Executing search commands based on selections of time increments and field-value pairs
First Claim
1. A method, comprising:
- causing display of a first interface in a table format that includes;
a first column and a second column, wherein the first column is associated with a plurality of time increments and the second column is associated with a first value of a first event field of a plurality of events;
a first cell, of the first column, that displays a first time increment of the plurality of time increments;
a second cell, of the second column, that displays a first aggregated metric that indicates a number of events of the plurality of events, wherein each event contributing to the number of events occurred within the first time increment and has a field-value pair that matches the first value of the first event field;
in response to receiving a first selection of the second cell and a second selection of a first option of a plurality of options, identifying one or more events of the plurality of events, wherein each of the identified one or more events has a first relationship to the first time increment and a second relationship to the first value of the first event field that is based on the selected first option; and
causing display of the identified one or more events.
1 Assignment
0 Petitions
Accused Products
Abstract
In embodiments of statistics time chart interface cell mode drill down, a first interface displays in a table format that includes columns each having a column heading comprising a different value, each different value associated with a particular event field, and includes one or more rows, each row having a time increment and aggregated metrics that each represent a number of events having a field-value pair that matches the different value represented in one of the columns and within the time increment over which the aggregated metric is calculated. A cell can be emphasized that includes one of the aggregated metrics in a row that includes the respective time increment, and in response, a menu displays options to transition to a second interface.
-
Citations
30 Claims
-
1. A method, comprising:
-
causing display of a first interface in a table format that includes; a first column and a second column, wherein the first column is associated with a plurality of time increments and the second column is associated with a first value of a first event field of a plurality of events; a first cell, of the first column, that displays a first time increment of the plurality of time increments; a second cell, of the second column, that displays a first aggregated metric that indicates a number of events of the plurality of events, wherein each event contributing to the number of events occurred within the first time increment and has a field-value pair that matches the first value of the first event field; in response to receiving a first selection of the second cell and a second selection of a first option of a plurality of options, identifying one or more events of the plurality of events, wherein each of the identified one or more events has a first relationship to the first time increment and a second relationship to the first value of the first event field that is based on the selected first option; and causing display of the identified one or more events. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17)
-
-
18. A system, comprising:
-
a processor device; and a computer-readable storage medium, coupled with the processor device, having instructions stored thereon, which, when executed by the processor device, cause the system to perform actions comprising; causing display of a first interface in a table format that includes; a first column and a second column, wherein the first column is associated with a plurality of time increments and the second column is associated with a first value of a first event field of a plurality of events; a first cell, of the first column, that displays a first time increment of the plurality of time increments; a second cell, of the second column, that displays a first aggregated metric that indicates a number of events of the plurality of events, wherein each event contributing to the number of events occurred within the first time increment and has a field-value pair that matches the first value of the first event field; in response to receiving a first selection of the second cell and a second selection of a first option of a plurality of options, identifying one or more events of the plurality of events, wherein each of the identified one or more events has a first relationship to the first time increment and a second relationship to the first value of the first event field that is based on the selected first option; and causing display of the identified one or more events. - View Dependent Claims (19, 20, 21, 22, 23, 24, 25)
-
-
26. One or more non-transitory computer-readable, non-volatile storage memory comprising stored instructions that are executable and, responsive to execution by a computing device, the computing device performs operations comprising:
-
causing display of a first interface in a table format that includes; a first column and a second column, wherein the first column is associated with a plurality of time increments and the second column is associated with a first value of a first event field of a plurality of events; a first cell, of the first column, that displays a first time increment of the plurality of time increments; a second cell, of the second column, that displays a first aggregated metric that indicates a number of events of the plurality of events, wherein each event contributing to the number of events occurred within the first time increment and has a field-value pair that matches the first value of the first event field; in response to receiving a first selection of the second cell and a second selection of a first option of a plurality of options, identifying one or more events of the plurality of events, wherein each of the identified one or more events has a first relationship to the first time increment and a second relationship to the first value of the first event field that is based on the selected first option; and causing display of the identified one or more events. - View Dependent Claims (27, 28, 29, 30)
-
Specification