Interactive Display of Search Result Information
First Claim
1. A method, comprising:
- sending, to a computing system, a search request to search a set of time stamped events;
receiving, from the computing system, search result information and event references, wherein the search result information includes information associated with one or more time stamped events that satisfy the search request, wherein the event references include an event identifier corresponding to each of the one or more time stamped events that satisfy the search request;
causing graphical display of information based on the search result information;
in response to receiving input requesting additional information from at least a portion of the search result information, determining a set of event identifiers corresponding to time stamped events included in the at least a portion of the search result information;
sending, to the computing system, a request for time stamped events corresponding to the set of event identifiers;
receiving, from the computing system, the requested time stamped events; and
causing display of the requested additional information using the received requested time stamped events.
1 Assignment
0 Petitions
Accused Products
Abstract
A method, system, and processor-readable storage medium are directed towards generating a report derived from data, such as event data, stored on a plurality of distributed nodes. In one embodiment the analysis is generated using a “divide and conquer” algorithm, such that each distributed node analyzes locally stored event data while an aggregating node combines these analysis results to generate the report. In one embodiment, each distributed node also transmits a list of event data references associated with the analysis result to the aggregating node. The aggregating node may then generate a global ordered list of data references based on the list of event data references received from each distributed node. Subsequently, in response to a user selection of a range of global event data, the report may dynamically retrieve event data from one or more distributed nodes for display according to the global order.
34 Citations
21 Claims
-
1. A method, comprising:
-
sending, to a computing system, a search request to search a set of time stamped events; receiving, from the computing system, search result information and event references, wherein the search result information includes information associated with one or more time stamped events that satisfy the search request, wherein the event references include an event identifier corresponding to each of the one or more time stamped events that satisfy the search request; causing graphical display of information based on the search result information; in response to receiving input requesting additional information from at least a portion of the search result information, determining a set of event identifiers corresponding to time stamped events included in the at least a portion of the search result information; sending, to the computing system, a request for time stamped events corresponding to the set of event identifiers; receiving, from the computing system, the requested time stamped events; and causing display of the requested additional information using the received requested time stamped events. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. An apparatus, comprising:
-
a subsystem, implemented at least partially in hardware, that sends, to a computing system, a search request to search a set of time stamped events; a subsystem, implemented at least partially in hardware, that receives, from the computing system, search result information and event references, wherein the search result information includes information associated with one or more time stamped events that satisfy the search request, wherein the event references include an event identifier corresponding to each of the one or more time stamped events that satisfy the search request; a subsystem, implemented at least partially in hardware, that causes graphical display of information based on the search result information; a subsystem, implemented at least partially in hardware, that in response to receiving input requesting additional information from at least a portion of the search result information, determines a set of event identifiers corresponding to time stamped events included in the at least a portion of the search result information; a subsystem, implemented at least partially in hardware, that sends, to the computing system, a request for time stamped events corresponding to the set of event identifiers; a subsystem, implemented at least partially in hardware, that receives, from the computing system, the requested time stamped events; and a subsystem, implemented at least partially in hardware, that causes display of the requested additional information using the received requested time stamped events. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A non-transitory computer-readable medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform:
-
sending, to a computing system, a search request to search a set of time stamped events; receiving, from the computing system, search result information and event references, wherein the search result information includes information associated with one or more time stamped events that satisfy the search request, wherein the event references include an event identifier corresponding to each of the one or more time stamped events that satisfy the search request; causing graphical display of information based on the search result information; in response to receiving input requesting additional information from at least a portion of the search result information, determining a set of event identifiers corresponding to time stamped events included in the at least a portion of the search result information; sending, to the computing system, a request for time stamped events corresponding to the set of event identifiers; receiving, from the computing system, the requested time stamped events; and causing display of the requested additional information using the received requested time stamped events. - View Dependent Claims (16, 17, 18, 19, 20, 21)
-
Specification