Abstract:The microservice architecture has been commonly adopted by large scale software systems exemplified by a wide range of online services. Service monitoring through anomaly detection and root cause analysis (RCA) is crucial for these microservice systems to provide stable and continued services. However, compared with monolithic systems, software systems based on the layered microservice architecture are inherently complex and commonly involve entities at different levels of granularity. Therefore, for effective service monitoring, these systems have a special requirement of multi-granular RCA. Furthermore, as a large proportion of anomalies in microservice systems pertain to problematic code, to timely troubleshoot these anomalies, these systems have another special requirement of RCA at the finest code-level. Microservice systems rely on telemetry data to perform service monitoring and RCA of service anomalies. The majority of existing RCA approaches are only based on a single type of telemetry data and as a result can only support uni-granular RCA at either application-level or service-level. Although there are attempts to combine metric and tracing data in RCA, their objective is to improve RCA's efficiency or accuracy rather than to support multi-granular RCA. In this article, we propose a new RCA solution TrinityRCL that is able to localize the root causes of anomalies at multiple levels of granularity including application-level, service-level, host-level, and metric-level, with the unique capability of code-level localization by harnessing all three types of telemetry data to construct a causal graph representing the intricate, dynamic, and nondeterministic relationships among the various entities related to the anomalies. By implementing and deploying TrinityRCL in a real production environment, we evaluate TrinityRCL against two baseline methods and the results show that TrinityRCL has a significant performance advantage in terms of accuracy at the same level of granularity with comparable efficiency and is particularly effective to support large-scale systems with massive telemetry data.

Root Cause Analysis for Cloud-Native Applications

CloudRCA: A Root Cause Analysis Framework for Cloud Computing Platforms

Automated Root Cause Analysis with Observability Data - A Comprehensive Review

CloudRanger: Root Cause Identification for Cloud Native Systems

PyRCA: A Library for Metric-based Root Cause Analysis

A Comprehensive Survey on Root Cause Analysis in (Micro) Services: Methodologies, Challenges, and Trends

Online Multi-modal Root Cause Analysis

Mining Root Cause Knowledge from Cloud Service Incident Investigations for AIOps

Microservice Root Cause Analysis with Limited Observability Through Intervention Recognition in the Latent Space

A Real-Time Trace-Level Root-Cause Diagnosis System in Alibaba Datacenters

ServerRCA: Root Cause Analysis for Server Failure Using Operating System Logs

TrinityRCL: Multi-Granular and Code-Level Root Cause Localization Using Multiple Types of Telemetry Data in Microservice Systems

PORCA: Root Cause Analysis with Partially Observed Data

Root Cause Analysis of Outliers with Missing Structural Knowledge

TraceDiag: Adaptive, Interpretable, and Efficient Root Cause Analysis on Large-Scale Microservice Systems

LogRCA: Log-based Root Cause Analysis for Distributed Services

FaaSRCA: Full Lifecycle Root Cause Analysis for Serverless Applications

GRANO: Interactive Graph-based Root Cause Analysis for Cloud-Native Distributed Data Platform

Practical Root Cause Localization for Microservice Systems Via Trace Analysis

G-RCA: a Generic Root Cause Analysis Platform for Service Quality Management in Large IP Networks

Groot: An Event-graph-based Approach for Root Cause Analysis in Industrial Settings