Abstract:The microservice architecture has been commonly adopted by large scale software systems exemplified by a wide range of online services. Service monitoring through anomaly detection and root cause analysis (RCA) is crucial for these microservice systems to provide stable and continued services. However, compared with monolithic systems, software systems based on the layered microservice architecture are inherently complex and commonly involve entities at different levels of granularity. Therefore, for effective service monitoring, these systems have a special requirement of multi-granular RCA. Furthermore, as a large proportion of anomalies in microservice systems pertain to problematic code, to timely troubleshoot these anomalies, these systems have another special requirement of RCA at the finest code-level. Microservice systems rely on telemetry data to perform service monitoring and RCA of service anomalies. The majority of existing RCA approaches are only based on a single type of telemetry data and as a result can only support uni-granular RCA at either application-level or service-level. Although there are attempts to combine metric and tracing data in RCA, their objective is to improve RCA's efficiency or accuracy rather than to support multi-granular RCA. In this article, we propose a new RCA solution TrinityRCL that is able to localize the root causes of anomalies at multiple levels of granularity including application-level, service-level, host-level, and metric-level, with the unique capability of code-level localization by harnessing all three types of telemetry data to construct a causal graph representing the intricate, dynamic, and nondeterministic relationships among the various entities related to the anomalies. By implementing and deploying TrinityRCL in a real production environment, we evaluate TrinityRCL against two baseline methods and the results show that TrinityRCL has a significant performance advantage in terms of accuracy at the same level of granularity with comparable efficiency and is particularly effective to support large-scale systems with massive telemetry data.

FTM-RCA: A Fast Two-Stage Multi-dimensional Root-Cause Analysis of Network Anomalies.

CMMD: Cross-Metric Multi-Dimensional Root Cause Analysis

TrinityRCL: Multi-Granular and Code-Level Root Cause Localization Using Multiple Types of Telemetry Data in Microservice Systems

NetRCA: An Effective Network Fault Cause Localization Algorithm

A Real-Time Trace-Level Root-Cause Diagnosis System in Alibaba Datacenters

SparseRCA: Unsupervised Root Cause Analysis in Sparse Microservice Testing Traces

Root cause analysis of network fault based on random forest

CausalRCA: Causal Inference based Precise Fine-grained Root Cause Localization for Microservice Applications

Distributed Data Mining For Root Causes Of Kpi Faults In Wireless Networks

PyRCA: A Library for Metric-based Root Cause Analysis

G-RCA: a Generic Root Cause Analysis Platform for Service Quality Management in Large IP Networks

PORCA: Root Cause Analysis with Partially Observed Data

Disentangled Causal Graph Learning for Online Unsupervised Root Cause Analysis

Large-Scale Network Traffic Analysis and Retrieval System Using CFS Algorithm

TraceDiag: Adaptive, Interpretable, and Efficient Root Cause Analysis on Large-Scale Microservice Systems

RAPMiner: A Generic Anomaly Localization Mechanism for CDN System with Multi-dimensional KPIs

Multi-dimensional Traffic Anomaly Detection Based on ICA

MTC-NET: A Multi-Channel Independent Anomaly Detection Method for Network Traffic

Causality Enhanced Graph Representation Learning for Alert-Based Root Cause Analysis

Data-Driven Root Cause Analysis via Causal Discovery using Time-To-Event Data

Detecting and Ranking Causal Anomalies in End-to-End Complex System