Journey instance generation based on one or more pivot identifiers and one or more step identifiers
AssigneeSplunk Inc.
InventorsJoerg Beringer, Isabelle Park, Joshua Walters, Eric Tschetter, Simon Fishel
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for processing events having raw machine data associated with a timestamp using one or more pivot identifiers and one or more step identifiers to generate one or more journey instances. Based on the one or more pivot identifier field, the system can relate events that have a common field value for the pivot identifier field. Based on the one or more step identifiers, the system can groups the related events into a subset of events. Using the subset of events the system can build a journey instance.
Claims30
A method, comprising:
- receiving raw machine data from one or more data sources;
- identifying a plurality of events on a computer system that satisfy a query, each event of the plurality of events comprising raw machine data associated with a time stamp;
- receiving at least one pivot identifier;
- generating a set of events from the plurality of events based on the at least one pivot identifier;
- receiving a step identifier;
- and
- grouping the set of events into one or more subsets of events based on the step identifier, wherein each subset of events represents a step instance.
A computing system, comprising:
- one or more processing devices configured to:
- generate a journey model based one the first set of events and a second set of events, the second set of events comprising a second set of step instances, wherein the journey model comprises a plurality of steps based on the first set of step instances and the second set of step instances;
- identify a plurality of progressions through the plurality of steps;
- and
- cause display of a visualization of the journey model.
Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:
- generate a journey model based one the first set of events and a second set of events, the second set of events comprising a second set of step instances, wherein the journey model comprises a plurality of steps based on the first set of step instances and the second set of step instances;
- identify a plurality of progressions through the plurality of steps;
- and
- cause display of a visualization of the journey model.
Dependencies are inferred from the claim text.