Patent attributes
Methods and systems for performing operations comprising: accessing one or more data objects including a data set that has been collected over a given span of time, the data set representing resource utilization of a given server; generating a first model based on a moving average of a subset of data points in the data set; generating a second model based on a historical value of a given data point in the data set, the given data point having been collected on a prior time period that corresponds to the given time period; combining the first and second models into a third model that provides an expected measure of resource utilization of the given server; and triggering an anomaly detection operation in response to determining that current resource utilization of the given server fails to correspond to the expected measure of resource utilization of the given server.