Concurrent visualization of time-series network metrics for correlation inference
AssigneeCisco Technology, Inc.
InventorsTimothy Simon Stirling, Federico Lovison, Simone Lippolis
Life of this patent
Estimating the term…
Abstract
In one embodiment, a device obtains telemetry data indicative of a plurality of different types of events that occurred in a network. The device computes event counts for each of the plurality of different types of events within each of a sequence of predefined timespans based on the telemetry data and generates timeseries for each of the plurality of different types of events using the event counts. The device provides display data that causes a user interface to display a selected two or more of the timeseries concurrently.
Claims18
A method comprising:
- obtaining, by a device, telemetry data indicative of a plurality of different types of events that occurred in a network;
- computing, by the device and based on the telemetry data, event counts for each of the plurality of different types of events within each of a sequence of predefined timespans;
- generating, by the device, timeseries for each of the plurality of different types of events using the event counts;
- and
- providing, by the device, display data that causes a user interface to display a selected two or more of the timeseries concurrently, wherein the display data causes the user interface to represent the selected two or more of the timeseries as heatmaps that represent their respective event counts for each of the sequence of predefined timespans.
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the one or more network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process that is executable by the processor, the process, when executed, configured to:
- obtain telemetry data indicative of a plurality of different types of events that occurred in a network;
- compute, based on the telemetry data, event counts for each of the plurality of different types of events within each of a sequence of predefined timespans;
- generate timeseries for each of the plurality of different types of events using the event counts;
- and
- provide display data that causes a user interface to display a selected two or more of the timeseries concurrently, wherein the display data causes the user interface to represent the selected two or more of the timeseries as heatmaps that represent their respective event counts for each of the sequence of predefined timespans.
A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:
- obtaining, by a device, telemetry data indicative of a plurality of different types of events that occurred in a network;
- computing, by the device and based on the telemetry data, event counts for each of the plurality of different types of events within each of a sequence of predefined timespans;
- generating, by the device, timeseries for each of the plurality of different types of events using the event counts;
- and
- providing, by the device, display data that causes a user interface to display a selected two or more of the timeseries concurrently, wherein the display data causes the user interface to represent the selected two or more of the timeseries as heatmaps that represent their respective event counts for each of the sequence of predefined timespans.
Dependencies are inferred from the claim text.