Bayesian Network Root Cause Analysis for Kubernetes Failures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Troubleshooting in dynamic computing environments like Kubernetes is challenging due to complex resource dependencies, requiring tools that can accurately identify the root cause of failures amidst numerous potential causes, which current visualization tools fail to do effectively.

Innovation Solution

A system and method using a Bayesian network generated from a correlation directed acyclic graph (CDAG) of computing system entities, with edge weights derived from log entries and a dictionary file, to compute posterior probabilities of possible failure causes, thereby identifying probable causes with associated likelihoods.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If current visualization tools are used to analyze dependencies, then resource dependencies can be visualized, but the root cause of failures cannot be accurately identified

Engineering Contradiction:
Improveaccuracy of failure diagnosisVSAvoidcomplexity of analysis system
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent introduces a Bayesian network as an intermediary computational model between the complex dependency graph and the failure analysis task. This intermediary layer processes the dependency relationships and computes posterior probabilities, enabling accurate root cause identification without requiring direct complex analysis of all resource dependencies by the user.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces manual visual analysis and mechanical troubleshooting processes with an automated probabilistic computation system. The Bayesian network automatically computes failure probabilities based on observed failures and dependency relationships, substituting human expert analysis with algorithmic probability computation.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If manual analysis of resource dependencies is performed, then potential causes can be identified, but significant time is required for root cause analysis

Engineering Contradiction:
Improvespeed of failure analysisVSAvoidtime for root cause analysis
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent performs preliminary action by pre-computing the Bayesian network structure and conditional probability tables from the dependency graph before failure analysis is needed. When a failure occurs, the system can quickly compute posterior probabilities using the pre-prepared model, significantly reducing the time required for root cause analysis compared to building the analysis model from scratch.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If comprehensive dependency tracking is implemented, then all potential failure causes can be identified, but the system becomes more complex and difficult to manage

Engineering Contradiction:
Improvecompleteness of failure analysisVSAvoidcomplexity of dependency management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts only the essential dependency relationships needed for failure analysis from the complete system state, representing them in a simplified Bayesian network structure. This extraction process maintains the necessary information for comprehensive failure analysis while removing unnecessary complexity from the management and visualization of all possible dependencies.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11561850B1System and method for performing failure analysis on a computing system using a bayesian network
Publication Date: 2023.01.24 VMWARE INC
  • US11561850B1 patent drawing
  • US11561850B1 patent drawing
  • US11561850B1 patent drawing

AI summary

A system and method for performing a failure analysis on a computing system uses a Bayesian network that is generated from a correlation directed acyclic graph (CDAG) of nodes that represent entities in the computing system with edge weights for edges between the nodes. The CDAG is generated using log entries of the computing system with reference to a dictionary file, which specifies entity types, dependency types of the entity types, expressions that return values representing prior probabilities of failure for the dependency types, and the edge weights for the dependency types. The Bayesian network generated from the CDAG includes conditional probabilities for edges of the Bayesian network based on the edge weights of the CDAG. The Bayesian network is used to compute posterior probabilities of possible causes of a new failure event in the computing system and output at least one probable cause with an associated posterior probability for the new failure event.