Alert Analysis of PATHLOAD data
The data being analyzed here is the thrumin values of the pathload data sets.
The algorithm is a simplified and modifed version of the
anomalous event analysis uses a modified "plateau" algorithm (
ppt,
pdf) developed from
Automated Event Detection for Active
Measurement Systems McGregor A. J and Braun H-W.
Connie Logg and Les Cottrell
Program Logic Manual |
Perl pseudo code |
Examples of alerts and
code
This page was created from the pathload data on Sat Sep 6 10:41:54 2008 for iepm on iepm-bw
by: /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/runperiod
The data includes 121 remote hosts.
EVENT SUMMARY
node = iepm-bw.cern.ch
Analyzed at Sat Sep 6 10:41:55 2008 by /afs/slac/package/netmon/bandwidth-tests/v3src/alerts/triganal on iepm-bw for iepm with data from /nfs/slac/g/net/iepm-bw/iepm-bw.slac.stanford.edu/alerts/pathload/iepm-bw.cern.ch
User selected change threshold = 33, data_column=thrumin
(thrumin)
The number of standard deviations that a data value must lie outside the mean to be evaluated as a trigger value is defined by the sensitivity = 2
history buffer size = 432 (7200 mins) entries,
size of trigger buffer = 21 (360 mins) entries, TT = (lastmn - sensitivity*laststd)
nt = number of entries in the trigger buffer
| line color = magenta | drop in bandwidth greater than 33 % |
Bandwidth Data
No Events detected
| NODENAME | lastmean | laststdev | trigmean | trigstdev |
%change last-trig | %change lasttrig-trig | detected D&T | trig-start D&T | tdiff | trigger buffer |
triggers = 0; aborted triggers = 0; alerts = 0; avg. data separation= 16.63 mins; history_buffer_length=432( 119.8 hours); trigger_buffer_length=21( 5.8 hours)