Machine Learning Reference

Describes machine learning (ML) including ML status and alert sequences and what it means.

Leave Feedback

Viewing alert sequence clusters

The Alert Sequence Clusters window helps you to visualize the detected alert sequences in your environment. You can view the alert sequences detected from the existing alert data and sequences related to an Inference.

These sequences are unmodified alert sequences fetched from the existing alert data. You can view the alert sequences detected from the existing alert data and sequences related to an Inference.

Similar alert sequences are grouped together. The grouping provides a count for each sequence which helps you to;

  • Visualize the alert sequences.
  • Identify the number of times alerts are triggered in a certain sequence.

The alert sequence clusters window serves as a verification of ML correlation. For example, if ML correlates alerts cpu.utilization and system.ping together, you can use the Alert Sequence Clusters window to find the sequences that have cpu.utilization and system.ping together.

Viewing alert sequences detected from the existing alert data

To view the alert sequences detected from existing alert data:

  1. From All Clients, select a client.
  2. Go to Setup > Alert Management > Alert Correlation.
  3. Click on an ML-based alert correlation policy. Note: You can easily identify an ML-based alert correlation policy. The ML Status against the policy contains a status like Training Started, Ready, and so on.
  4. From the Policy Definition field, click Detected alert sequence patterns in alert data.
    The alert sequences displayed on the Alert Sequence Clusters window are the top alert sequences.
    When you expand an alert sequence, the sub-sequence clusters are displayed.
    Alert Sequence Cluster Metrics

    Alert Sequence Cluster Metrics

    When you search for alert sequences in the Alert Sequence Clusters window, the alerts sequences that match the entered alert metric are highlighted in blue.
    Alert Sequence Cluster Window

    Alert Sequence Cluster Window

To view alert sequences related to an inference:

  1. From All Clients, select Alerts and click on the required Inference name.
  2. Click Correlated Alerts tab.
  3. From list of correlated alerts, click Show detected alert sequence patterns.
    Detected Sequences of an Inference

    Detected Sequences of an Inference

    Alert Sequence Clusters window appears.

Viewing ML status

Machine Learning (ML) status helps you understand the various stages of machine learning implementation in a policy from analyzing a sequence to correlating alerts.

ML Status
ML StatusDescription
Insufficient data. The policy is temporarily disabled. Due to insufficient data, the machine learning model cannot detect the alert sequences, and correlation does not happen. Hence, the policy is temporarily disabled. The policy becomes active when the machine learning model finds sufficient data.
Training ML model is queued. To use, please wait for completion. When a policy is created or a CSV file is uploaded to a policy, the training can be queued. If already a policy is in training, the new policy is queued. Once the training on the existing policy is complete, the status of the new policy moves to Training Initiated.
Training ML model is initiated. To use, please wait for completion. Training on the machine learning model is initiated. The status then moves to Training Started.
Training ML model is started. To use, please wait for completion. Training on the machine learning model is started. The progress of the training is visible on the progress bar.
Training ML model is in progress. To use, please wait for completion. Training on the ML model is in progress. The percentage of progress is shown in the progress bar.
ML model training is complete. You are ready to benefit from predictions. Training the ML model is complete. The ML model detects the alert sequences and correlation happens.
ML training encountered an error. Please contact OpsRamp Support.

Viewing processed inferences

To view the number of inferences associated with a policy:

  1. From All Clients, select a client.
  2. Go to Setup > Alert Management > Alert Correlation and select the required policy.
  3. Click on the number in the Processed Inferences column to view the details of the inferences.
Number of Processed Inferences

Number of Processed Inferences

The list of processed inferences appears on the Alerts Browser page.

List of processed inferences

List of processed inferences