Automated generation of training data for an artificial-intelligence based incident resolution system

1 . A computer-implemented method comprising:

monitoring, by an application performance monitoring tool, an information technology (IT) environment, the monitoring causing collecting monitored data from the IT environment;

extracting health metrics data from the monitored data collected by the application performance monitoring tool;

detecting incident data indicative of an incident where a health metric of the health metrics data metrics falls below a predetermined threshold;

detecting resolution data indicative of a resolution where the health metric of the health metrics data improves as a result of executing a script in the IT environment;

extracting the incident data and the resolution data from the monitored data collected by the application performance monitoring tool while monitoring the IT environment;

correlating the incident data with the resolution data according to a detected change in health metrics data resulting in a correlated dataset;

generating a training dataset based on the correlated dataset;

storing the training dataset in a computer-readable database;

training a machine learning model using the training dataset resulting in a trained machine learning model; and

deploying the trained machine learning model within the IT environment such that the trained machine learning model provides resolution recommendation in response to receiving new incident data from an application within the IT environment.

2 . The computer-implemented method of claim 1 , wherein the monitored data includes data collected from a micro-service in the IT environment.

3 . The computer-implemented method of claim 1 , wherein the correlating of incident data and resolution data includes correlating incident data with a runbook action.

4 . The computer-implemented method of claim 1 , wherein the monitored data includes data indicative of end user actions and end user communications.

5 . The computer-implemented method of claim 4 , wherein the correlating of the incident data with the resolution data includes performing keyword-based analysis on runbooks.

6 . The computer-implemented method of claim 4 , wherein the correlating of the incident data with the resolution data includes performing data mining of end user communications.

7 . The computer-implemented method of claim 1 , wherein the training of the machine learning model includes training the machine learning model to understand incident and resolution relationships.

8 . The computer-implemented method of claim 1 , wherein the training of the machine learning model includes training the machine learning model to recommend a runbook in response to an inputted incident.

9 . The computer-implemented method of claim 1 , further comprising collecting user feedback and updating the dataset based on the user feedback.

10 . A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions executable by a processor to cause the processor to perform operations comprising:

monitoring, by an application performance monitoring tool, an information technology (IT) environment, the monitoring causing collecting monitored data from the IT environment;

extracting health metrics data from the monitored data collected by the application performance monitoring tool;

detecting incident data indicative of an incident where a health metric of the health metrics data metrics falls below a predetermined threshold;

detecting resolution data indicative of a resolution where the health metric of the health metrics data improves as a result of executing a script in the IT environment;

extracting the incident data and the resolution data from the monitored data collected by the application performance monitoring tool while monitoring the IT environment;

correlating the incident data with the resolution data according to a detected change in health metrics data resulting in a correlated dataset;

generating a training dataset based on the correlated dataset;

storing the training dataset in a computer-readable database;

training a machine learning model using the training dataset resulting in a trained machine learning model; and

deploying the trained machine learning model within the IT environment such that the trained machine learning model provides resolution recommendation in response to receiving new incident data from an application within the IT environment.

11 . The computer program product of claim 10 , wherein the stored program instructions are stored in a computer readable storage device in a data processing system, and wherein the stored program instructions are transferred over a network from a remote data processing system.

12 . The computer program product of claim 10 , wherein the stored program instructions are stored in a computer readable storage device in a server data processing system, and wherein the stored program instructions are downloaded in response to a request over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system, further comprising:

program instructions to meter use of the program instructions associated with the request; and

program instructions to generate an invoice based on the metered use.

13 . The computer program product of claim 10 , wherein the monitored data includes data collected from a micro-service in the IT environment.

14 . The computer program product of claim 10 , wherein the correlating of incident data and resolution data includes correlating incident data with a runbook action.

15 . A computer system comprising a processor and one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions executable by the processor to cause the processor to perform operations comprising:

monitoring, by an application performance monitoring tool, an information technology (IT) environment, the monitoring causing collecting monitored data from the IT environment;

extracting health metrics data from the monitored data collected by the application performance monitoring tool;

detecting incident data indicative of an incident where a health metric of the health metrics data metrics falls below a predetermined threshold;

detecting resolution data indicative of a resolution where the health metric of the health metrics data improves as a result of executing a script in the IT environment;

extracting the incident data and the resolution data from the monitored data collected by the application performance monitoring tool while monitoring the IT environment;

correlating the incident data with the resolution data according to a detected change in health metrics data resulting in a correlated dataset;

generating a training dataset based on the correlated dataset;

storing the training dataset in a computer-readable database;

training a machine learning model using the training dataset resulting in a trained machine learning model; and

deploying the trained machine learning model within the IT environment such that the trained machine learning model provides resolution recommendation in response to receiving new incident data from an application within the IT environment.

16 . The computer system of claim 15 , wherein the monitored data includes data collected from a micro-service in the IT environment.

17 . The computer system of claim 15 , wherein the correlating of incident data and resolution data includes correlating incident data with a runbook action.