Concurrent Display of Search Results from Differing Time-Based Search Queries Executed Across Event Data
AssigneeSplunk Inc.
InventorsCary Noel, John Coates
Life of this patent
Estimating the term…
Loading patent…
AssigneeSplunk Inc.
InventorsCary Noel, John Coates
Estimating the term…
A visualization can include a set of swim lanes, each swim lane representing information about an event type. An event type can be specified, e.g., as those events having certain keywords and/or having specified value(s) for specified field(s). The swim lane can plot when (within a time range) events of the associated event type occurred. Specifically, each such event can be assigned to a bucket having a bucket time matching the event time. A swim lane can extend along a timeline axis in the visualization, and the buckets can be positioned at a point along the axis that represents the bucket time. Thus, the visualization may indicate whether events were clustered at a point in time. Because the visualization can include a plurality of swim lanes, the visualization can further indicate how timing of events of a first type compare to timing of events of a second type.
A method, comprising:
One or more non-transitory computer-readable storage media, storing one or more sequences of instructions, which when executed by one or more processors cause performance of:
An apparatus, comprising:
Dependencies are inferred from the claim text.