Method and apparatus for detecting multiple anomalies in a cluster of components

1. A method for detecting multiple anomalies in a cluster of components, comprising:

monitoring one or more inferential variables that are received from sensors in the cluster of components;

obtaining derivatives from the one or more inferential variables using a moving-window numerical derivative technique to calculate the rate-of-change in the one or more inferential variables over a specified time interval;

monitoring the derivatives obtained from the one or more inferential variables;

determining whether one or more components within the cluster have experienced an anomalous event based on the monitored derivatives; and

if so, performing one or more remedial actions.

2. The method of claim 1 , wherein determining whether one or more components within the cluster have experienced an anomalous event involves:

determining whether the monitored derivatives indicate that the value of the one or more inferential variables is changing with a specified polarity; and

if so, determining that a component in the cluster of components has experienced an anomalous event.

3. The method of claim 1 , wherein monitoring derivatives for one or more inferential variables involves using a Sequential Probability Ratio Test (SPRT).

4. The method of claim 1 , wherein performing the one or more remedial actions involves one or more of:

generating warnings;

replacing failed components;

reporting the actual number of components that have failed;

reporting the probability that a specified number of components have failed;

monitoring additional variables monitored by sensors in the cluster of components;

adjusting the frequency at which the one or more variables are polled by the sensors;

adjusting test conditions during an accelerated-life study of the components;

scheduling the failed components to be replaced at the next scheduled maintenance interval; and

estimating the remaining useful life of the components.

5. The method of claim 1 , wherein the one or more inferential variables received from the sensors include one or more of:

hardware variables; and

software variables.

6. The method of claim 5 , wherein the hardware variables include one or more of:

voltage;

current;

temperature;

vibration;

optical power;

optical wavelength;

air velocity;

measures of signal integrity; and

fan speed.

7. The method of claim 5 , wherein the software variables include one or more of:

throughput;

transaction latencies;

queue lengths;

central processing unit load;

memory load;

cache load;

I/O traffic;

bus saturation metrics;

FIFO overflow statistics;

network traffic; and

disk-related metrics.

8. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for detecting multiple anomalies in a cluster of components, wherein the method comprises:

monitoring one or more inferential variables that are received from sensors in the cluster of components;

obtaining derivatives from the one or more inferential variables using a moving-window numerical derivative technique to calculate the rate-of-change in the one or more inferential variables over a specified time interval;

monitoring the derivatives obtained from the one or more inferential variables;

determining whether one or more components within the cluster have experienced an anomalous event based on the monitored derivatives; and

if so, performing one or more remedial actions.

9. The computer-readable storage medium of claim 8 , wherein determining whether one or more components within the cluster have experienced an anomalous event involves:

determining whether the monitored derivatives indicate that the value of the one or more inferential variables is changing with a specified polarity; and

if so, determining that a component in the cluster of components has experienced an anomalous event.

10. The computer-readable storage medium of claim 8 , wherein monitoring derivatives for one or more inferential variables involves using a Sequential Probability Ratio Test (SPRT).

11. The computer-readable storage medium of claim 8 , wherein performing the one or more remedial actions involves one or more of:

generating warnings;

replacing failed components;

reporting the actual number of components that have failed;

reporting the probability that a specified number of components have failed;

monitoring additional variables monitored by sensors in the cluster of components;

adjusting the frequency at which the one or more variables are polled by the sensors;

adjusting test conditions during an accelerated-life study of the components;

scheduling the failed components to be replaced at the next scheduled maintenance interval; and

estimating the remaining useful life of the components.

12. The computer-readable storage medium of claim 8 , wherein the one or more inferential variables received from the sensors include one or more of:

hardware variables; and

software variables.

13. The computer-readable storage medium of claim 12 , wherein the hardware variables include one or more of:

voltage;

current;

temperature;

vibration;

optical power;

optical wavelength;

air velocity;

measures of signal integrity; and

fan speed.

14. The computer-readable storage medium of claim 12 , wherein the software variables include one or more of:

throughput;

transaction latencies;

queue lengths;

central processing unit load;

memory load;

cache load;

I/O traffic;

bus saturation metrics;

FIFO overflow statistics;

network traffic; and

disk-related metrics.

