Cluster Machine Data Visualization for Failure Prediction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The complexity of computing clusters with hundreds of heterogeneous nodes distributed across multiple locations overwhelms standard monitoring and troubleshooting techniques, making it difficult to search, monitor, or review machine data, and discover the causes of failures.

Innovation Solution

A visualization application that indexes machine data from cluster nodes, allowing users to select analysis lenses for real-time or historical data visualization, including heat maps and event overlays, to analyze CPU utilization, memory, and other metrics, facilitating error detection and prediction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If standard monitoring and troubleshooting techniques are used to handle machine data from computing clusters, then the system can process basic data flows, but the techniques become overwhelmed by the volume and complexity of data from hundreds of heterogeneous nodes, making it difficult to search, monitor, or review data and discover failure causes

Engineering Contradiction:
Improvesystem monitoring capabilityVSAvoiddata analysis complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary system that sits between the complex cluster data and the user, providing automated analysis, correlation, and presentation of data. This intermediary handles the complexity of processing data from hundreds of heterogeneous nodes, transforming raw machine data into actionable insights without requiring users to directly manage the underlying complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces manual monitoring and troubleshooting mechanics with automated computational systems. Instead of manually searching through log files and machine data, the system uses automated algorithms, machine learning models, and intelligent agents to detect anomalies, correlate events, and identify failure causes, substituting human mechanical analysis with computational automation.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If the number of nodes in computing clusters increases to handle larger data sets and more users, then processing capacity and system capabilities improve, but system complexity increases, making monitoring and troubleshooting more difficult

Engineering Contradiction:
Improvedata processing capacityVSAvoidcluster system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by dividing the monitoring and analysis function into multiple independent components or agents distributed across the cluster. Each node or group of nodes can be monitored by dedicated analysis components, allowing the system to scale to hundreds of nodes without centralizing all complexity in a single monitoring point. This modular approach enables incremental scaling while maintaining manageable complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent creates universal monitoring and analysis components that can operate across heterogeneous node types. The system uses multi-functional agents and analysis tools that can handle diverse data formats, protocols, and node architectures, allowing the same monitoring infrastructure to scale across different node types without requiring type-specific complexity for each node class.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Loss of information

If machine data from cluster nodes is collected for analysis, then comprehensive monitoring information is obtained, but the large amount of unwieldy data makes it difficult to search, monitor, or review

Engineering Contradiction:
Improvemonitoring information completenessVSAvoiddata search and review ease
Core Design Contradiction:
Loss of informationVSEase of operation

Solution Approach 1:

The patent extracts only the most relevant and actionable information from the vast amount of machine data. Instead of presenting all raw data to users, the system uses automated filtering, correlation, and prioritization to extract key metrics, anomalies, and failure indicators. This extraction process maintains information completeness for analysis purposes while presenting only essential information to users, making data review manageable.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent transforms data from traditional flat log file formats into multi-dimensional visual representations and structured formats. By organizing data across multiple dimensions (time, node type, error category, severity), the system enables efficient searching and review through dimensional filtering and visualization, allowing users to navigate large data sets by exploring different dimensional perspectives rather than linearly searching through unwieldy text logs.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11010236B2Predicting system behavior using machine data
Publication Date: 2021.05.18 CISCO TECHNOLOGY INC
  • US11010236B2 patent drawing
  • US11010236B2 patent drawing
  • US11010236B2 patent drawing

AI summary

Embodiments are directed towards the visualization of machine data received from computing clusters. Embodiments may enable improved analysis of computing cluster performance, error detection, troubleshooting, error prediction, or the like. Individual cluster nodes may generate machine data that includes information and data regarding the operation and status of the cluster node. The machine data is received from each cluster node for indexing by one or more indexing applications. The indexed machine data including the complete data set may be stored in one or more index stores. A visualization application enables a user to select one or more analysis lenses that may be used to generate visualizations of the machine data. The visualization application employs the analysis lens to produce visualizations of the computing cluster machine data.