KPIRoot+: An Efficient Integrated Framework for Anomaly Detection and Root Cause Analysis in Large-Scale Cloud Systems

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Gu, Wenwei, Zhong, Renyi, Yu, Guangba, Sun, Xinying, Liu, Jinyang, Huo, Yintong, Chen, Zhuangbin, Zhang, Jianping, Gu, Jiazhen, Yang, Yongqiang, Lyu, Michael R.
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866918046312955904
author Gu, Wenwei
Zhong, Renyi
Yu, Guangba
Sun, Xinying
Liu, Jinyang
Huo, Yintong
Chen, Zhuangbin
Zhang, Jianping
Gu, Jiazhen
Yang, Yongqiang
Lyu, Michael R.
author_facet Gu, Wenwei
Zhong, Renyi
Yu, Guangba
Sun, Xinying
Liu, Jinyang
Huo, Yintong
Chen, Zhuangbin
Zhang, Jianping
Gu, Jiazhen
Yang, Yongqiang
Lyu, Michael R.
contents To ensure the reliability of cloud systems, their performance is monitored using KPIs (key performance indicators). When issues arise, root cause localization identifies KPIs responsible for service degradation, aiding in quick diagnosis and resolution. Traditional methods rely on similarity calculations, which can be ineffective in complex, interdependent cloud environments. While deep learning-based approaches model these dependencies better, they often face challenges such as high computational demands and lack of interpretability. To address these issues, KPIRoot is proposed as an efficient method combining similarity and causality analysis. It uses symbolic aggregate approximation for compact KPI representation, improving analysis efficiency. However, deployment in Cloud H revealed two drawbacks: 1) threshold-based anomaly detection misses some performance anomalies, and 2) SAX representation fails to capture intricate variation trends. KPIRoot+ addresses these limitations, outperforming eight state-of-the-art baselines by 2.9% to 35.7%, while reducing time cost by 34.7%. We also share our experience deploying KPIRoot in a large-scale cloud provider's production environment.
format Preprint
id arxiv_https___arxiv_org_abs_2506_04569
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle KPIRoot+: An Efficient Integrated Framework for Anomaly Detection and Root Cause Analysis in Large-Scale Cloud Systems
Gu, Wenwei
Zhong, Renyi
Yu, Guangba
Sun, Xinying
Liu, Jinyang
Huo, Yintong
Chen, Zhuangbin
Zhang, Jianping
Gu, Jiazhen
Yang, Yongqiang
Lyu, Michael R.
Software Engineering
To ensure the reliability of cloud systems, their performance is monitored using KPIs (key performance indicators). When issues arise, root cause localization identifies KPIs responsible for service degradation, aiding in quick diagnosis and resolution. Traditional methods rely on similarity calculations, which can be ineffective in complex, interdependent cloud environments. While deep learning-based approaches model these dependencies better, they often face challenges such as high computational demands and lack of interpretability. To address these issues, KPIRoot is proposed as an efficient method combining similarity and causality analysis. It uses symbolic aggregate approximation for compact KPI representation, improving analysis efficiency. However, deployment in Cloud H revealed two drawbacks: 1) threshold-based anomaly detection misses some performance anomalies, and 2) SAX representation fails to capture intricate variation trends. KPIRoot+ addresses these limitations, outperforming eight state-of-the-art baselines by 2.9% to 35.7%, while reducing time cost by 34.7%. We also share our experience deploying KPIRoot in a large-scale cloud provider's production environment.
title KPIRoot+: An Efficient Integrated Framework for Anomaly Detection and Root Cause Analysis in Large-Scale Cloud Systems
topic Software Engineering
url https://arxiv.org/abs/2506.04569