Displaying a visualization of event instances and common event sequences

A system for displaying a visualization from an event log, the system comprising:

• a data storage device to store the event log, wherein the event log is a record of a plurality of events that occurred in a system;
• a sequence extraction processing module to extract a plurality of sequences of events from the event log and transitions to a next event, and wherein a sequence of events comprises a plurality of events connected by one or more transitions;
• a sequence graph generating module to generate a sequence graph from the sequences, wherein the sequence graph comprises nodes representing one or more of the events of the event log and wherein the one or more events of each node have a common property;
• and
• a graphing module to create a sequence graph diagram from the sequence graph, wherein the sequence graph visualization comprises (i) node icons representing the nodes of the sequence graph, (ii) node transition icons representing transitions between nodes, and (iii) for at least one of the nodes, an event icon associated with that node for each of the one or more events that are represented by that node.

A computer program product for displaying a visualization, the computer program product comprising:

• a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising instructions which when executed causes a computer to carry out the following steps:
• extracting a plurality of sequences of events from the event log, wherein the event log is a record of a plurality of events that occurred and transitions to a next event, and wherein a sequence of events comprises a plurality of events, wherein each event in the sequence, other then a last event in the sequence, is connected to a next event in the sequence by a relationship;
• generating a sequence graph from the sequences, wherein the sequence graph comprises nodes representing one or more of the events of the event log, and wherein the one or more events of each node have a common property in addition to said relationship;
• and
• displaying a sequence graph visualization from the sequence graph, wherein the sequence graph visualization comprises (i) node icons representing the nodes of the sequence graph, (ii) node transition icons representing relationships between events represented by the nodes, and (iii) for at least one of the nodes, an event icon associated with that node for each of the one or more events that are represented by that node.