Temporal analysis of a computing environment using event data and component relationship data
In a computer-implemented method for temporal analysis of a computing environment using event data and managed component relationship data, a temporal topology graph of a computing environment including a plurality of managed components is accessed at a service provider, wherein the temporal topology graph includes managed component relationship data, wherein the service provider is remote to the computing environment. Event data for the plurality of managed components of the computing environment is received. Anomaly detection of the computing environment is performed based on the event data and the temporal topology graph of the computing environment, where an anomaly is indicative of a non-ideal state of the computing environment.
1. A computer-implemented method for temporal analysis of a computing environment using event data and managed component relationship data, the method comprising:
receiving, at a service provider, managed component relationship data for a plurality of managed components of a computing environment, the managed component relationship data comprising parent/child information for a managed component of the plurality of managed components at a moment in time, wherein the managed component relationship data is generated at each managed component of the plurality of managed components and is communicated from the plurality of managed components to the service provider;
transforming, by the service provider, the managed component relationship data into graphical data of a temporal topology graph of the computing environment, wherein the temporal topology graph includes the moment in time for each instance of the managed component relationship data within the temporal topology graph;
generating, by the service provider, the temporal topology graph of the computing environment;
receiving event data for the plurality of managed components of the computing environment; and
performing anomaly detection of the computing environment based on the event data and the temporal topology graph of the computing environment, where an anomaly is indicative of a non-ideal state of the computing environment.
2. The computer-implemented method of claim 1 , further comprising:
identifying at least one ameliorative action to apply to the computing environment for correcting the anomaly.
3. The computer-implemented method of claim 2 , further comprising:
correlating the event data to the temporal topology graph; and
identifying an instance of the event data causing a change in topology of the computing environment.
4. The computer-implemented method of claim 3 , wherein the identifying the at least one ameliorative action to apply to the computing environment for correcting the anomaly comprises:
utilizing the instance of the event data causing a change in topology of the computing environment to identify the ameliorative action.
5. The computer-implemented method of claim 2 , further comprising:
effectuating application of the at least one ameliorative action to the computing environment.
6. The computer-implemented method of claim 5 , wherein the effectuating the application of the at least one ameliorative action to the computing environment comprises:
communicating the ameliorative action to an administrator of the computing environment.
7. The computer-implemented method of claim 5 , wherein the effectuating the application of the at least one ameliorative action to the computing environment comprises:
automatically applying the ameliorative action to the computing environment.
8. The computer-implemented method of claim 1 , wherein the computing environment is a datacenter and the plurality of managed components comprises hardware components and virtual components of the datacenter.
9. The computer-implemented method of claim 1 , wherein the performing the anomaly detection of the plurality of managed components comprises:
accessing analytics for other computing environments; and
performing the anomaly detection of the computing environment utilizing the analytics for other computing environments.
10. The computer-implemented method of claim 1 , wherein the performing the anomaly detection of the plurality of managed components comprises:
applying a plurality of rules to the temporal topology graph; and
identifying the anomaly based on the plurality of rules.
11. The computer-implemented method of claim 1 , wherein the performing the anomaly detection of the plurality of managed components comprises:
accessing a plurality of event patterns;
performing pattern matching on the event data by comparing a portion of the event data to the plurality of event patterns; and
identifying the anomaly based on the pattern matching.
12. The computer-implemented method of claim 11 , wherein the pattern matching is performed utilizing machine-learning.
13. A non-transitory computer readable storage medium having computer readable program code stored thereon for performing a method of temporal analysis of a computing environment using event data and managed component relationship data, the method comprising:
receiving, at a service provider, managed component relationship data for a plurality of managed components of a computing environment, the managed component relationship data comprising parent/child information for a managed component of the plurality of managed components at a moment in time, wherein the managed component relationship data is generated at each managed component of the plurality of managed components and is communicated from the plurality of managed components to the service provider;
transforming, by the service provider, the managed component relationship data into graphical data of a temporal topology graph of the computing environment, wherein the temporal topology graph includes the moment in time for each instance of the managed component relationship data within the temporal topology graph;
generating, by the service provider, the temporal topology graph of the computing environment;
receiving event data for the plurality of managed components of the computing environment;
performing anomaly detection of the computing environment based on the event data and the temporal topology graph of the computing environment, where an anomaly is indicative of a non-ideal state of the computing environment;
identifying at least one ameliorative action to apply to the computing environment for correcting the anomaly; and
effectuating application of the at least one ameliorative action to the computing environment.
14. The non-transitory computer readable storage medium of claim 13 , wherein the performing the anomaly detection of the plurality of managed components comprises:
accessing analytics for other computing environments; and
performing the anomaly detection of the computing environment utilizing the analytics for other computing environments.
15. The non-transitory computer readable storage medium of claim 13 , wherein the performing the anomaly detection of the plurality of managed components comprises:
applying a plurality of rules to the temporal topology graph; and
identifying the anomaly based on the plurality of rules.
16. The non-transitory computer readable storage medium of claim 13 , wherein the performing the anomaly detection of the plurality of managed components comprises:
accessing a plurality of event patterns;
performing pattern matching on the event data by comparing a portion of the event data to the plurality of event patterns; and
identifying the anomaly based on the pattern matching.
17. The non-transitory computer readable storage medium of claim 16 , wherein the pattern matching is performed utilizing machine-learning.
18. The non-transitory computer readable storage medium of claim 13 , the method further comprising:
correlating the event data to the temporal topology graph; and
identifying an instance of the event data causing a change in topology of the computing environment.
19. The non-transitory computer readable storage medium of claim 18 , wherein the identifying the at least one ameliorative action to apply to the computing environment for correcting the anomaly comprises:
utilizing the instance of the event data causing a change in topology of the computing environment to identify the ameliorative action.
20. A system for temporal analysis of a computing environment using event data and managed component relationship data, the system comprising:
a data storage unit; and
a processor communicatively coupled with the data storage unit, the processor configured to:
receive, at a service provider, managed component relationship data for a plurality of managed components of a computing environment, the managed component relationship data comprising parent/child information for a managed component of the plurality of managed components at a moment in time, wherein the managed component relationship data is generated at each managed component of the plurality of managed components and is communicated from the plurality of managed components to the service provider;
transform, by the service provider, the managed component relationship data into graphical data of a temporal topology graph of the computing environment, wherein the temporal topology graph includes the moment in time for each instance of the managed component relationship data within the temporal topology graph;
generate, by the service provider, the temporal topology graph of the computing environment;
receive event data for the plurality of managed components of the computing environment;
perform anomaly detection of the computing environment based on the event data and the temporal topology graph of the computing environment, where an anomaly is indicative of a non-ideal state of the computing environment;
identify at least one ameliorative action to apply to the computing environment for correcting the anomaly; and
effectuate application of the at least one ameliorative action to the computing environment.