Time varying static thresholds
AssigneeSplunk Inc.
InventorsTristan Antonio Fletcher, Alok Anant Bhide
Life of this patent
Estimating the term…
Abstract
A system, method, and graphical user interface (GUI) are disclosed for defining and applying time varying static thresholds. Time varying static thresholds may enable a user (e.g., IT manager) to define multiple sets of key performance indicator (KPI) thresholds that vary over time, for example, one set may apply during week-days and another set may apply on weekends. This may enable a user to have thresholds that take into account cyclical patterns of behavior (e.g., repeat every week). The KPI thresholds may be based on any unit of time, such as an hour of the day, days of the week, a month of the year (such as a holiday season). Each set may include KPI thresholds that specify values that when exceeded may initiate an alert or some other action.
Claims30
A method comprising:
- causing display of a graphical user interface (GUI) identifying a key performance indicator (KPI) for a service, the KPI defined by a search query that produces a KPI value derived from machine data pertaining to one or more entities providing the service, the KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- receiving via the GUI a user input specifying different sets of KPI thresholds for the KPI, each set of KPI thresholds corresponding to a distinct time frame, a KPI threshold in each set of KPI thresholds representing an end of a range of values corresponding to a particular KPI state from among a set of KPI states;
- and
- causing the different sets of KPI thresholds to be available for determining a KPI state, wherein determining the KPI state includes:
- executing the search query against the machine data to produce a KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- identifying one of the sets of KPI thresholds that has a time frame covering the point in time or the period of time;
- and
- selecting the KPI state from a set of KPI states corresponding to the identified set of KPI thresholds based on the KPI value;
- wherein the method is performed by one or more processing devices.
A system comprising:
- a memory;
- and
- a processing device coupled with the memory to:
- cause display of a graphical user interface (GUI) identifying a key performance indicator (KPI) for a service, the KPI defined by a search query that produces a KPI value derived from machine data pertaining to one or more entities providing the service, the KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- receive via the GUI a user input specifying different sets of KPI thresholds for the KPI, each set of KPI thresholds corresponding to a distinct time frame, a KPI threshold in each set of KPI thresholds representing an end of a range of values corresponding to a particular KPI state from among a set of KPI states;
- and
- cause the different sets of KPI thresholds to be available to determine a KPI state, wherein to determine the KPI state the processing device is further to:
- execute the search query against the machine data to produce a KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- identify one of the sets of KPI thresholds that has a time frame covering the point in time or the period of time;
- and
- select the KPI state from a set of KPI states corresponding to the identified set of KPI thresholds based on the KPI value.
A non-transitory computer readable storage medium encoding instructions thereon that, in response to execution by one or more processing devices, cause the processing device to perform operations comprising:
- causing display of a graphical user interface (GUI) identifying a key performance indicator (KPI) for a service, the KPI defined by a search query that produces a KPI value derived from machine data pertaining to one or more entities providing the service, the KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- receiving via the GUI a user input specifying different sets of KPI thresholds for the KPI, each set of KPI thresholds corresponding to a distinct time frame, a KPI threshold in each set of KPI thresholds representing an end of a range of values corresponding to a particular KPI state from among a set of KPI states;
- and
- causing the different sets of KPI thresholds to be available for determining a KPI state, wherein determining the KPI state includes:
- executing the search query against the machine data to produce a KPI value indicative of a performance assessment for the service at a point in time or during a period of time;
- identifying one of the sets of KPI thresholds that has a time frame covering the point in time or the period of time;
- and
- selecting the KPI state from a set of KPI states corresponding to the identified set of KPI thresholds based on the KPI value;
- wherein the method is performed by one or more processing devices.
Dependencies are inferred from the claim text.