HISTORICAL NETWORK EVENT VIEWING

• US 20110099500A1
• Filed: 10/27/2009
• Published: 04/28/2011
• Est. Priority Date: 10/27/2009
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Shankar, Hari, Lo, Sandra, Smith, Jared, Singh, Gurminder
• Application Number:
  US12/606,966
• Publication Number:
  US 20110099500A1
• Time in Patent Office: Days
• US Class Current: 715/771
• CPC Class Codes: G06F 2203/04803 Split screen, i.e. subdividing the display area or the window area into separate subareas
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

A computer-implemented method, comprising determining a displayable sub range of events from among event records in a stored repository of network event data; determining a start time; in response to determining the start time, loading from the repository, a subset of a specified number of event records representing only network events that occurred at one or more network infrastructure elements before the start time; graphically displaying, in a first portion of a screen display on a display unit, an event graph that plots a number of network events that occurred in each of a plurality of discrete time periods represented by the sub range of events, and between the start time and the end time; graphically displaying, over the event graph, a time slider and a loaded event indicator area that is delimited by the start time and the end time; displaying, in a second portion of the screen display, a table listing only such network events as occurred between the start time and end time as indicated by the loaded event indicator area; wherein the steps are performed by one or more computing devices.

Claims

1. A computer-implemented method, comprising:

determining a displayable sub range of events from among event records in a stored repository of network event data;

determining a start time;

in response to determining the start time, loading from the repository, a subset of a specified number of event records representing only network events that occurred at one or more network infrastructure elements before the start time;

graphically displaying, in a first portion of a screen display on a display unit, an event graph that plots a number of network events that occurred in each of a plurality of discrete time periods represented by the sub range of events, and between the start time and an end time;

graphically displaying, over the event graph, a time slider and a loaded event indicator area that is delimited by the start time and the end time;

displaying, in a second portion of the screen display, a table listing only such network events as occurred between the start time and end time as indicated by the loaded event indicator area;

wherein the steps are performed by one or more computing devices.

2. The method of claim 1, further comprising receiving user input selecting a particular network event from within the table;

displaying, in a third portion of the screen, an event details listing that details of the particular event.

3. The method of claim 1, wherein the user input comprises signals representing a user sliding the time slider on the event graph.

4. The method of claim 1, further comprising receiving user input specifying a sorting criterion for the network events shown in the table;

in response to receiving the user input, sorting and re-displaying the table based on the sorting criterion.

5. The method of claim 1, further comprising displaying the loaded event indicator area in a different color intensity than the event graph.

6. The method of claim 1, further comprising receiving user input representing sliding the time slider to a position earlier or later than all time values then currently represented in the event graph;

in response to the user input, loading from the stored repository of network event data, a second subset of the specified number of event records representing only network events that occurred at the one or more network infrastructure elements earlier than a new start time represented by the position of the time slider.

7. The method of claim 1, wherein the event graph comprises a start point and an end point, and wherein the start point and end point respectively represent an earliest time and a latest time at which network events matching results of a query to a stored repository of event data occurred.

8. A computer-readable data storage medium storing one or more sequences of instructions which when executed cause a computer to perform:

determining a displayable sub range of events from among event records in a stored repository of network event data;

determining a start time;

in response to determining the start time, loading from the repository, a subset of a specified number of event records representing only network events that occurred at one or more network infrastructure elements before the start time;

graphically displaying, in a first portion of a screen display on a display unit, an event graph that plots a number of network events that occurred in each of a plurality of discrete time periods represented by the sub range of events, and between the start time and an end time;

graphically displaying, over the event graph, a time slider and a loaded event indicator area that is delimited by the start time and the end time;

displaying, in a second portion of the screen display, a table listing only such network events as occurred between the start time and end time as indicated by the loaded event indicator area.

9. The computer-readable data storage medium of claim 8, further comprising instructions which when executed cause receiving user input selecting a particular network event from within the table;

displaying, in a third portion of the screen, an event details listing that details of the particular event.

10. The computer-readable data storage medium of claim 8, wherein the user input comprises a user sliding the time slider on the event graph.

11. The computer-readable data storage medium of claim 8, further comprising instructions which when executed cause receiving user input specifying a sorting criterion for the network events shown in the table;

in response to receiving the user input, sorting and re-displaying the table based on the sorting criterion.

12. The computer-readable data storage medium of claim 8, further comprising instructions which when executed cause displaying the loaded event indicator area in a different color intensity than the event graph.

13. The computer-readable data storage medium of claim 8, further comprising instructions which when executed cause receiving user input representing sliding the time slider to a position earlier or later than all time values then currently represented in the event graph;

in response to the user input, loading from the stored repository of network event data, a second subset of the specified number of event records representing only network events that occurred at the one or more network infrastructure elements earlier than a new start time represented by the position of the time slider.

14. The computer-readable data storage medium of claim 8, wherein the event graph comprises a start point and an end point, and wherein the start point and end point respectively represent an earliest time and a latest time at which network events matching results of a query to a stored repository of event data occurred.

15. An apparatus, comprising:

one or more processors;

a computer-readable data storage medium coupled to the one or more processors and storing one or more sequences of instructions which when executed cause a computer to perform;

determining a displayable sub range of events from among event records in a stored repository of network event data;

determining a start time;

in response to determining the start time, loading from the repository, a subset of a specified number of event records representing only network events that occurred at one or more network infrastructure elements before the start time;

graphically displaying, in a first portion of a screen display on a display unit, an event graph that plots a number of network events that occurred in each of a plurality of discrete time periods represented by the sub range of events, and between the start time and an end time;

graphically displaying, over the event graph, a time slider and loaded event indicator area that is delimited by the start time and the end time;

displaying, in a second portion of the screen display, a table listing only such network events as occurred between the start time and end time as indicated by the loaded event indicator area.

16. The apparatus of claim 15, further comprising instructions which when executed cause receiving user input selecting a particular network event from within the table;

displaying, in a third portion of the screen, an event details listing that details of the particular event.

17. The apparatus of claim 15, wherein the user input comprises a user sliding the time slider on the event graph.

18. The apparatus of claim 15, further comprising instructions which when executed cause receiving user input specifying a sorting criterion for the network events shown in the table;

in response to receiving the user input, sorting and re-displaying the table based on the sorting criterion.

19. The apparatus of claim 15, further comprising instructions which when executed cause displaying the loaded event indicator area in a different color intensity than the event graph.

20. The apparatus of claim 15, further comprising instructions which when executed cause receiving user input representing sliding the time slider to a position earlier or later than all time values then currently represented in the event graph;

in response to the user input, loading from the stored repository of network event data, a second subset of the specified number of event records representing only network events that occurred at the one or more network infrastructure elements earlier than a new start time represented by the position of the time slider.