惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

B
Blog
Cyberwarzone
Cyberwarzone
Cloudbric
Cloudbric
P
Palo Alto Networks Blog
S
Securelist
Security Latest
Security Latest
T
Tor Project blog
J
Java Code Geeks
量子位
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
腾讯CDC
T
Troy Hunt's Blog
V
Visual Studio Blog
H
Hacker News: Front Page
P
Privacy International News Feed
Jina AI
Jina AI
Hacker News - Newest:
Hacker News - Newest: "LLM"
Apple Machine Learning Research
Apple Machine Learning Research
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
美团技术团队
S
Schneier on Security
N
News and Events Feed by Topic
T
The Exploit Database - CXSecurity.com
The Last Watchdog
The Last Watchdog
Hacker News: Ask HN
Hacker News: Ask HN
Recent Commits to openclaw:main
Recent Commits to openclaw:main
博客园 - 【当耐特】
博客园_首页
爱范儿
爱范儿
阮一峰的网络日志
阮一峰的网络日志
酷 壳 – CoolShell
酷 壳 – CoolShell
罗磊的独立博客
T
Threat Research - Cisco Blogs
雷峰网
雷峰网
N
News and Events Feed by Topic
Google DeepMind News
Google DeepMind News
SecWiki News
SecWiki News
C
Cisco Blogs
L
LINUX DO - 最新话题
MongoDB | Blog
MongoDB | Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
K
Kaspersky official blog
小众软件
小众软件
博客园 - 聂微东
D
Docker
The GitHub Blog
The GitHub Blog
IT之家
IT之家
A
Arctic Wolf
L
LINUX DO - 热门话题

