Live log analysis for real-time data manipulation and visualization of a large data set

An apparatus comprising:

• a network interface communicatively coupled to a network;
• a processor communicatively coupled to the network interface;
• and
• memory storing computer-executable instructions that, when executed, cause the processor to
• obtain monitoring data from a cloud-based system, wherein the monitoring data is based on transactions associated with a plurality of users of the cloud-based system,
• provide a Graphical User Interface (GUI),
• obtain a plurality of filter selections for a plurality of filter types, and
• cause a display of a visualization comprising a Sankey diagram of the monitoring data with nodes in the Sankey diagram including each of the plurality of filter types and links between the nodes indicative of the transactions in the monitoring data.

A method comprising:

• obtaining monitoring data from a cloud-based system, wherein the monitoring data is based on transactions associated with a plurality of users of the cloud-based system;
• providing a Graphical User Interface (GUI);
• obtaining a plurality of filter selections for a plurality of filter types;
• and
• displaying a visualization comprising a Sankey diagram of the monitoring data with nodes in the Sankey diagram including each of the plurality of filter types and links between the nodes indicative of the transactions in the monitoring data.