Time series explorer

• US 20170053008A1
• Filed: 08/18/2016
• Published: 02/23/2017
• Est. Priority Date: 08/18/2015
• Status: Abandoned Application

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Ruan, Yi-Lun, Frenkel, Benjamin, Burge, John
• Application Number:
  US15/240,719
• Publication Number:
  US 20170053008A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/32 with visual or acoustical indication of the functioning of the machine
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 11/3452 Performance evaluation by statistical analysis
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 16/2477 Temporal data queries
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/287 Visualization; Browsing
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 2201/86 Event-based monitoring
• CPC Class Codes: G06Q 30/0282 Rating or review of business operators or products

Abstract

Systems and techniques are provided for a time series explorer. A request for time series including filter criteria may be received, a time series that is responsive to the request for time series may be determined by comparing event data for the time series stored in an event log to the filter criteria. The event data may include indications of an event that occurred in an application running on a computing device. A visual representation of the time series may be rendered. The visual representation of the time series may include a visual representation of an event indicated by the event data for the time series, and the visual representation of the time series may be transmitted to be displayed on a display.

Claims

1. A computer-implemented method performed by a data processing apparatus, the method comprising:

receiving a request for time series comprising at least one filter criteria;

determining at least one time series that is responsive to the request for time series by comparing event data for the time series stored in an event log to the at least one filter criteria, the event data comprising indications of at least one event that occurred in an application running on a computing device;

rendering a visual representation of the at least one time series wherein the visual representation of the at least one time series comprises at least one visual representation of an event indicated by the event data for the time series; and

transmitting the visual representation of the at least one time series to be displayed on a display.

2. The computer-implemented method of claim 1, further comprising:

receiving the event log from a user computing device; and

storing the event log.

3. The computer-implemented method of claim 1, wherein rendering the visual representation of the at least one time series further comprises:

rendering a visual representation of the event on a timeline;

rendering a visual representation of a second event indicated by the event data for the at least one time series on the timeline; and

rendering a visual representation of a third event indicated by the event data for the at least one time series on the timeline.

4. The computer-implemented method of claim 3, wherein the visual representation of the event, the visual representation of the second event, and the visual representation of the third event are rendered on the timeline to appear in chronological order.

5. The computer-implemented method of claim 1, further comprising:

rendering a visual representation of a second time series wherein the visual representation of the second time series comprises at least one visual representation of an event indicated by event data for the second time series; and

transmitting the visual representation of the second time series to be displayed on a display with the visual representation of the at least one time series.

6. The computer-implemented method of claim 1, further comprising:

receiving an indication of a selection of the visual representation of the event through input to a user interface displayed on the display with the visual representation of the at least one time series;

rendering a box comprising additional information associated with the event based on the event data from the event log; and

transmitting the box comprising the additional information to be displayed on the display.

7. The computer-implemented method of claim 1, further comprising:

performing cluster analysis on a plurality of time series stored in one or more event logs, wherein the cluster analysis groups the time series into two or more clusters, each cluster corresponding to a category;

determining, for a first cluster of the two more clusters of time series, a group of time series in the middle of the first cluster; and

determining a time series that is a middle member of the group of time series in the middle of the first cluster.

8. The computer-implemented method of claim 7, further comprising:

rendering a visual representation of the time series that is the middle member of the group of time series in the middle of the first cluster; and

transmitting the visual representation of the time series that is the middle member of the group of time series in the middle of the first cluster to be displayed as a representative time series for a category associated with the first cluster.

9. A computer-implemented system comprising:

a storage comprising one or more event logs;

an explorer server configured to receive a request for time series comprising at least one filter criteria, determine at least one time series that is responsive to the request for time series by comparing event data for the time series stored in the one or more event logs to the at least one filter criteria, the event data comprising indications of at least one event that occurred in an application running on a computing device, render a visual representation of the at least one time series wherein the visual representation of the at least one time series comprises at least one visual representation of an event indicated by the event data for the time series, and transmit the visual representation of the at least one time series to be displayed on a display.

10. The computer-implemented system of claim 9, wherein the explorer server is further configured to receive at least one of the one or more event logs from a user computing device, and store the event log.

11. The computer-implemented system of claim 9, wherein the explorer server is further configured to render the visual representation of the at least one time series by rendering a visual representation of the event on a timeline, rendering a visual representation of a second event indicated by the event data for the at least one time series on the timeline, rendering a visual representation of a third event indicated by the event data for the at least one time series on the timeline.

12. The computer-implemented system of claim 11, wherein the visual representation of the event, the visual representation of the second event, and the visual representation of the third event are rendered on the timeline to appear in chronological order.

13. The computer-implemented system of claim 9, wherein the explorer server is further configured to render a visual representation of a second time series wherein the visual representation of the second time series comprises at least one visual representation of an event indicated by event data for the second time series, and transmit the visual representation of the second time series to be displayed on a display with the visual representation of the at least one time series.

14. The computer-implemented system of claim 9, wherein the explorer server is further configured to receive an indication of a selection of the visual representation of the event through input to a user interface displayed on the display with the visual representation of the at least one time series, render a box comprising additional information associated with the event based on the event data from one of the one or more event logs, and transmit the box comprising the additional information to be displayed on the display.

15. The computer-implemented method of claim 9, wherein the explorer server is further configured to perform cluster analysis on a plurality of time series stored in the one or more event logs, wherein the cluster analysis groups the time series into two or more clusters, each cluster corresponding to a category, determine, for a first cluster of the two more clusters of time series, a group of time series in the middle of the first cluster, and determine a time series that is a middle member of the group of time series in the middle of the first cluster.

16. The computer-implemented method of claim 15, wherein the explorer server is further configured to render a visual representation of the time series that is the middle member of the group of time series in the middle of the first cluster, and transmit the visual representation of the time series that is the middle member of the group of time series in the middle of the first cluster to be displayed as a representative time series for a category associated with the first cluster.

17. The computer-implemented method of claim 9, wherein the wherein the explorer server is further configured to transmit the visual representation of the at least one time series to an explorer client running on a computing device separate from a computing device running the explorer server.

18. A system comprising:

one or more computers and one or more storage devices storing instructions which are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

receiving a request for time series comprising at least one filter criteria;

determining at least one time series that is responsive to the request for time series by comparing event data for the time series stored in an event log to the at least one filter criteria, the event data comprising indications of at least one event that occurred in an application running on a computing device;

rendering a visual representation of the at least one time series wherein the visual representation of the at least one time series comprises at least one visual representation of an event indicated by the event data for the time series; and

transmitting the visual representation of the at least one time series to be displayed on a display.

19. The system of claim 26, wherein the instructions further cause the one more computers to perform operations further comprising:

rendering a visual representation of the event on a timeline;

rendering a visual representation of a second event indicated by the event data for the at least one time series on the timeline; and

rendering a visual representation of a third event indicated by the event data for the at least one time series on the timeline.

20. The system of claim 26, wherein the instructions further cause the one more computers to perform operations further comprising:

rendering a visual representation of a second time series wherein the visual representation of the second time series comprises at least one visual representation of an event indicated by event data for the second time series; and

transmitting the visual representation of the second time series to be displayed on a display with the visual representation of the at least one time series.