474e4b8917
Currently, README has invalid markup which will not be rendered on PyPI. This patch updates README to be rendered on PyPI and to be more readable. Change-Id: Ic081c0729e44f4e09ac21c47a5dbbd0da6deb77f
21 lines
1.8 KiB
Markdown
21 lines
1.8 KiB
Markdown
# Example Use Cases
|
|
|
|
Below are few use cases that are relevant to OpenStack. However, MoNanas
|
|
enables you to add your own [data ingestors](doc/dev_guide.md#ingestors).
|
|
|
|
| Example | Alert Fatigue Management | Anomaly Detection |
|
|
|:------------------------------|:-------------------------|:------------------|
|
|
| **Dataset** | Synthetic, but representative, set of Monasca alerts that are processed in a stream manner. This alert set represents alerts that are seen in a data center consisting of several racks, enclosures and nodes. | `iptables` rules together with the number of times they are fired in a time period. |
|
|
| **Parsing** | Monasca alert parser. | Simple parser extracting period and number of fire events per rule. |
|
|
| **SML algorithm flow** | `filter(bad_formatted) -> filter(duplicates) -> aggregate() >> aggregator` aggregation can utilize conditional independence causality, score-based causality, linear algebra causality. | `detect_anomaly() >> aggregator` anomaly detection could be based on SVM, trend, etc. |
|
|
| **Output** | Directed acyclic alert graph with potential root causes at the top. | Rule set with an anomalous number of firing times in a time period. |
|
|
| **:information_source: Note** | Even though this could be consumed directly by devops, the usage of [Vitrage MoNanas Sink](doc/getting_started.md#vitrage_sink) is recommended. The output of this module can speed up creation of a [Vitrage](https://wiki.openstack.org/wiki/Vitrage) entity graph to do further analysis on it. | None. |
|
|
|
|
`->` indicates a sequential operation in the flow.
|
|
|
|
`//` indicates beginning of group of operations running in parallel.
|
|
|
|
`-` indicates operations running in parallel.
|
|
|
|
`>>` indicates end of group of operations running in parallel.
|