scales. Experimental results are presented which demonstrate the effectiveness of the proposed method.
8176507
Research and Application of Spatio-temporal Data Mining Based on Ontology
In this paper, the spatio-temporal data mining is studied by adopting the ontology theory. The method of spatio-temporal data mining based on ontology is presented and a new spatio-temporal forecasting model based on ontology is designed. The model uses two measures of spatio-temporal autocorrelation: spatio-temporal adjacency matrix and spatio-temporal contiguity measure. We use this model in the forecast about medium and long term coarse granularity in the railway passenger flow, and the results show that using the method of spatio-temporal forecasting based on ontology can obtain a good forecasting precision
26522967
Maximum entropy model-based baseball highlight detection and classification
In this paper, we propose a novel system that is able to automatically detect and classify baseball highlights by seamlessly integrating image, audio, and speech clues using a unique framework based on maximum entropy model (MEM). What distinguishes our system is that we emphasize on the integration of multimedia features and the acquisition of domain knowledge through automatic machine learning processes. Our MEM-based framework provides a simple platform capable of integrating multimedia features as well as their contextual information in a uniform fashion. Unlike the Hidden Markov Model and the Bayes Network-based approaches, this framework does not need to explicitly segment and classify the input video into states during its data modeling process, and hence remarkably simplifies the training data creation and the highlight detection/classification tasks. Experimental evaluations demonstrate the superiority of our proposed baseball highlight detection system in its capability of detecting more major baseball highlights, and in its overall accuracy of detecting these major highlights.