Patent attributes
Implementations described herein relate to methods, systems, and computer-readable media to identify anomalous applications. In some implementations, the methods may include obtaining application metric data that includes application level metrics and instance level metrics for each instance of a plurality of instances associated with a respective application of a plurality of applications operating over a distributed computing system, generating a first anomaly detection score based on the instance level metrics; generating a second anomaly detection score based on one or more input metrics associated with the respective application, generating a third anomaly detection score based on seasonal metric data associated with the respective application and identifying at least one application of the plurality of applications as an anomalous application based on the first anomaly detection score, the second anomaly detection score, and the third anomaly detection score.
