Skip to content

ML / Anomaly Detection Errors

These errors originate from the UadMLPlugin which runs machine learning models to detect anomalous user behavior on streaming rigs.

Hex Error Codes

Error CodeNamePluginDescription
0x80210002NVST_DISCONN_ML_ANOMALY_DETECTEDUadMLPluginML anomaly score exceeded threshold
0x80210003NVST_DISCONN_ML_INFERENCE_FAILEDUadMLPluginSageMaker/LightGBM inference error
0x80210004NVST_DISCONN_ML_FEATURE_EXTRACTION_FAILEDUadMLPluginFeature extraction from metrics failed

How ML Detection Works

  1. PerfmonCollector gathers Windows Performance Monitor metrics (CPU, memory, network, GPU)
  2. FeatureExtractor converts raw metrics into ML feature vectors
  3. Features are sent to either:
    • LocalPredictor (LightGBM on-rig) for fast local inference
    • SageMakerPredictor (AWS cloud) for more complex models
  4. If the anomaly score exceeds a configured threshold, a SecurityTerminationInitiated event is emitted

Error Messages

Inference Errors

SageMakerPredictor construction error: No AWS region provided
Unable to invoke SageMaker endpoint: [{}] {}
Unable to invoke SageMaker endpoint (retry): [{}] {}
Unable to open model file: {}
Unable to find model info in the model file
Unable to load model file: {}
Empty data set passed for inference
Failure during local prediction: {}
Wrong number of columns for inference
Fail to predict for the row

Feature Extraction Errors

! Extraction error: {}
! Inference error: {}
Unable to extact features for metric '{}': {}
GetMetricValues failed: Invalid metric

Performance Monitor Errors

Unable to add feature. PerfmonCollector is already running.
Perfmon feature '{}' already added
PerfmonCollector is not initialized
PerfmonCollector is not subscribed to Perfmon counters. Re-subscribing...
Failed to subscribe to Perfmon counters
PerfmonCollector Poll has failed: {}

Internal Error Classes

ClassNamespaceDescription
ExtractionErrorInternalFeature extraction failure
InferenceErrorInternalML inference failure
CancelledErrorMessageBusClientOperation cancelled
TimeoutErrorMessageBusClientOperation timeout
NotOnBusErrorMessageBusClientNot connected to message bus

admindesk.top — Reversed & documented from Asgard rig backups and GCIS plugin binaries.