Multi-stage Location for Root-Cause Metrics in Online Service Systems

• Main Authors: Zhao, Yunfeng, Zhang, Wenchi, Wang, Zhiliang, Zhang, Shize, Sui, Kaixin, Dong, Enhuan, Yang, Jiahai
• Format: Conference Proceeding
• Language: English
• Subjects: anomaly detection; Banking; Economics; Location awareness; Maintenance engineering; Measurement; Monitoring; online service systems; root-cause metric; time series; User experience
• ISSN: 2374-9709
• DOI: 10.1109/NOMS56928.2023.10154325

The failure of the online service system will seriously affect the user experience and bring huge economic losses. Therefore, the operators usually monitor service-level metrics and machine-level metrics to help quickly find failures, locate root-cause metrics, and reduce MTTR(mean time to repair). Many methods have emerged in recent years to automatically locate root-cause metrics. However, the existing methods cannot meet the requirements of efficiency, accuracy, and ease of deployment at the same time, and are difficult to use in practice. To overcome their limitations, we propose MetricMiner- a multi-stage location method for root-cause metrics in online service systems. Our approach is based on a key observation from numerous real-world cases: root-cause metrics tend to be unique in both the time dimension and the machine dimension. Therefore, we divide the root-cause metrics localization into three stages: first, quickly filter out normal metrics with limited historical data; second, obtain sufficient historical data to eliminate abnormal metrics; finally, according to the clustering of abnormal metrics between machines to sort and locate root-cause metrics. Experimental results on two real-world datasets with 194 cases show that our method can significantly outperform the state-of-the-art methods. Moreover, MetricMiner has been deployed to multiple banking services for more than six months, and we also shared some lessons learned from real deployment.