Cross-system journey monitoring based on relation of machine data
AssigneeSplunk Inc.
InventorsJoerg Beringer, Isabelle Park
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for cross-system journey modeling based on relation of machine data. An example method includes obtaining information describing a user journey that includes multiple steps, each step corresponding to a query to be applied to one or more field-searchable data stores storing events, each event including a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, and each event being associated with a timestamp extracted from the portion of machine data of that event. Events returned as a result of the query of each step are related. The results of the relating are displayed.
Claims30
A method comprising:
- obtaining information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to one or more field-searchable data stores storing a plurality of events, wherein each event of the plurality of events includes a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, wherein each event is associated with a timestamp extracted from the portion of machine data of that event;
- relating, based on the obtained information, events returned as a result of the query of each of the plurality of steps;
- and
- causing display of results of the relating.
A computing system, comprising:
- one or more processing devices configured to:
- obtain information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to one or more field-searchable data stores storing a plurality of events, wherein each event of the plurality of events includes a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, wherein each event is associated with a timestamp extracted from the portion of machine data of that event;
- relate, based on the obtained information, events returned as a result of the query of each of the plurality of steps;
- and
- cause display of results of the relating.
Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:
- obtain information describing a user journey, the user journey comprising a plurality of steps,
- wherein each step of the plurality of steps corresponds to a query to be applied to one or more field-searchable data stores storing a plurality of events, wherein each event of the plurality of events includes a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, wherein each event is associated with a timestamp extracted from the portion of machine data of that event;
- relate, based on the obtained information, events returned as a result of the query of each of the plurality of steps;
- and
- cause display of results of the relating.
Dependencies are inferred from the claim text.