Data visualization platform for event-based behavior clustering

A non-transitory computer readable medium storing machine executable instructions to configure a processor to:

• generate hierarchical cluster for the event traces by grouping event traces having similar attributes, each event trace having attributes that represent a series of sequential indicate activities over time and one or more logical relations that represent control-flow relations between at least two activities of the series of sequential activities;
• generate a set of representative attributes for a set of event traces of the hierarchical cluster, the set of representative attributes computed based on the similar attributes, each hierarchical cluster corresponding to a set of event traces and a representative event trace based on the similar attributes as between the event traces of the set of event traces;
• generate the visual elements for multiple views for the interface application, the multiple views having a first view indicating a pattern of activities for the set of representative attributes;
• a second view indicating a selected hierarchical cluster and the pattern of activities within the selected hierarchical cluster;
• and a third view indicating descriptors for the selected hierarchical cluster, the multiple views having a plurality of selectable portions;
• control rendering of the interface application at a device to display the multiple views synchronously and simultaneously, the display indicating the plurality of selectable portions;
• and
• responsive to a selection of a selectable portion of the plurality of selectable portions, control rendering of the interface application at the device to update the multiple views synchronously based on the selected portion to navigate the selected hierarchical cluster.

A computer process to generate and update visual elements for an interactive interface application, the process comprising:

• at a processor,
• generating hierarchical clusters for event traces by grouping event traces based on distance measures, each event trace having attributes that represent a series of sequential activities over time and one or more logical relations that represent control-flow relations between at least two activities of the series of sequential activities, the event traces saved at a data storage device in communication with the processor;
• generating a set of representative attributes for a set of event traces of the hierarchical cluster, the set of representative attributes computed based on the grouped event traces;
• generating the visual elements for multiple views for the interface application, the multiple views having a first view indicating a pattern of activities for the set of representative attributes;
• a second view indicating a selected hierarchical cluster and the pattern of activities within the selected hierarchical cluster;
• and a third view indicating descriptors for the selected hierarchical cluster, the multiple views having a plurality of selectable portions;
• controlling rendering of the interface application at a device to display the multiple views synchronously;
• and
• responsive to a selection of a selectable portion of the plurality of selectable portions, controlling rendering of the interface application at the device to update the multiple views synchronously based on the selected portion, wherein the selection portion is within a view of the multiple views to trigger an update to the other views of the multiple views.