Discovering actionable patterns in event data
نویسندگان
چکیده
Applications such as those for systems management and intrusion detection employ an automated real-time operation system in which sensor data are collected and processed in real time. Although such a system effectively reduces the need for operation staff, it requires constructing and maintaining correlation rules. Currently, rule construction requires experts to identify problem patterns, a process that is timeconsuming and error-prone. In this paper, we propose reducing this burden by mining historical data that are readily available. Specifically, we first present efficient algorithms to mine three types of important patterns from historical event data: event bursts, periodic patterns, and mutually dependent patterns. We then discuss a framework for efficiently mining events that have multiple attributes. Last, we present Event Correlation Constructor—a tool that validates and extends correlation knowledge.
منابع مشابه
Discovery of Actionable Patterns in Databases: The Action Hierarchy Approach
An approach to defining actionability as a measure of interestingness of patterns is proposed. This approach is based on the concept of an action hierarchy which is defined as a tree of actions with patterns and pattern templates (data mining queries) assigned to its nodes. A method for discovering actionable patterns is presented and various techniques for optimizing the discovery process are ...
متن کاملMining Partially Periodic Event Patterns with Unknown Periods
We consider the problem of discovering partially periodic temporal associations, which we call p-patterns. In computer networks, a p-pattern might consist of ve repetitions every 30 seconds of a port-down event followed by a port-up event, which in turn is followed by a random gap until the next ve repetitions of these events. Finding p-patterns consists of two sub-tasks: (1) nding period lengt...
متن کاملDiscovering Cost-Effective Action Rules
Mining informative patterns from databases is the historical task of data mining. But now, mining actionable patterns is becoming the new duty of data mining. Most of machine learning and data mining algorithms only focus on finding patterns and usually don't take any step for suggesting actions and users will be responsible for it. Therefore users will be faced with many patterns that they are...
متن کاملEfficient Discovering of Top-K Sequential Patterns in Event-Based Spatio-Temporal Data
We consider the problem of discovering sequential patterns from event-based spatio-temporal data. The dataset is described by a set of event types and their instances. Based on the given dataset, the task is to discover all significant sequential patterns denoting some attraction relation between event types occurring in a pattern. Already proposed algorithms discover all significant sequential...
متن کاملFrom data to classification rules and actions
Action rules (or actionable patterns) describe possible transitions of objects from one state to another with respect to a distinguished attribute. Strategies for discovering them can be divided into two types: rule-based and objectbased. Rule-based actionable patterns are built on the foundations of pre-existing rules. This approach consists of two main steps: (1) a standard learning method is...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید
ثبت ناماگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید
ورودعنوان ژورنال:
- IBM Systems Journal
دوره 41 شماره
صفحات -
تاریخ انتشار 2002