ENHANCING VISUALIZATION OF RELATIONSHIPS AND TEMPORAL PROXIMITY BETWEEN EVENTS

• US 20110032260A1
• Filed: 08/05/2009
• Published: 02/10/2011
• Est. Priority Date: 08/05/2009
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Duggan, Matthew E., Martin, Daniel
• Application Number:
  US12/535,845
• Publication Number:
  US 20110032260A1
• Time in Patent Office: Days
• US Class Current: 345/440
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time

Abstract

Components and functionality can be implemented in an event management application to display events along a timeline. A display interval can be configured for the timeline and a scroll bar can allow scrolling to view different time periods on the timeline. In addition, filters may be applied to the events, so that relationships between events may be visualized. For example, the events may be filtered by network resource name, so that groups of events related to each network resource can be grouped together along the timeline.

Claims

1. A method comprising:

receiving, in an event management unit, a plurality of network events associated with one or more devices on a network;

determining that attributes of the plurality of network events match criteria indicated in one or more filters of the event management unit, wherein the attributes of the network event comprise at least one of a network resource identifier, an event identifier, a time stamp, failure information, topological data, and a network location;

grouping the plurality of network events in accordance with the one or more filters;

determining a first time and a second time for each of the plurality of network events, wherein the first and second times represent, at least one of, arrival of events, status changes, event start times, event end times, first occurrence of events, and last occurrence of events; and

displaying the grouped plurality of network events, in a network event viewer, along a timeline based on the first and second times.

2. The method of claim 1, wherein said displaying the grouped plurality of network events, in the network event viewer, along the timeline based on the first and second times, further comprises presenting the timeline based on a time window, wherein the time window is segmented based on a time interval.

3. The method of claim 2 further comprises:

allowing scrolling of the time window to display different time periods of the timeline.

4. The method of claim 3 further comprising:

pausing a particular time interval on the timeline based on an indication by a user.

5. The method of claim 1, wherein said displaying the grouped plurality of network events, in the network event viewer, along the timeline based on the first and second times further comprises:

color-coding the network events to indicate severity of the network events.

6. The method of claim 1 further comprising:

displaying a summary of attributes of a first of the plurality of network events based on indication from a user, wherein the indication comprises at least one of a right-click and a mouse over.

7. A computer program product for enhancing visualization of relationships and temporal proximity between events, the computer program product comprising:

a computer usable medium having computer usable program code embodied therewith, the computer usable program code comprising;

computer usable program code configured to,

receive, in an event management unit, a plurality of network events associated with one or more devices on a network;

determine that attributes of the plurality of network events match criteria indicated in one or more filters of the event management unit, wherein the attributes of the network event comprise at least one of a network resource identifier, an event identifier, a time stamp, failure information, topological data, and a network location;

group the plurality of network events in accordance with the one or more filters;

determine a first time and a second time for each of the plurality of network events, wherein the first and second times represent, at least one of, arrival of events, status changes, event start times, event end times, first occurrence of events, and last occurrence of events; and

display the grouped plurality of network events, in a network event viewer, along a timeline based on the first and second times.

8. The computer program product of claim 7, wherein the computer usable program code being configured to group the plurality of network events, in the network event viewer, along the timeline based on the first and second times, comprises the computer usable program code being configured to present the timeline based on a time window, wherein the time window is segmented based on a time interval.

9. The computer program product of claim 8 comprises the computer usable program code being further configured to:

allow scrolling of the time window to display different time periods of the timeline.

10. The computer program product of claim 9 comprises the computer usable program code being further configured to:

pause a particular time interval on the timeline based on an indication by a user.

11. The computer program product of claim 7, wherein the computer usable program code being configured to display the grouped plurality of network events, in the network event viewer, along the timeline based on the first and second times comprises the computer usable program code being configured to:

color-code the network events to indicate severity of the network events.

12. The computer program product of claim 7 comprises the computer usable program code being further configured to:

display a summary of attributes of a first of the plurality of network events based on indication from a user, wherein the indication comprises at least one of a right-click and a mouse over.

13. A system for electronically managing components of a network, the system comprising:

a network device configured to transmit, over the network, events indicating operational status of the network device;

an event management unit configured to receive the events over the network, the event management unit including,

a database to store the events;

one or more filters configured to group the events;

a network event viewer to receive the events from the database and to present the events along a timeline according to the one or more filters.

14. The system of claim 13, wherein the one or more filters group the events based on, at least one of, network locations, device identifiers, event types, levels of urgency, device type, topology data, etc.

15. An apparatus comprising:

one or more processing units;

a network interface; and

an event management unit configured to,

receive a plurality of network events from a network;

determine that attributes of the plurality of network events match criteria indicated in one or more filters, wherein the attributes of the network event comprise at least one of a network resource name, an event type, a time stamp, failure information, topology data, and a network location;

group the plurality of network events in accordance with the one or more filters;

determine a first time and an second time for each of the plurality of network events, wherein the first and second times represent, at least one of, arrival of events, status changes, event start times, event end times, first occurrence of events, and last occurrence of events; and

display the grouped plurality of network events, in a network event viewer, along a timeline based on the first and second times.

16. The apparatus of claim 15, wherein the event management unit being configured to display the grouped plurality of network events, in the network event viewer, along the timeline based on the first and second times further comprises the event management unit being configured to:

present the timeline based on a time window, wherein the time window is segmented based on a time interval.

17. The apparatus of claim 16 further comprises the event management unit being configured to:

allow scrolling of the time window to display different time periods of the timeline.

18. The apparatus of claim 15 further comprises the event management unit being configured to:

pause a particular time interval on the timeline based on an indication by a user.

19. The apparatus of claim 15, wherein the event management unit being configured to display the grouped plurality of network events, in the network event viewer, along the timeline based on the first and second times further comprises the event management unit being configured to:

color-code the network events to indicate severity of the network events.

20. The apparatus of claim 15 further comprises the event management unit being configured to:

display a summary of attributes of a first of the plurality of network events based on indication from a user, wherein the indication comprises at least one of a right-click and a mouse over.