Conveying state-on-state data to a user via hierarchical clusters in a three-dimensional model
First Claim
1. A computer-implemented method, comprising:
- receiving data from an external data source, wherein the data comprises real-time machine data that reflects activity within an information technology infrastructure of an organization;
generating a three-dimensional model that includes a first plurality of three-dimensional objects, wherein each three-dimensional object included in the first plurality of three-dimensional objects has multiple attributes and a state derived from at least one aspect of the data, and each of the multiple attributes of the first three-dimensional object is mapped to one or more different aspects of the real-time machine data;
generating a first clustering object within the three-dimensional model, wherein the first clustering object encompasses the first plurality of three-dimensional objects;
determining a first state associated with a first three-dimensional object included in the first plurality of three-dimensional objects, wherein the first state comprises a variable alert state having one of at least three alert states, and wherein the first state is determined based on at least one aspect of the real-time machine data mapped to the first three-dimensional object and any corresponding aspects inherited from one or more lower level hierarchical components associated with the at least one first three-dimensional object;
determining a second state associated with a second three-dimensional object included in the plurality of three-dimensional objects, wherein the second state comprises a variable alert state having one of at least three alert states, and wherein the second state determination is based on at least one aspect of real-time machine data mapped to the second three dimensional object and at least one corresponding aspect inherited from one or more lower level hierarchical components associated with the at least one second three-dimensional object, wherein the first and second three-dimensional object are different three-dimensional objects within the plurality of three-dimensional objects;
determining an alert level associated with the first clustering object based on a comparison between the alert state associated with the first state and the alert state associated with the second state, wherein the alert level comprises one of at least three alert states, and wherein the first clustering object inherits the alert state from each of the first three-dimensional object and the second three-dimensional object;
selecting a cluster state associated with the first clustering object based on the determined alert level, wherein the cluster state causes a visual aspect of the first clustering object to change as the cluster state changes, wherein the visual aspect is different for each of the at least three alert states; and
displaying a first portion of the three-dimensional model that includes the first clustering object and a graphical representation of the cluster state.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems and methods according to various embodiments enable a user to view three-dimensional representations of data objects (“nodes”) within a 3D environment from a first person perspective. The system may be configured to allow the user to interact with the nodes by moving a virtual camera through the 3D environment. The nodes may have one or more attributes that may correspond, respectively, to particular static or dynamic values within the data object'"'"'s data fields. The attributes may include physical aspects of the nodes, such as color, size, or shape. The system may group related data objects within the 3D environment into clusters that are demarked using one or more cluster designators, which may be in the form of a dome or similar feature that encompasses the related data objects. The system may enable multiple users to access the 3D environment simultaneously, or to record their interactions with the 3D environment.
-
Citations
27 Claims
-
1. A computer-implemented method, comprising:
-
receiving data from an external data source, wherein the data comprises real-time machine data that reflects activity within an information technology infrastructure of an organization; generating a three-dimensional model that includes a first plurality of three-dimensional objects, wherein each three-dimensional object included in the first plurality of three-dimensional objects has multiple attributes and a state derived from at least one aspect of the data, and each of the multiple attributes of the first three-dimensional object is mapped to one or more different aspects of the real-time machine data; generating a first clustering object within the three-dimensional model, wherein the first clustering object encompasses the first plurality of three-dimensional objects; determining a first state associated with a first three-dimensional object included in the first plurality of three-dimensional objects, wherein the first state comprises a variable alert state having one of at least three alert states, and wherein the first state is determined based on at least one aspect of the real-time machine data mapped to the first three-dimensional object and any corresponding aspects inherited from one or more lower level hierarchical components associated with the at least one first three-dimensional object; determining a second state associated with a second three-dimensional object included in the plurality of three-dimensional objects, wherein the second state comprises a variable alert state having one of at least three alert states, and wherein the second state determination is based on at least one aspect of real-time machine data mapped to the second three dimensional object and at least one corresponding aspect inherited from one or more lower level hierarchical components associated with the at least one second three-dimensional object, wherein the first and second three-dimensional object are different three-dimensional objects within the plurality of three-dimensional objects; determining an alert level associated with the first clustering object based on a comparison between the alert state associated with the first state and the alert state associated with the second state, wherein the alert level comprises one of at least three alert states, and wherein the first clustering object inherits the alert state from each of the first three-dimensional object and the second three-dimensional object; selecting a cluster state associated with the first clustering object based on the determined alert level, wherein the cluster state causes a visual aspect of the first clustering object to change as the cluster state changes, wherein the visual aspect is different for each of the at least three alert states; and displaying a first portion of the three-dimensional model that includes the first clustering object and a graphical representation of the cluster state. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A non-transitory computer-readable medium including instructions that, when executed by a processor, cause the processor to perform the steps of:
