IP Library › Granted Patent US 12,517,773
Granted Patent B2
US 12,517,773 · App. 18/473,410 · Granted Jan 6, 2026

Microservices anomaly detection and control of logging operations

Inventors: Bijan Kumar Mohanty (Austin, TX); Rajiv Popat (Kolkata, IN); Hung Dinh (Austin, TX)
Assignee: Dell Products L.P.
G06F11/006G06F11/0709G06F11/0787G06F2201/86
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,517,773
App. No.
18/473,410
Granted
Jan 6, 2026
Kind
B2
Abstract

A method comprises analyzing, using one or more machine learning algorithms, parameters corresponding to at least one microservice operation processed by a first instance of a microservice, and predicting, based at least in part on the analyzing, whether the at least one microservice operation is anomalous. The first instance of the microservice is designated as being in an anomalous state responsive to predicting that the at least one microservice operation is anomalous. One or more requests for the microservice are routed to a second instance of the microservice responsive to the anomalous state designation. The method further comprises causing logging of information corresponding to operation of the second instance of the microservice to be enabled at a designated level of granularity.

Claims (56)

1 . A method comprising:

analyzing, using one or more machine learning algorithms, parameters corresponding to at least one microservice operation processed by a first instance of a microservice, wherein operation of the first instance of the microservice is logged at a first level of granularity;

predicting, based at least in part on the analyzing, whether the at least one microservice operation is anomalous;

designating the first instance of the microservice as being in an anomalous state responsive to predicting that the at least one microservice operation is anomalous;

routing one or more requests for the microservice to a second instance of the microservice responsive to the anomalous state designation;

causing logging of information corresponding to operation of the second instance of the microservice to be enabled at a higher second level of granularity; and

verifying the anomalous state designation of the first instance of the microservice, wherein the verifying comprises:

routing at least one request for the microservice to the first instance of the microservice instead of the second instance of the microservice;

collecting additional parameters corresponding to processing by the first instance of the microservice of a microservice operation associated with the at least one request;

analyzing the additional parameters using the one or more machine learning algorithms; and

predicting, based at least in part on the analyzing, whether the microservice operation associated with the at least one request is anomalous;

wherein the steps of the method are executed by a processing device operatively coupled to a memory.

2 . The method of claim 1 further comprising creating the second instance of the microservice in a container with code to enable the logging of the information corresponding to the operation of the second instance of the microservice at the higher second level of granularity.

3 . The method of claim 1 wherein the higher second level of granularity comprises at least one of a trace logging level, a debug logging level and an info logging level.

4 . The method of claim 1 further comprising determining whether a threshold number of microservice operations of a plurality of microservice operations processed by the first instance of the microservice have been predicted as anomalous before designating the first instance of the microservice as being in an anomalous state.

5 . The method of claim 4 wherein the threshold number of microservice operations comprises a consecutive number of microservice operations processed by the first instance of the microservice.

6 . The method of claim 1 wherein the parameters comprise at least one of a microservice identifier, a request time of the at least one microservice operation, a response time of the at least one microservice operation, latency of the at least one microservice operation and a number of errors associated with the at least one microservice operation.

7 . The method of claim 6 wherein the errors associated with the at least one microservice operation comprise non-retriable errors.

8 . The method of claim 1 wherein the first instance of the microservice is hosted in a first container and the second instance of the microservice is hosted in a second container.

9 . The method of claim 8 wherein the first container is a component of a first host device and the second container is a component of a second host device.

10 . The method of claim 8 further comprising creating the second instance of the microservice in the second container with code to enable the logging of the information corresponding to the operation of the second instance of the microservice at the higher second level of granularity.

11 . The method of claim 1 wherein the one or more machine learning algorithms utilize an unsupervised learning technique to detect one or more outlier parameters of the parameters.

12 . The method of claim 1 wherein the one or more machine learning algorithms are trained with training data comprising historical parameter data.

13 . The method of claim 1 further comprising:

maintaining the anomalous state designation of the first instance of the microservice responsive to predicting that the microservice operation associated with the at least one request is anomalous; and

changing the anomalous state designation of the first instance of the microservice to a normal state designation responsive to predicting that the microservice operation associated with the at least one request is not anomalous.

14 . The method of claim 13 further comprising routing subsequent requests for the microservice to the first instance of the microservice responsive to the normal state designation.

