Incident review interface
AssigneeSplunk Inc.
InventorsHemendra Singh Choudhary, Cary Glen Noel
Life of this patent
Estimating the term…
Abstract
A computing machine performs a correlation search against KPI data for one or more services using a selection criteria and a triggering condition. When the triggering condition is satisfied a notable event or incident is created and information about the notable event is presented using a graphical user interface (GUI) that may have interactive elements.
Claims30
A method comprising:
- performing a correlation search associated with a service provided by one or more entities that each have corresponding machine data, the service having one or more key performance indicators (KPIs), each KPI defined by a KPI search query that derives a value from the corresponding machine data to indicate a measure of the service at a point in time or during a period of time, wherein the correlation search comprises a search criteria pertaining to stored values of the one or more KPIs, and a triggering condition evaluated against one or more values derived from stored values identified by the search criteria;
- and
- automatically recording a notable event in computer storage in response to a satisfaction of the triggering condition;
- and
- causing display of a graphical user interface (GUI) presenting information pertaining to the notable event;
- wherein the method is performed by one or more processing devices coupled to the computer storage.
A system comprising:
- a memory;
- and
- a processing device coupled with the memory to:
- perform a correlation search associated with a service provided by one or more entities that each have corresponding machine data, the service having one or more key performance indicators (KPIs), each KPI defined by a KPI search query that derives a value from the corresponding machine data to indicate a measure of the service at a point in time or during a period of time, wherein the correlation search comprises a search criteria pertaining to stored values of the one or more KPIs, and a triggering condition evaluated against one or more values derived from stored values identified by the search criteria;
- and
- automatically record a notable event in computer storage in response to a satisfaction of the triggering condition;
- and
- cause display of a graphical user interface (GUI) presenting information pertaining to the notable event.
A non-transitory computer readable storage medium encoding instructions thereon that, in response to execution by one or more processing devices, cause the one or more processing devices to perform operations comprising:
- performing a correlation search associated with a service provided by one or more entities that each have corresponding machine data, the service having one or more key performance indicators (KPIs), each KPI defined by a KPI search query that derives a value from the corresponding machine data to indicate a measure of the service at a point in time or during a period of time, wherein the correlation search comprises a search criteria pertaining to stored values of the one or more KPIs, and a triggering condition evaluated against one or more values derived from stored values identified by the search criteria;
- and
- automatically recording a notable event in computer storage in response to a satisfaction of the triggering condition;
- and
- causing display of a graphical user interface (GUI) presenting information pertaining to the notable event.
Dependencies are inferred from the claim text.