ANALYSIS STACK FOR AN EVENT FLOW

• US 20150143177A1
• Filed: 01/22/2015
• Published: 05/21/2015
• Est. Priority Date: 05/13/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Nano, Olivier, Tarnavski, Tihomir, Peray, Sebastien, Tilly, Marcel, Krishnan, Ramkumar, Santos, Ivo Jose Garcia dos
• Granted Patent: US 9,542,256 B2
• Time in Patent Office: Days
• US Class Current: 714/37
• CPC Class Codes: G06F 11/0706 the processing taking place on a specific hardware platform or in a specific software environment
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/323 Visualisation of programs or trace data
• CPC Class Codes: G06F 11/3636 by tracing the execution of the program
• CPC Class Codes: G06Q 10/00 Administration; Management

Abstract

An analysis module is configured to receive data associated with an event flow. The data is received from a first analysis module (e.g., in a stack of analysis modules) or from the event flow. The analysis module is configured to execute an analysis operation on the data to generate a result. The analysis module can output the result to a second analysis module (e.g., in the stack of analysis modules) or to a user interface.

Claims

1. A system, comprising:

a processor; and

a memory coupled to the processor, the memory storing instructions, that when executed by the processor, cause execution of an event flow analyzer configured to;

receive input indicating a selection of a plurality of analysis modules;

wherein a first analysis module of the selected plurality of analysis modules is operable on an event flow associated with event processing, the event flow including a plurality of events, each event including an operator, timing information, and a payload, and

wherein a second analysis module of the selected plurality of analysis modules is operable on data output from the first analysis module.

2. The system of claim 1, wherein each of the plurality of analysis modules is independently executable with respect to other analysis modules.

3. The system of claim 1, wherein the input further indicates an ordering of the plurality of analysis modules and wherein each of the plurality of analysis modules is further configured to:

receive data from a previous analysis module based on the ordering; and

transmit data to a subsequent analysis module based on the ordering.

4. The system of claim 1, wherein the timing information includes a start time and a stop time.

5. The system of claim 1, wherein at least one of the operators comprises an insert operator.

6. The system of claim 1, wherein the plurality of analysis modules comprises an analysis module configured to execute a replay analysis operation to simulate a passage of time at an analysis user interface based on one or more punctuation events.

7. The system of claim 6, wherein the replay analysis operation is further executable to:

show events at an analysis user interface (UI) having event lifetimes that include a particular point in the passage of time; and

hide events at the analysis UI having event lifetimes that do not include the particular point in the passage of time.

8. The system of claim 7, wherein the particular point in the passage of time is user-defined.

9. The system of claim 1, wherein the plurality of analysis modules comprises an analysis module configured to execute an event propagation analysis operation with respect to a particular event to identify one or more subsequent events at an analysis user interface that are affected by the particular event.

10. The system of claim 1, wherein the plurality of analysis modules comprises an analysis module configured to execute a root cause analysis operation with respect to a particular event to identify one or more previous events at an analysis user interface that affect the particular event.

11. The system of claim 1, wherein the plurality of analysis modules comprises an analysis module configured to execute a filtering analysis operation to show those events at an analysis user interface that satisfy a filtering criteria.

12. The system of claim 11, wherein the filtering criteria is based on event kinds, event start times, event end times, new event end times, event log times, event latency, event payloads, or any combination thereof.

13. The system of claim 11, wherein the filtering analysis operation is executable with respect to a particular operator of a query.

14. A computer-implemented method, comprising:

receiving data representing an event flow, wherein the event flow is associated with a plurality of events, each event including an operator, timing information, and a payload;

executing a first software class configured to;

retrieve a particular event from the event flow;

execute a first analysis operation on the particular event to generate a first intermediate result; and

output the first intermediate result to a subsequent software class; and

executing a second software class configured to;

receive a second intermediate result from a previous software class;

execute a second analysis operation on the second intermediate result to generate a final result; and

output the final result to an analysis user interface (UI).

15. The computer-implemented method of claim 14, further comprising executing one or more additional software classes after executing the first software class and before executing the second software class, wherein the one or more software classes are operable to generate the second intermediate result from the first intermediate result.

16. The computer-implemented method of claim 14, wherein the timing information comprises a start time and an end time.

17. A computer-readable medium storing an event processing analysis module configured to:

receive analysis data associated with an event flow generated by execution of a query, the event flow including a plurality of events, each event including an operator, timing information, and a payload, wherein the analysis data is received from a first analysis module or from the event flow, and wherein the analysis data is received via a software communication interface;

execute an analysis operation on the analysis data to generate an analysis result; and

output the analysis result to a second analysis module or to a user interface via the software communication interface.

18. The computer-readable medium of claim 19, wherein the analysis module is selectable for inclusion in an ordered set of analysis modules executable to modify the user interface, and wherein the analysis module is independently executable with respect to other analysis modules in the ordered set of analysis modules.

19. The computer-readable medium of claim 17, wherein the second analysis module is configured to execute a partitioning analysis operation.

20. The computer-readable medium of claim 17, wherein at least one of the operators comprises an insert operator.