一句话:探索子群发现如何为 AIOps 提供可解释的异常检测、根因分析与修复支持。
现代 IT 系统监督要求可扩展、可靠且高效地分析监控大数据流。规则推理引擎虽用于异常检测与自动修复,但局限于简单通用规则,难以处理海量数据和大量告警。AIOps 借助高级分析与机器学习自动化监督流程,辅助检测故障、识别根因并执行修复,然而高效 AIOps 技术常依赖不透明模型,阻碍采用。本文博士研究探讨子群发现(Subgroup Discovery)如何帮助 AIOps:该数据挖掘技术可从数据中提取有趣假设,并解释预测模型背后的过程。项目联合数据挖掘研究者与法国软件公司 Infologic 的实践者,以确保所提方案的相关性。
The genuine supervision of modern IT systems brings new challenges as it requires higher standards of scalability, reliability and efficiency when analysing and monitoring big data streams. Rule-based inference engines are a key component of maintenance systems in detecting anomalies and automating their resolution. However, they remain confined to simple and general rules and cannot handle the huge amount of data, nor the large number of alerts raised by IT systems, a lesson learned from expert systems era. Artificial Intelligence for Operation Systems (AIOps) proposes to take advantage of advanced analytics and machine learning on big data to improve and automate every step of supervision systems and aid incident management in detecting outages, identifying root causes and applying appropriate healing actions. Nevertheless, the best AIOps techniques rely on opaque models, strongly limiting their adoption. As a part of this PhD thesis, we study how Subgroup Discovery can help AIOps. This promising data mining technique offers possibilities to extract interesting hypothesis from data and understand the underlying process behind predictive models. To ensure relevancy of our propositions, this project involves both data mining researchers and practitioners from Infologic, a French software editor.