Fast ad-hoc filtering of time series analytics
AssigneeJive Software, Inc.
InventorsJared Smith-Mickelson, Lance Riedel
Life of this patent
Estimating the term…
Abstract
Techniques and tools are described for producing time-series data using faceted search based on document creation time. For example, index information can be created from events (e.g., by adding meta-data and indexing the events as documents). In addition, index information can be created that maps document creation time to time ranges. Search queries can then be executed (e.g., comprising ad-hoc filters to filter on the meta-data), and search results can be faceted on the time ranges to produce time-series data. The time-series data can be graphed to display trends of activity (e.g., trends of events based on user activity).
Claims20
A method, implemented at least in part by a computing device, for producing time-series data based, at least in part, on document creation time, the method comprising:
- receiving a search query;
- executing, by the computing device, the search query using a first set of posting lists to produce matching documents, the first set of posting lists storing index information for a set of documents that include the matching documents;
- performing, by the computing device, search faceting on the matching documents using, at least in part, a second set of posting lists, the second set of posting lists storing index information for a plurality of time ranges, wherein the performing search faceting on the matching documents comprises:
- for each time range of the plurality of time ranges:
- generating a count of documents, of the matching documents, that are present in index information for the time range;
- and
- returning, by the computing device, time-series data comprising the count of documents for each time range.
A search system for producing time-series data based, at least in part, on document creation time, the search system comprising:
- a first set of posting lists, the first set of posting lists storing index information for a set of documents, wherein the set of documents are generated from a plurality of events based on user activity within a computing environment;
- and
- a second set of posting lists, the second set of posting lists storing index information for a plurality of time ranges, wherein the second set of posting lists stores mappings between the plurality of time ranges and documents created within each of the plurality of time ranges;
- wherein the search system is configured perform operations comprising:
- receiving a search query;
- executing the search query using the first set of posting lists to produce matching documents;
- performing search faceting on the matching documents using, at least in part, the second set of posting lists, wherein the performing search faceting on the matching documents comprises:
- for each time range of the plurality of time ranges:
- generating a count of documents, of the matching documents, that are present in index information for the time range;
- and
- returning time-series data comprising the count of documents for each time range.
A computer-readable storage medium storing computer-executable instructions for causing a computing device to perform a method for producing time-series data based, at least in part, on document creation time, the method comprising:
- creating a first set of posting lists, comprising:
- for each of a plurality of events based on user activity within a computing environment:
- receiving the event;
- retrieving meta-data associated with the event;
- and
- storing the event and the meta-data as a document;
- and
- indexing the documents for the plurality of events, as a set of documents, to create the first set of posting lists;
- creating a second set of posting lists, comprising:
- for each of a plurality of time ranges, storing index information identifying which documents, of the set of documents, were created within the time range;
- and
- storing the first set of posting lists and the second set of posting lists for use during execution of search queries and search faceting to produce time-series data.
Dependencies are inferred from the claim text.