Datadog | The Monitor blog

Introducing our open source AI-native SAST Instrument and monitor Boomi integration flows with OpenTelemetry and Datadog Not all index scans are equal: How we cut query latency by over 99% Platform engineering metrics: What to measure and what to ignore Integrate Recorded Future threat intelligence with Datadog Cloud SIEM CI/CD security: threat modeling using a MITRE-style threat matrix CI/CD security: How to secure your GitHub ecosystem Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API Operating agentic AI with Amazon Bedrock AgentCore and Datadog LLM Observability: Lessons from NTT DATA Introducing the Datadog Code Security MCP Capture and analyze custom heatmaps in Session Replay Understand session replays faster with AI summaries and smart chapters Monitor ClickHouse query performance with Datadog Database Monitoring How we designed empathetic alert sounds for on-call engineers Search and act across Datadog to resolve issues faster with Bits Assistant Measure the business impact of every product change with Datadog Experiments Analyzing round trip query latency Configuring JavaScript caches for better performance Introducing Bits AI Dev Agent for Code Security Datadog achieves ISO 42001 certification for responsible AI Monitor Nutanix clusters, hosts, and VMs with Datadog Monitor Juniper Mist in Datadog A new Host Map for modern infrastructure Annotate traces to improve LLM quality with Datadog LLM Observability What’s new in Cloud SIEM: AI-powered investigations, enhanced threat intelligence, and scalable security operations Explore Kubernetes with native OpenTelemetry data Monitor Oracle Fusion Cloud Applications with Datadog Announcing the Datadog Terraform provider v4.0.0 Scaling Kubernetes workloads on custom metrics How to design cloud environments for AI-powered threat analysis Monitor Aruba Central in Datadog How we centralize and remediate risks with Datadog Case Management Accelerate incident response with Datadog and ServiceNow Monitor your application and network load balancer logs Understanding Karpenter architecture for Kubernetes autoscaling Tools for collecting metrics and logs from Karpenter Monitor Karpenter with Datadog What your product data is actually saying Key metrics for monitoring Karpenter Securing Datadog’s platform in the AI age: The role of observability data Four ways engineering teams use the Datadog MCP Server to power AI agents Approaching your observability migration with the right mindset Meet the new Bits AI SRE: Deeper reasoning, twice as fast Key learnings from the 2026 State of DevSecOps study Use plain English to query your multi-cloud infrastructure in Resource Catalog Simplifying troubleshooting across the user journey with Datadog Synthetic Monitoring Protect your OCI resources with Datadog Cloud Security This Month in Datadog - February 2026 Amazon EC2 security: How misconfigured and public AMIs expand your cloud attack surface Enable end-to-end visibility into your Java apps with a single command Measure and improve mobile app startup performance with Datadog RUM Evaluating our AI Guard application to improve quality and control cost Identify untested code across every level of your codebase Make use of guardrail metrics and stop babysitting your releases Monitor Versa Networks SD-WAN performance in Datadog Improve performance and reliability with APM Recommendations Remediate transitive vulnerabilities faster with Datadog Software Composition Analysis Generate audit-ready vulnerability and compliance reports with Datadog Sheets Monitor Fortinet FortiManager performance in Datadog Improve test coverage across codebases with Datadog Code Coverage Move fast, don’t break things: Consistent testing standards at scale Enrich logs with ServiceNow CMDB context before routing to any SIEM or logging tool Monitor Lustre with Datadog Make faster, better product decisions with Datadog Product Analytics Surface and remediate runtime posture issues with Workload Protection Findings Protect agentic AI applications with Datadog AI Guard How to optimize JavaScript code with CSS Trace Google Pub/Sub workloads in Cloud Run with Datadog Detect human names in logs with ML in Sensitive Data Scanner How we cut our NLQ agent debugging time from hours to minutes with LLM Observability Debug PostgreSQL query latency faster with EXPLAIN ANALYZE in Datadog Database Monitoring Datadog acquires Propolis Unify and correlate frontend and backend data with retention filters Scale compliance across global frameworks with Datadog Cloud Security Monitor Arista VeloCloud SD-WAN performance with Datadog Building reliable dashboard agents with Datadog LLM Observability Simplify log collection and aggregation for MSSPs with Datadog Observability Pipelines Mitigation for Node.js denial-of-service vulnerability affecting Datadog APM Automate flaky test fixes with the Bits AI Dev Agent and Test Optimization How we built an AI SRE agent that investigates like a team of engineers Datadog integrations 2025 recap: Observability for AI, security, and hybrid cloud Design effective executive dashboards with Datadog Implement dbt data quality checks with dbt-expectations Bring faster visibility into AWS Lambda functions with remote instrumentation Troubleshoot faster with the GitLab Source Code integration in Datadog How Cambia Health Solutions saved $30,000 monthly with Cloud Cost Management and the Datadog Resource Catalog Normalize any logs for Cloud SIEM with Datadog's OCSF processor Optimizing Datadog at scale: Cost-efficient observability at Zendesk Detect, diagnose, and resolve network issues easily with CNM Network Health Connect engineering errors to user impact in early-stage products Cilium configuration for Kubernetes operations at scale Designing feedback loops for progressive delivery Ship features faster and safer with Datadog Feature Flags Choosing the right OpenTelemetry Collector distribution Route your monitor alerts with Datadog monitor notification rules Automate Cloud SIEM investigations with Bits AI Security Analyst Cloud threat detection: How to identify risky activity across control and data planes Collecting Kafka performance metrics Monitoring Kafka with Datadog Monitoring Kafka performance metrics
Introducing Toto: A state-of-the-art time series foundation model by Datadog
2024-07-11 · via Datadog | The Monitor blog
Othmane Abou-Amal

Othmane Abou-Amal

Emaad Khwaja

Emaad Khwaja

Ben Cohen

Ben Cohen

Foundation models, or large AI models, are the driving force behind the advancement of generative AI applications that cover an ever-growing list of use cases including chatbots, code completion, autonomous agents, image generation and more. However, when it comes to understanding observability metrics, current large language models (LLMs) are not optimal. LLMs are typically trained on text, images, and/or audiovisual data and do not natively understand structured data modalities such as time series metrics. In order to effectively process, analyze, and make predictions on the numerical time series data most relevant to monitoring, a foundation model needs to:

  • Accurately identify and predict trends and seasonality patterns to detect anomalies, which requires processing a long historical window
  • Be trained on data at a very high frequency, on the scale of seconds or minutes
  • Parse data that represents very high-cardinality and dynamic groups, such as ephemeral infrastructure

Dedicated foundation models for time series and other structured data have the potential to complement and augment the reasoning and natural-language capabilities of general-purpose LLMs. Existing examples such as Salesforce’s Moirai or Google’s TimesFM achieve excellent performance on time series forecasting. However, in our testing they struggle to generalize effectively to observability data, which have characteristics that make them especially challenging to forecast (e.g., high time resolution, sparsity, extreme right skew, historical anomalies).

To overcome this, we developed Time Series Optimized Transformer for Observability (Toto), a state-of-the-art time series forecasting foundation model optimized for observability data, built by Datadog. Toto achieves top performance on several open time series benchmarks, consistently outperforming existing models in key accuracy metrics. By excelling in these measures, Toto ensures reliable and precise forecasting capabilities, advancing the field of time series analysis.

