TIME-BASED VISUALIZATION OF THE NUMBER OF EVENTS HAVING VARIOUS VALUES FOR A FIELD
First Claim
1. A computer-implemented method comprising:
- receiving an input from a user via a graphical user interface, the input specifying a field and a time range;
identifying a set of events based on the input received from the user, each event in the identified set occurring within the time range and including a value for the specified field;
determining a set of unique values for the field from the identified set of events;
for each unique value in the set of unique values, identifying a subset of events including that unique value for the field, each event in the identified subset having a time-stamp coinciding with one of a plurality of time slots within the time range; and
displaying a set of rows intersecting with a set of columns, each row corresponding to one unique value in the set of unique values, each column corresponding to one of the plurality of time slots, and each intersection of a row and a column providing an indication of a number of events including the unique value corresponding to the row and having a time-stamp coinciding with the time slot corresponding to the column.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems and methods are provided for visualizing the number of events having different values for a field of interest over a selected time range. The events may be derived from machine data obtained from one or more data sources. User input received via a graphical user interface may specify the field of interest, a time range, and a time granularity for displaying counts of the number of events having various values during different time slots within the selected time range. Events including the specified field during the user-selected time range are identified and values for the field are extracted from the identified events. A visualization indicating a relation between a number of the events occurring within each of a plurality of time slots over the selected time range and each of the unique extracted values of the field is provided to the user via the graphical user interface.
-
Citations
30 Claims
-
1. A computer-implemented method comprising:
-
receiving an input from a user via a graphical user interface, the input specifying a field and a time range; identifying a set of events based on the input received from the user, each event in the identified set occurring within the time range and including a value for the specified field; determining a set of unique values for the field from the identified set of events; for each unique value in the set of unique values, identifying a subset of events including that unique value for the field, each event in the identified subset having a time-stamp coinciding with one of a plurality of time slots within the time range; and displaying a set of rows intersecting with a set of columns, each row corresponding to one unique value in the set of unique values, each column corresponding to one of the plurality of time slots, and each intersection of a row and a column providing an indication of a number of events including the unique value corresponding to the row and having a time-stamp coinciding with the time slot corresponding to the column. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A computer readable medium storing instructions that, when executed by a computer, cause the computer to perform functions to:
-
receive an input from a user via a graphical user interface, the input specifying a field and a time range; identify a set of events based on the input received from the user, each event in the identified set occurring within the time range and including a value for the specified field; determine a set of unique values for the field from the identified set of events; for each unique value in the set of unique values, identify a subset of events including that unique value for the field, each event in the identified subset having a time-stamp coinciding with one of a plurality of time slots within the time range; and display a set of rows intersecting with a set of columns, each row corresponding to one unique value in the set of unique values, each column corresponding to one of the plurality of time slots, and each intersection of a row and a column providing an indication of a number of events including the unique value corresponding to the row and having a time-stamp coinciding with the time slot corresponding to the column. - View Dependent Claims (16)
-
-
17. A system comprising:
-
a memory having processor-readable instructions stored therein; and a processor configured to access the memory and execute the processor-readable instructions, which when executed by the processor, configures the processor to perform a plurality of functions, including functions to; receive an input from a user via a graphical user interface, the input specifying a field and a time range; identify a set of events based on the input received from the user, each event in the identified set occurring within the time range and including a value for the specified field; determine a set of unique values for the field from the identified set of events; for each unique value in the set of unique values, identify a subset of events including that unique value for the field, each event in the identified subset having a time-stamp coinciding with one of a plurality of time slots within the time range; and display a set of rows intersecting with a set of columns, each row corresponding to one unique value in the set of unique values, each column corresponding to one of the plurality of time slots, and each intersection of a row and a column providing an indication of a number of events including the unique value corresponding to the row and having a time-stamp coinciding with the time slot corresponding to the column. - View Dependent Claims (18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30)
-
Specification