-
receiving data from an external data source, wherein the data comprises real-time machine data that reflects activity within an information technology infrastructure of an organization; generating a three-dimensional model that includes a first plurality of three-dimensional objects, wherein each three-dimensional object included in the first plurality of three-dimensional objects has multiple attributes and a state derived from at least one aspect of the data, and each of the multiple attributes of the first three-dimensional object is mapped to one or more different aspects of the real-time machine data; generating a first clustering object within the three-dimensional model, wherein the first clustering object encompasses the first plurality of three-dimensional objects; determining a first state associated with a first three-dimensional object included in the first plurality of three-dimensional objects, wherein the first state comprises a variable alert state having one of at least three alert states, and wherein the first state is determined based on at least one aspect of the real-time machine data mapped to the first three-dimensional object and any corresponding aspects inherited from one or more lower level hierarchical components associated with the at least one first three-dimensional object; determining a second state associated with a second three-dimensional object included in the plurality of three-dimensional objects, wherein the second state comprises a variable alert state having one of at least three alert states, and wherein the second state determination is based on at least one aspect of real-time machine data mapped to the second three dimensional object and at least one corresponding aspect inherited from one or more lower level hierarchical components associated with the at least one second three-dimensional object, wherein the first and second three-dimensional object are different three-dimensional objects within the plurality of three-dimensional objects; determining an alert level associated with the first clustering object based on a comparison between the alert state associated with the first state and the alert state associated with the second state, wherein the alert level comprises one of at least three alert states, and wherein the first clustering object inherits the alert state from each of the first three-dimensional object and the second three-dimensional object; selecting a cluster state associated with the first clustering object based on the determined alert level, wherein the cluster state causes a visual aspect of the first clustering object to change as the cluster state changes, wherein the visual aspect is different for each of the at least three alert states; and displaying a first portion of the three-dimensional model that includes the first clustering object and a graphical representation of the cluster state. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A computer system, comprising:
-
a memory that stores instructions; and a processor that is coupled to the memory and, when executing the instructions, is configured to; receive data from an external data source, wherein the data comprises real-time machine data that reflects activity within an information technology infrastructure of an organization; generate a three-dimensional model that includes a first plurality of three-dimensional objects, wherein each three-dimensional object included in the first plurality of three-dimensional objects has multiple attributes and a state derived from at least one aspect of the data, and each of the multiple attributes of the first three-dimensional object is mapped to one or more different aspects of the real-time machine data; generate a first clustering object within the three-dimensional model, wherein the first clustering object encompasses the first plurality of three-dimensional objects; determine a first state associated with a first three-dimensional object included in the first plurality of three-dimensional objects, wherein the first state comprises a variable alert state having one of at least three alert states, and wherein the first state is determined based on at least one aspect of the real-time machine data mapped to the first three-dimensional object and any corresponding aspects inherited from one or more lower level hierarchical components associated with the at least one first three-dimensional object; determine a second state associated with a second three-dimensional object included in the plurality of three-dimensional objects, wherein the second state comprises a variable alert state having one of at least three alert states, and wherein the second state determination is based on at least one aspect of real-time machine data mapped to the second three dimensional object and at least one corresponding aspect inherited from one or more lower level hierarchical components associated with the at least one second three-dimensional object, wherein the first and second three-dimensional object are different three-dimensional objects within the plurality of three-dimensional objects; determine an alert level associated with the first clustering object based on a comparison between the alert state associated with the first state and the alert state associated with the second state, wherein the alert level comprises one of at least three alert states, and wherein the first clustering object inherits the alert state from each of the first three-dimensional object and the second three-dimensional object; select a cluster state associated with the first clustering object based on the determined alert level, wherein the cluster state causes a visual aspect of the first clustering object to change as the cluster state changes, wherein the visual aspect is different for each of the at least three alert states; and display a first portion of the three-dimensional model that includes the first clustering object and a graphical representation of the cluster state. - View Dependent Claims (20, 21, 22, 23, 24, 25, 26, 27)
-
Specification