A state-of-the-art foundation model for time series forecasting

Toto is trained on nearly a trillion data points, by far the largest dataset among all currently published time series models. This dataset includes a collection of 750 billion fully anonymous numerical metric data points from the Datadog platform, and time series datasets from Large-scale Open Time Series Archive (LOTSA). This project compiles publicly available time series datasets, which helps make our model generalizable to other time series domains.

What makes a foundation model different from a traditional time series model?

Traditional time series models have to be trained individually for each metric that users want to analyze. This works well, but it is challenging to scale this process to observability data, where we need to analyze a vast number of individual metrics in near real time. This scaling limitation has hindered the adoption of deep learning–based methods for time series analysis.

Large foundation models for time series are a recent development made possible by the same advances powering large language models. Unlike traditional methods, these are not trained on any one time series or domain. Rather, they are trained on a massive dataset of diverse time-series data, meaning they have observed trends across many datasets. They are more able to perform “zero-shot” predictions on new time series inputs that were not seen in their training data, while matching or even exceeding the state-of-the-art performance of full-shot models that were trained on the individual target datasets.

While several time series foundation models have been released in the past year, ours is the first one to include a significant quantity of observability data in its pre-training corpus.

Toto foundation model

Performance

Datadog’s foundation model for time series matches or beats the state of the art for zero-shot forecasting on standard time series benchmark datasets. In addition, it significantly improves on the state of the art for forecasting observability metrics.

Public benchmarks

To assess general-purpose time series forecasting performance, we use the popular Long Sequence Forecasting repository to benchmark the ETTh1, ETTh2, ETTm1, ETTm2, Electricity, and Weather datasets. We evaluate with forecast lengths of 96, 192, 336, and 720 time steps, in sliding windows with stride 512, and average the results. Following standard practice, we report normalized MAE and MSE in order to be able to compare performance across different datasets.

We compared Toto’s average performance with that of other recent zero-shot foundation models and full-shot time series models:

Zero ShotFull Shot
TotoMoiraiSmallMoiraiBaseMoiraiLargeiTransformerTimesNetPatchTSTCrossformerTiDEDLinearSCINetFEDformer
MeanMAE0.3120.3570.3410.3500.3570.3780.3620.4930.4240.3990.5190.400
MSE0.2650.3280.3150.3300.3280.3360.3330.5410.4090.3740.5330.359

Datadog observability benchmark

We constructed a benchmark of anonymized Datadog data to measure performance across different observability metrics. In order to obtain a representative and realistic sample of the types of time series found in observability data, we sampled based on quality and relevance signals from metrics usage in dashboards, monitors, and notebooks. The benchmark consists of 983,994 data points from 82 distinct multivariate time series with 1,122 total individual series.

We tested Toto alongside other foundation models. Because observability data can have extreme variation in both magnitude and dispersion, we select symmetric mean absolute percentage error (sMAPE) as a scale-invariant performance metric. We also report symmetric median absolute percentage error (sMdAPE), a robust version of sMAPE that minimizes the influence of the extreme outliers present in observability data. With the lowest sMAPE of 0.672 and sMdAPE of 0.318, Toto proves to be the most accurate for forecasting observability time series data.

TotoChronos-T5TinyChronos-T5MiniChronos-T5SmallChronos-T5BaseChronos-T5LargeMoiraiSmallMoiraiBaseMoiraiLargeTimesFM
Datadog observability benchmarksMAPE0.6720.8090.7880.8000.7960.8050.8080.7420.7361.246
sMdAPE0.3180.4060.3910.4010.3930.3960.4180.3700.3650.639

Toto outperforms all zero-shot foundation models and full-shot models not only across the open benchmarks, but also on Datadog’s observability benchmark. You can find more details on the model and our evaluation approach in this technical report.

What this means for our customers

Our research on Toto is aimed at improving the AI, ML, anomaly detection, and forecasting algorithms already in use within the Datadog platform and powering products such as Watchdog and Bits AI.

Toto is still early in its development and isn’t currently deployed in any production systems. We have identified several potential improvements and are currently focused on thorough testing and product integration.

With models such as Toto, we are looking forward to delivering new capabilities and improving our existing ones, detecting and predicting more of your issues before they lead to customer-facing impact, and ultimately allowing you to automate more of your incident resolution.