Telemetry Heatmap Matching for Duplicate Alert Consolidation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Infrastructure and application monitoring tools generate multiple alerts for the same incident or root cause, leading to inefficiencies as each alert requires investigation by a system engineer.

Innovation Solution

A computing platform trains an image comparison model using historical telemetry state images to identify matches, consolidating system alerts into a single alert when images match, and sending a single alert to a user device with appropriate commands for display.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If monitoring tools generate alerts for each detected issue, then detection sensitivity is improved, but the number of alerts increases leading to engineer inefficiency

Engineering Contradiction:

Improvedetection sensitivityVSAvoidengineer efficiency

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The patent merges multiple alerts into consolidated alerts by comparing telemetry state images. When images from different alerts represent the same system state, the system combines those alerts into a single consolidated alert, reducing the total number of alerts while maintaining detection sensitivity through the image comparison process

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If multiple alerts are generated for the same incident, then comprehensive monitoring is achieved, but time consumption increases as each alert requires investigation

Engineering Contradiction:

Improvemonitoring comprehensivenessVSAvoidinvestigation time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary action by generating and comparing telemetry state images before final alert consolidation. This preliminary image generation and comparison process identifies duplicate alerts in advance, allowing the system to prepare consolidated alerts before engineers need to investigate, thereby reducing investigation time while maintaining comprehensive monitoring

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent creates copies of system state information in the form of telemetry state images. These image copies are then compared to identify duplicates across multiple alerts, enabling the system to distinguish between unique and duplicate issues without requiring engineers to re-investigate identical problems

Inventive Principle:

Principle #26Copying

3Ease of operation

If alert consolidation is implemented, then engineer workload is reduced, but system complexity increases due to image processing requirements

Engineering Contradiction:

Improvealert management easeVSAvoidsystem complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent replaces manual alert review processes with automated image processing and comparison mechanisms. Instead of engineers manually reviewing each alert, the system uses automated telemetry state image generation and comparison algorithms to identify and consolidate duplicate alerts, reducing workload while managing complexity through automation

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250342678A1System and Method for Consolidation of Alerts and Events Using Image Matching of Heatmap Descriptions of Infrastructure Status

Publication Date: 2025.11.06 BANK OF AMERICA CORP

AI summary

A computing platform may train, using historical telemetry state images, an image comparison model to identify matches between telemetry state images. The computing platform may generate a plurality of system alerts corresponding to a period of time. The computing platform may access telemetry data corresponding to the period of time. The computing platform may generate, based on the telemetry data and for a time corresponding to each of the plurality of system alerts, a telemetry state image. The computing platform may input, into the image comparison model, the telemetry state images to identify whether or not any of the plurality of telemetry state images match. Based on detecting a match, the computing platform may consolidate system alerts corresponding to the matching telemetry state images, which may produce a single system alert and may send, to a user device, the single system alert.