COMMUNICATION NOTIFICATION TRIGGER MODELING PREVIEW

• US 20180213044A1
• Filed: 01/23/2017
• Published: 07/26/2018
• Est. Priority Date: 01/23/2017
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: George, William Brandon, Purser, Nathan, Ward, Joseph, Paries, Kristopher, Bates, John
• Granted Patent: US 10,855,783 B2
• Time in Patent Office: Days
• CPC Class Codes: G08B 21/182 Level alarms, e.g. alarms responsive to variables exceeding a threshold
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

In some embodiments, a real-time and interactive preview of alerts is provided in a user interface. A computer system parses a set of rules that specifies an alert definition. Each rule identifies a set of observations and an alert trigger criterion based on user input in the user interface. For a rule, the computer system accesses historical data corresponding to the set of observations identified by the rule and determines, based on an analysis of the historical data, time points that trigger alerts over a time period according to the rule. The analysis is based on the alert trigger criterion identified by the rule. The computer system aggregates, based on the alert definition, the time points determined for the rule with time points determined for another rule from the set of rules. Further, the computer system generates an alert preview over the time period for presentation at the user interface.

Claims

1. A computer-implemented method for providing a real-time and interactive preview of alerts in a user interface, the method comprising:

parsing, by a computer system, a set of rules that specifies an alert definition, wherein each rule identifies a set of observations and an alert trigger criterion based on user input in a user interface;

for each of the alert definition;

accessing, by the computer system, historical data corresponding to the set of observations identified by the rule, and

determining, by the computer system and based on an analysis of the historical data, time points that trigger alerts over a time period according to the rule, wherein the analysis of the historical data is based on the alert trigger criterion identified by the rule;

aggregating, by the computer system and based on the alert definition, the time points determined for the rules; and

generating, by the computer system and based on the aggregating, an alert preview over the time period for presentation at the user interface in response to the user input, wherein the alert preview presents a total number and distribution of all alerts for the alert definition over the time period and a total number of the alerts for the rule over the time period.

2. The computer-implemented method of claim 1, wherein the computer system comprises a user device configured to present the user interface, and further comprising:

caching, by the user device, the time points determined for the rules;

receiving, by the user device, updated time points for a rule of the alert definition based on an update to the rule; and

updating, by the user device, the alert preview based on the cached time points and on the updated time points for the rule.

3. The computer-implemented method of claim 1, further comprising:

receiving, by the computer system, an adjustment to a rule of the alert definition based on additional user input at the user interface;

determining, by the computer system for the rule and based on the adjustment to the rule, updated time points that trigger alerts over the time period;

updating, by the computer system, the alert preview based on an aggregation of the updated time points determined for the rule with remaining time points determined for the alert definition.

4. The computer-implemented method of claim 3, wherein the adjustment to the rule comprises an update to at least one of:

the set of observations identified by the rule, the alert trigger criterion identified by the rule, or a filter identified by the rule, and wherein the aggregation is based on a cache of the remaining time points.

5. The computer-implemented method of claim 1, further comprising:

storing and associating, by the computer system, the alert definition with a user identifier based on a user request, wherein the user request comprises the user identifier and is received by the computer system based on the presentation of the alert preview; and

generating and sending subsequent alerts to a user device associated with the user identifier based on the alert definition being stored and associated with the user identifier.

6. The computer-implemented method of claim 1, further comprising:

storing and associating, by the computer system, the alert definition with a user identifier;

identifying, by the computer system, a plurality of alert definitions associated with the user identifier;

generating, by the computer system, a total alert preview for the plurality of alert definitions over the time period, wherein the alert preview presents a total number and distribution of all alerts across the plurality of alert definitions; and

providing, by the computer system to a user device associated with the user identifier, the total alert preview generated for the plurality of alert definitions.

7. The computer-implemented method of claim 6, wherein total alert preview generated for the plurality of alert definitions comprises a link to the alert preview generated for the alert definition.

8. The computer-implemented method of claim 1, wherein the user input further specifies a filter specific to a rule of the alert definition, and wherein time points corresponding to the rule are further determined by applying the filter to the historical data corresponding to the rule.

9. The computer-implemented method of claim 1, wherein the user input further specifies a length of the time period, and wherein the historical data corresponds to a past time period having a length greater than the length of the time period.

10. A computer system configured to provide a real-time and interactive preview of alerts in a user interface, the computer system comprising:

means for parsing a set of rules that specifies an alert definition, wherein each rule identifies a set of observations and an alert trigger criterion based on user input in a user interface;

for each rule of the alert definition;

means for accessing historical data corresponding to the set of observations identified by the rule, and

means for determining, based on an analysis of the historical data, time points that trigger alerts over a time period according to the rule, wherein the analysis of the historical data is based on the alert trigger criterion identified by the rule;

means for aggregating, based on the alert definition, the time points determined for the rules; and

means for generating, based on the aggregating, an alert preview over the time period for presentation at the user interface in response to the user input, wherein the alert preview presents a performance of the alert definition and a contribution of the rule to the performance.

11. The computer system of claim 10, wherein the analysis of the historical data comprises a time-series analysis, and wherein the time-series analysis is selected based on the alert trigger criterion.

12. The computer system of claim 11, further comprising endpoints within a network, wherein the endpoints collect the historical data.

13. The computer system of claim 10, wherein the time points determined for the rules are aggregated according to a Boolean operation that is specified by the alert definition.

14. The computer system of claim 10, wherein the user interface comprises a preview field and an alert definition field, wherein the preview field presents the total number and distribution of all the alerts for the alert definition, and wherein the alert definition field presents each rule and a respective total number of alerts.

15. The computer system of claim 14, wherein the alert definition field comprises a plurality of rule fields, wherein each rule field corresponds to a rule from the set of rules and presents a plurality of input fields for specifying the rule, wherein the plurality of input fields comprise a set of observations field, an alert trigger criterion field, and a filter field.

16. The computer system of claim 15, wherein the alert definition field comprises a Boolean operation for aggregating the time points determined for the rule and the time points determined for the other rule.

17. A non-transitory computer-readable storage medium storing instructions that, upon execution by a processor of a computing device, configure the computing device to perform operations comprising:

providing, to a computer system, a rule from a set of rules that specifies an alert definition, wherein the rule identifies a set of observations and an alert trigger criterion based on user input in a user interface of the computing device;

receiving, from the computer system, time points determined for the rule, wherein the time points trigger alerts over the time period based on the rule, and wherein the time points are determined based on historical data corresponding to the set of observations and the alert trigger criterion identified by the rule;

aggregating, based on the alert definition, the time points determined for the rule with time points determined for another rule from the set of rules;

generating, based on the aggregating, the alert preview over the time period; and

presenting the alert preview at the user interface, wherein the alert preview presents a total number and distribution of all alerts for the alert definition and a total number of the alerts for the rule.

18. The non-transitory computer-readable storage medium of claim 17, wherein the time points are determined according to a time-series analysis of the historical data and represent detected anomalies or detected changes based on the alert trigger criterion.

19. The non-transitory computer-readable storage medium of claim 17, wherein the operations further comprise caching the time points received from the computer system, and wherein aggregating the time points determined for the rule with the time points determined for the other rule comprises aggregating cached time points.

20. The non-transitory computer-readable storage medium of claim 17, wherein the set of observations identified by the rule comprises page views of a web site, wherein the alert trigger criterion identified by the rule comprises a threshold value of page views, and wherein the alert preview identifies whether a total number of page views exceeds the threshold value.