Proactive remediation for information technology assets
An apparatus comprises a processing device configured to obtain monitoring data associated with information technology assets, and to generate, for at least a given one of the information technology assets, a given asset signature representing a status of the given information technology asset based on the obtained monitoring data. The processing device is also configured to determine asset-to-issue similarity between the given asset signature and one or more issue signatures characterizing presence of issue indicators relevant for issue detection for issues encountered on the information technology assets. The processing device is further configured to select, responsive to determining that the given asset signature exhibits at least a threshold level of asset-to-issue similarity with a given issue signature associated with a given issue, proactive remedial actions for remedying the given issue, and to apply the selected proactive remedial actions prior to the given information technology asset encountering the given issue.
1. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured:
to obtain monitoring data associated with a plurality of information technology assets in an information technology infrastructure;
to generate, for at least a given one of the plurality of information technology assets, a given asset signature based at least in part on the obtained monitoring data, the given asset signature representing a status of the given information technology asset;
to determine asset-to-issue similarity between the given asset signature and one or more issue signatures, the one or more issue signatures characterizing presence of a plurality of issue indicators relevant for issue detection for one or more issues encountered on one or more of the plurality of information technology assets;
to select, responsive to determining that the given asset signature exhibits at least a threshold level of asset-to-issue similarity with at least a given one of the one or more issue signatures associated with at least a given one of the one or more issues, one or more proactive remedial actions for remedying the given issue; and
to apply the selected one or more proactive remedial actions to the given information technology asset prior to detecting that the given information technology asset has encountered the given issue.
2. The apparatus of claim 1 wherein the plurality of information technology assets comprise at least one of physical computing resources and virtual computing resources.
3. The apparatus of claim 1 wherein the obtained monitoring data comprises telemetry data collected from the plurality of information technology assets, logs associated with the plurality of information technology assets, and service requests associated with the plurality of information technology assets.
4. The apparatus of claim 1 wherein the obtained monitoring data comprises, for the given information technology asset:
one or more support tickets associated with the given information technology asset;
operating system, application and system logs associated with the one or more support tickets;
hardware telemetry data collected from the given information technology asset; and
software telemetry data collected from one or more operating systems and applications running on the given information technology asset.
5. The apparatus of claim 1 wherein the obtained monitoring data comprises, for the given information technology asset:
crowdsourced issue indicators and at least one of diagnosis and remediation data for the crowdsourced issue indicators;
notifications and patches supplied by at least one of an original equipment manufacturer and a distributor of the given information technology asset; and
repair depot data from one or more repair centers.
6. The apparatus of claim 1 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the selected one or more proactive remedial actions are applied to each information technology asset in the group of two or more of the plurality of information technology assets.
7. The apparatus of claim 1 wherein the given asset signature comprises a numeric vector encoding whether respective ones of the plurality of issue indicators are observed on the given information technology asset.
8. The apparatus of claim 1 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the given asset signature comprises a numeric vector encoding counts of numbers of information technology assets in the group of two or more of the plurality of information technology assets for which respective ones of the plurality of issue indicators are observed.
9. The apparatus of claim 1 wherein the at least one processing device is further configured:
to identify one or more additional ones of the plurality of information technology assets having asset signatures exhibiting at least a threshold level of asset-to-asset similarity with the given asset signature; and
to apply the selected one or more proactive remedial actions to the identified one or more additional ones of the plurality of information technology assets.
10. The apparatus of claim 1 wherein selecting the one or more proactive remedial actions comprises, for a given one of the one or more proactive remedial actions, determining an applicability coefficient characterizing a probability of success of the given proactive remedial action for remedying the given issue and applicability of the given proactive remedial action based at least in part on the status of the given information technology asset.
11. The apparatus of claim 10 wherein the applicability coefficient is determined based at least in part on an issue criticality of the given issue, an asset criticality of the given information technology asset, and a percentage match between the given asset signature and the given issue signature associated with the given issue.
12. The apparatus of claim 10 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the applicability coefficient is determined based at least in part on a comparison of (i) a number of information technology assets in the group of two or more of the plurality of information technology assets which are potentially affected by the given issue and (ii) a total number of information technology assets in the group of two or more of the plurality of information technology assets.
13. The apparatus of claim 1 wherein selecting the one or more proactive remedial actions comprises selecting one or more automatically generated remediation scripts based at least in part on the obtained monitoring data and remediation data from one or more additional data sources, the one or more additional data sources comprising at least one of a repository of previously-generated remediation scripts, patches provided by a hardware vendor of the given information technology asset, patches provided by one or more software vendors of software running on the given information technology asset, and crowdsourced solution data.
14. The apparatus of claim 13 wherein selecting the one or more automatically generated remediation scripts is further based at least in part on criticality information of the given issue, success rate for remediating the given issue utilizing the one or more automatically generated remediation scripts, and amounts of code in the one or more automatically generated remediation scripts obtained from respective ones of the one or more additional data sources.
15. A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:
to obtain monitoring data associated with a plurality of information technology assets in an information technology infrastructure;
to generate, for at least a given one of the plurality of information technology assets, a given asset signature based at least in part on the obtained monitoring data, the given asset signature representing a status of the given information technology asset;
to determine asset-to-issue similarity between the given asset signature and one or more issue signatures, the one or more issue signatures characterizing presence of a plurality of issue indicators relevant for issue detection for one or more issues encountered on one or more of the plurality of information technology assets;
to select, responsive to determining that the given asset signature exhibits at least a threshold level of asset-to-issue similarity with at least a given one of the one or more issue signatures associated with at least a given one of the one or more issues, one or more proactive remedial actions for remedying the given issue; and
to apply the selected one or more proactive remedial actions to the given information technology asset prior to detecting that the given information technology asset has encountered the given issue.
16. The computer program product of claim 15 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the selected one or more proactive remedial actions are applied to each information technology asset in the group of two or more of the plurality of information technology assets.
17. The computer program product of claim 15 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the given asset signature comprises a numeric vector encoding counts of numbers of information technology assets in the group of two or more of the plurality of information technology assets for which respective ones of the plurality of issue indicators are observed.
18. A method comprising:
obtaining monitoring data associated with a plurality of information technology assets in an information technology infrastructure;
generating, for at least a given one of the plurality of information technology assets, a given asset signature based at least in part on the obtained monitoring data, the given asset signature representing a status of the given information technology asset;
determining asset-to-issue similarity between the given asset signature and one or more issue signatures, the one or more issue signatures characterizing presence of a plurality of issue indicators relevant for issue detection for one or more issues encountered on one or more of the plurality of information technology assets;
selecting, responsive to determining that the given asset signature exhibits at least a threshold level of asset-to-issue similarity with at least a given one of the one or more issue signatures associated with at least a given one of the one or more issues, one or more proactive remedial actions for remedying the given issue; and
applying the selected one or more proactive remedial actions to the given information technology asset prior to detecting that the given information technology asset has encountered the given issue;
wherein the method is performed by at least one processing device comprising a processor coupled to a memory.
19. The method of claim 18 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the selected one or more proactive remedial actions are applied to each information technology asset in the group of two or more of the plurality of information technology assets.
20. The method of claim 18 wherein the given asset signature is generated for a group of two or more of the plurality of information technology assets including the given information technology asset, and wherein the given asset signature comprises a numeric vector encoding counts of numbers of information technology assets in the group of two or more of the plurality of information technology assets for which respective ones of the plurality of issue indicators are observed.