Abstract:With the development of Artificial Intelligence for IT Operations (AIOps), numerous software and services are monitored by Key Performance Indicators (KPIs) collection components. Multivariate KPIs, as a type of time series data, are essential for effective management of the entity's service quality. In recent years, deep learning methods have made great improvements in the anomaly detection of multivariate time series; however, existing methods have not fully considered how to explicitly capture the correlation between multivariate time series in the feature dimension and temporal dimension, resulting in inevitable abnormal false positives. Therefore, this paper proposes a self-supervised multivariate KPIs anomaly detection method MAD-STA that combines graph structure learning and spatio-temporal GAT (Graph Attention Network). In the feature dimension, MAD-STA introduces a node embedding mechanism for graph structure learning and then uses the feature-oriented GAT layer to compute the graph attention coefficient to obtain the correlation between different KPIs. In the temporal dimension, MAD-STA uses the time-oriented GAT layer to compute attention weights between correlated timestamps, and the GRU-based VAE encoder captures long-term dependence to extract more comprehensive temporal feature representations. Finally, MAD-STA uses GRU-based VAE decoder to reconstruct the captured high-level features and achieves efficient anomaly detection and localization by calculating the anomaly score of multiple KPIs. Compared with the baseline methods on multiple data sets, the experimental results show that the anomaly detection accuracy of MAD-STA is better than that of the baseline method. Especially on the KPI data sets of the two server clusters of SMD and CKM, MAD-STA improves the performance and the F1 comprehensive index compared with the best baseline method. In addition, MAD-STA performs well on anomaly false positive rate and has excellent interpretability, which can be used to assist anomaly diagnosis and root cause index analysis.

Rapid Deployment of Anomaly Detection Models for Large Number of Emerging KPI Streams.

Robust and Unsupervised KPI Anomaly Detection Based on Highly Sensitive Conditional Variational Auto-Encoders.

Intelligent Detection of Large-Scale KPI Streams Anomaly Based on Transfer Learning.

Large-Scale KPI Anomaly Detection Based on Ensemble Learning and Clustering

KPI-TSAD: A Time-Series Anomaly Detector for KPI Monitoring in Cloud Applications.

Robust KPI Anomaly Detection for Large-Scale Software Services with Partial Labels

Unsupervised Online Anomaly Detection with Parameter Adaptation for KPI Abrupt Changes.

AutoKAD: Empowering KPI Anomaly Detection with Label-Free Deployment

Unsupervised Anomaly Detection Via DBSCAN for KPIs Jitters in Network Managements

Enhanced KPI Anomaly Detection: An Unsupervised Hybrid Model with Dynamic Threshold.

Intelligent Detection for Key Performance Indicators in Industrial-Based Cyber-Physical Systems

Unsupervised Anomaly Detection for Intricate KPIs via Adversarial Training of VAE

Practical and White-Box Anomaly Detection through Unsupervised and Active Learning

Little Help Makes a Big Difference: Leveraging Active Learning to Improve Unsupervised Time Series Anomaly Detection

Efficient KPI Anomaly Detection Through Transfer Learning for Large-Scale Web Services

Long Short Term Memory Networks Based Anomaly Detection for KPIs

Robust and Rapid Clustering of KPIs for Large-Scale Anomaly Detection

A Multivariate KPIs Anomaly Detection Framework with Dynamic Balancing Loss Training

Anomaly Detection for Key Performance Indicators by Fusing Self-Supervised Spatio-Temporal Graph Attention Networks

MTAD: Tools and Benchmarks for Multivariate Time Series Anomaly Detection

Joint Learning-Based Anomaly Detection on KPI Data