Technologies for performing attribute constrained queries for real-time event flow visualizations and analytics

A system for performing attribute constrained queries for real-time event sequence visualization, the system comprising:

• at least one processor;
• and
• at least one memory comprising a plurality of instructions stored thereon that, in response to execution by the at least one processor, causes the system to:
• retrieve an event sequence dataset, wherein the event sequence dataset includes data for a plurality of event sequences and a plurality of events, and wherein each event sequence of the plurality of events sequences includes at least one event;
• determine a plurality of singleton events from the plurality of events included in the event sequence dataset, wherein each singleton event is associated with an attribute;
• generate a plurality of event pattern sets, wherein each event pattern set corresponds to a distinct singleton event and maintains a fixed positional order for each event sequence, and wherein each event pattern set includes pattern occurrence data for each event sequence arranged according to the fixed positional order;
• generate a forward search index that includes each event pattern set corresponding to each distinct singleton event of the plurality of singleton events;
• identify the fixed positional order maintained by each event pattern set for each event sequence;
• generate an attribute constraint search structure that includes a plurality of keys and a plurality of pointer values, wherein each pointer value of the plurality of pointer values is associated with one or more key values of the plurality of key values;
• insert a sequence identifier corresponding to each event sequence of the plurality of event sequences into the attribute constraint search structure as a pointer value of the plurality of pointer values, wherein the sequence identifier corresponding to each event sequence is indicative of the fixed positional order maintained by each event pattern set for each event sequence;
• and
• insert each attribute associated with each singleton event into the attribute constraint search structure as a key value of the plurality of key values.

One or more non-transitory machine-readable storage media comprising a plurality of instructions stored thereon that, in response to execution by a computing system, causes the computing system to:

• retrieve an event sequence dataset, wherein the event sequence dataset includes data for a plurality of event sequences and a plurality of events, and wherein each event sequence of the plurality of events sequences includes at least one event;
• determine a plurality of singleton events from the plurality of events included in the event sequence dataset, wherein each singleton event is associated with an attribute;
• generate a plurality of event pattern sets, wherein each event pattern set corresponds to a distinct singleton event and maintains a fixed positional order for each event sequence, and wherein each event pattern set includes pattern occurrence data for each event sequence arranged according to the fixed positional order;
• generate a forward search index that includes each event pattern set corresponding to each distinct singleton event of the plurality of singleton events;
• identify the fixed positional order maintained by each event pattern set for each event sequence;
• generate an attribute constraint search structure that includes a plurality of keys and a plurality of pointer values, wherein each pointer value of the plurality of pointer values is associated with one or more key values of the plurality of key values;
• insert a sequence identifier corresponding to each event sequence of the plurality of event sequences into the attribute constraint search structure as a pointer value of the plurality of pointer values, wherein the sequence identifier corresponding to each event sequence is indicative of the fixed positional order maintained by each event pattern set for each event sequence;
• insert each attribute associated with each singleton event into the attribute constraint search structure as a key value of the plurality of key values;
• receive a search request that includes an attribute constraint;
• search the attribute constraint search structure to identify one or more key values of the plurality of key values that satisfy the attribute constraint;
• determine, within the attribute constraint search structure, one or more pointer values associated with the one or more key values of the plurality of key values that satisfy the attribute constraint;
• and
• output the sequence identifier associated with each of the determined one or more pointer values.