15 . An apparatus comprising:

a processing device operatively coupled to a memory and configured:

to analyze, using one or more machine learning algorithms, parameters corresponding to at least one microservice operation processed by a first instance of a microservice, wherein operation of the first instance of the microservice is logged at a first level of granularity;

to predict, based at least in part on the analyzing, whether the at least one microservice operation is anomalous;

to designate the first instance of the microservice as being in an anomalous state responsive to predicting that the at least one microservice operation is anomalous;

to route one or more requests for the microservice to a second instance of the microservice responsive to the anomalous state designation;

to cause logging of information corresponding to operation of the second instance of the microservice to be enabled at a higher second level of granularity; and

to verify the anomalous state designation of the first instance of the microservice, wherein the verifying comprises:

routing at least one request for the microservice to the first instance of the microservice instead of the second instance of the microservice;

collecting additional parameters corresponding to processing by the first instance of the microservice of a microservice operation associated with the at least one request;

analyzing the additional parameters using the one or more machine learning algorithms; and

predicting, based at least in part on the analyzing, whether the microservice operation associated with the at least one request is anomalous.

16 . The apparatus of claim 15 wherein the processing device is further configured to create the second instance of the microservice in a container with code to enable the logging of the information corresponding to the operation of the second instance of the microservice at the higher second level of granularity.

17 . The apparatus of claim 15 wherein the higher second level of granularity comprises at least one of a trace logging level, a debug logging level and an info logging level.

18 . The apparatus of claim 15 , wherein the processing device is further configured to:

maintain the anomalous state designation of the first instance of the microservice responsive to predicting that the microservice operation associated with the at least one request is anomalous; and

change the anomalous state designation of the first instance of the microservice to a normal state designation responsive to predicting that the microservice operation associated with the at least one request is not anomalous.

19 . An article of manufacture comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device to perform the steps of:

analyzing, using one or more machine learning algorithms, parameters corresponding to at least one microservice operation processed by a first instance of a microservice, wherein operation of the first instance of the microservice is logged at a first level of granularity;

predicting, based at least in part on the analyzing, whether the at least one microservice operation is anomalous;

designating the first instance of the microservice as being in an anomalous state responsive to predicting that the at least one microservice operation is anomalous;

routing one or more requests for the microservice to a second instance of the microservice responsive to the anomalous state designation;

causing logging of information corresponding to operation of the second instance of the microservice to be enabled at a higher second level of granularity; and

verifying the anomalous state designation of the first instance of the microservice, wherein the verifying comprises:

routing at least one request for the microservice to the first instance of the microservice instead of the second instance of the microservice;

collecting additional parameters corresponding to processing by the first instance of the microservice of a microservice operation associated with the at least one request;

analyzing the additional parameters using the one or more machine learning algorithms; and

predicting, based at least in part on the analyzing, whether the microservice operation associated with the at least one request is anomalous.

20 . The article of manufacture of claim 19 wherein the program code further causes said at least one processing device to perform the step of creating the second instance of the microservice in a container with code to enable the logging of the information corresponding to the operation of the second instance of the microservice at the higher second level of granularity.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 25, 2023
From: MOHANTY, BIJAN KUMAR; POPAT, RAJIV; DINH, HUNG
To: DELL PRODUCTS L.P.
Reel/Frame 065006/0379 →
Continuity (1)
Related Publication 20250103410A1 · Mar 27, 2025
References Cited (15)
US 11223522B1 · Sethi · 2022 [cited by examiner]
US 11240146B2 · Farnham · 2022 [cited by examiner]
US 11989287B2 · Mohanty · 2024 [cited by examiner]
US 12019502B2 · Mohanty · 2024 [cited by examiner]
US 20180248771A1 · Côté · 2018 [cited by examiner]
US 20210058424A1 · Chang · 2021 [cited by examiner]
US 20230124166A1 · Mohanty et al. · 2023 [cited by applicant]
Google Scholar/Patents search—text refined (Year: 2025). [cited by examiner]
Wikipedia, “Isolation Forest,” https://en.wikipedia.org/w/index.php?title=Isolation_forest&oldid=1029032059, Jun. 17, 2021, 7 pages. [cited by applicant]
Jeremy H. “4 Microservices Examples: Amazon, Netflix, Uber, and Etsy,” https://blog.dreamfactory.com/microservices-examples/, Jul. 14, 2021, 12 pages. [cited by applicant]
J. Lewis et al., “Microservices: A Definition of This New Architectural Term,” https://martinfowler.com/articles/microservices.html, Mar. 25, 2014, 32 pages. [cited by applicant]
A. Isaiah, “Log Levels Explained and How to Use Them,” https://betterstack.com/community/guides/logging/log-levels-explained/, Aug. 4, 2023, 23 pages. [cited by applicant]
J. Li, “What Does It Mean “Transaction Is Retryable”, In Particular to Handle Error of “Transaction Too Old”?” https://forums.foundationdb.org/t/what-does-it-mean-transaction-is-retryable-in-particular-to-handle-error-o… [cited by applicant]
R. Kuc, “Understanding Logging Levels: What They Are & How To Use Them,” https://sematext.com/blog/logging-levels/, Oct. 8, 2020, 12 pages. [cited by applicant]
U.S. Appl. No. 17/828,357 filed in the name of Bijan Kumar Mohanty et al. on May 31, 2022, and entitled “Microservices Anomaly Detection.” [cited by applicant]