Abstract:With the development of Artificial Intelligence for IT Operations (AIOps), numerous software and services are monitored by Key Performance Indicators (KPIs) collection components. Multivariate KPIs, as a type of time series data, are essential for effective management of the entity's service quality. In recent years, deep learning methods have made great improvements in the anomaly detection of multivariate time series; however, existing methods have not fully considered how to explicitly capture the correlation between multivariate time series in the feature dimension and temporal dimension, resulting in inevitable abnormal false positives. Therefore, this paper proposes a self-supervised multivariate KPIs anomaly detection method MAD-STA that combines graph structure learning and spatio-temporal GAT (Graph Attention Network). In the feature dimension, MAD-STA introduces a node embedding mechanism for graph structure learning and then uses the feature-oriented GAT layer to compute the graph attention coefficient to obtain the correlation between different KPIs. In the temporal dimension, MAD-STA uses the time-oriented GAT layer to compute attention weights between correlated timestamps, and the GRU-based VAE encoder captures long-term dependence to extract more comprehensive temporal feature representations. Finally, MAD-STA uses GRU-based VAE decoder to reconstruct the captured high-level features and achieves efficient anomaly detection and localization by calculating the anomaly score of multiple KPIs. Compared with the baseline methods on multiple data sets, the experimental results show that the anomaly detection accuracy of MAD-STA is better than that of the baseline method. Especially on the KPI data sets of the two server clusters of SMD and CKM, MAD-STA improves the performance and the F1 comprehensive index compared with the best baseline method. In addition, MAD-STA performs well on anomaly false positive rate and has excellent interpretability, which can be used to assist anomaly diagnosis and root cause index analysis.

Learning Spatial Graph Structure for Multivariate KPI Anomaly Detection in Large-Scale Cyber-Physical Systems.

Anomaly Detection for Key Performance Indicators by Fusing Self-Supervised Spatio-Temporal Graph Attention Networks

Accurate Anomaly Detection Leveraging Knowledge-enhanced GAT

An Unsupervised Spatiotemporal Graphical Modeling Approach to Anomaly Detection in Distributed CPS

A General KPI Anomaly Detection Using Attention Models

Intelligent Detection for Key Performance Indicators in Industrial-Based Cyber-Physical Systems

Joint Learning-Based Anomaly Detection on KPI Data

DPDGAD: A Dual-Process Dynamic Graph-based Anomaly Detection for multivariate time series analysis in cyber-physical systems

Long Short Term Memory Networks Based Anomaly Detection for KPIs

Iterative Graph Propagation for Hyperspectral Anomaly Detection

Large-Scale KPI Anomaly Detection Based on Ensemble Learning and Clustering

A Graph Attention Network-Based Model for Anomaly Detection in Multivariate Time Series

Unsupervised Anomaly Detection Via DBSCAN for KPIs Jitters in Network Managements

KPI Anomaly Detection Based on LSTM with Phase Space

Correlation-aware Spatial-Temporal Graph Learning for Multivariate Time-series Anomaly Detection

Enhanced KPI Anomaly Detection: An Unsupervised Hybrid Model with Dynamic Threshold.

A Multivariate KPIs Anomaly Detection Framework with Dynamic Balancing Loss Training

Rapid Deployment of Anomaly Detection Models for Large Number of Emerging KPI Streams.

Multivariate Time Series Anomaly Detection via Dynamic Graph Forecasting

An Unsupervised Learning-Based Multivariate Anomaly Detection Method for Dynamic Attention Graphs

PRAD: Unsupervised KPI Anomaly Detection by Joint Prediction and Reconstruction of Multivariate Time Series.