Cross-system nested journey monitoring based on relation of machine data
AssigneeSplunk Inc.
InventorsJoerg Beringer, Isabelle Park
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for cross-system nested journey modeling based on relation of machine data. An example method includes obtaining information describing a user journey that includes multiple steps, each step corresponding to a query to be applied to events related to data sources. At least one step is a nested user journey including sub-steps. Events obtained from the data sources are related based on the obtained information. The results of the relating are displayed.
Claims30
A method comprising:
- obtaining information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to events associated with one or more data sources, wherein at least one step is a nested user journey including a plurality of sub-steps, and wherein each event associated with a first data source includes first information indicative of an entity associated with the event and each event associated a second data source includes second information indicative of an entity associated with the event;
- relating, based on the obtained information, events returned as a result of the query of each of the steps, wherein relating a set of the events is based on a stitching scheme, the set including one or more first events associated with the first data source and one or more second events associated with the second data source, and wherein relating the set comprises:
- determining, based on the stitching scheme, that the first information included in the first events corresponds with the second information included in the second events;
- and
- causing display of results of the relating.
A computing system, comprising:
- one or more processing devices configured to:
- obtain information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to events associated with one or more data sources, wherein at least one step is a nested user journey including a plurality of sub-steps, and wherein each event associated with a first data source includes first information indicative of an entity associated with the event and each event associated a second data source includes second information indicative of an entity associated with the event;
- relate, based on the obtained information, events returned as a result of the query of each of the steps, wherein relating a set of the events is based on a stitching scheme, the set including one or more first events associated with the first data source and one or more second events associated with the second data source, and wherein relating the set comprises:
- determining, based on the stitching scheme, that the first information included in the first events corresponds with the second information included in the second events;
- and
- cause display of results of the relating.
Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:
- obtain information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to events associated with one or more data sources, wherein at least one step is a nested user journey including a plurality of sub-steps, and wherein each event associated with a first data source includes first information indicative of an entity associated with the event and each event associated a second data source includes second information indicative of an entity associated with the event;
- relate, based on the obtained information, events returned as a result of the query of each of the steps, wherein relating a set of the events is based on a stitching scheme, the set including one or more first events associated with the first data source and one or more second events associated with the second data source, and wherein relating the set comprises:
- determining, based on the stitching scheme, that the first information included in the first events corresponds with the second information included in the second events;
- and
- cause display of results of the relating.
Dependencies are inferred from the claim text.