15. An apparatus that detects multiple anomalies in a cluster of components, comprising:

a monitoring mechanism configured to:

monitor one or more inferential variables that are received from sensors in the cluster of components;

obtain derivatives from the one or more inferential variables using a moving-window numerical derivative technique to calculate the rate-of-change in the one or more inferential variables over a specified time interval; and

monitor the derivatives obtained from the one or more inferential variables;

an analysis mechanism configured to determine whether one or more components within the cluster have experienced an anomalous event based on the monitored derivatives; and

a remedial action mechanism, wherein if the analysis mechanism determines that one or more components within the cluster has failed, the remedial action mechanism is configured to perform one or more remedial actions.

16. A method for detecting multiple anomalies in a cluster of components, comprising:

monitoring derivatives obtained from one or more inferential variables which are received from sensors in the cluster of components;

determining whether one or more specified events occurred within the cluster of components based on the monitored derivatives; and

if so, determining the probability that the cluster of components is in a specified state based on the one or more specified events that occurred by

determining the number of first events x and second events y that occurred; and

determining the probability p i,j that the cluster of components is in a specified state |i,j> as:

p

i

,

j

=



a

i

,

j

′



2

∑

k

,

l

⁢



a

k

,

l

′



2

;

wherein a′ i,j is the coefficient associated with the specified state |i, j>, and wherein −y≦i≦x, −x≦j≦y, −y≦k≦x, −x≦l≦y and

∑

i

,

j

⁢

p

i

,

j

=

1.

17. The method of claim 16 , wherein after determining the probability that the cluster of components is in a specified state, the method further comprises:

determining whether the probability that the cluster of components is in the specified state meets specified criteria; and

if so, performing one or more remedial actions.

18. The method of claim 17 , wherein performing the one or more remedial actions involves one or more of:

generating warnings;

replacing failed components;

reporting the actual number of components that have failed;

reporting the probability that a specified number of components have failed;

monitoring additional variables monitored by sensors in the cluster of components;

adjusting the frequency at which the one or more variables are polled by the sensors;

adjusting test conditions during an accelerated-life study of the components;

scheduling the failed components to be replaced at the next scheduled maintenance interval; and

estimating the remaining useful life of the components.

19. The method of claim 16 , wherein the one or more specified events include one or more of:

a first event wherein the value of the inferential variable is increasing; and

a second event wherein the value of the inferential variable is decreasing.

20. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for detecting multiple anomalies in a cluster of components, wherein the method comprises:

monitoring derivatives obtained from one or more inferential variables which are received from sensors in the cluster of components;

determining whether one or more specified events occurred within the cluster of components based on the monitored derivatives; and

if so, determining the probability that the cluster of components is in a specified state based on the one or more specified events that occurred by

determining the number of first events x and second events y that occurred; and

determining the probability p i,j that the cluster of components is in a specified state |i,j> as:

p

i

,

j

=



a

i

,

j

′



2

∑

k

,

l

⁢



a

k

,

l

′



2

;

wherein a′ i,j is the coefficient associated with the specified state |i, j>, and wherein −y≦i≦x, −x≦j≦y, −y≦k≦x, −x≦l≦y, and

∑

i

,

j

⁢

p

i

,

j

=

1.

21. The computer-readable storage medium of claim 20 , wherein after determining the probability that the cluster of components is in a specified state, the method further comprises:

determining whether the probability that the cluster of components is in the specified state meets specified criteria; and

if so, performing one or more remedial actions.

22. The computer-readable storage medium of claim 21 , wherein performing the one or more remedial actions involves one or more of:

generating warnings;

replacing failed components;

reporting the actual number of components that have failed;

reporting the probability that a specified number of components have failed;

monitoring additional variables monitored by sensors in the cluster of components;

adjusting the frequency at which the one or more variables are polled by the sensors;

adjusting test conditions during an accelerated-life study of the components;

scheduling the failed components to be replaced at the next scheduled maintenance interval; and

estimating the remaining useful life of the components.

23. The computer-readable storage medium of claim 20 , wherein the one or more specified events include one or more of:

a first event wherein the value of the inferential variable is increasing; and

a second event wherein the value of the inferential variable is decreasing.