Visualizing time-dense episodes

An article comprising at least one non-transitory machine-readable storage medium storing instructions that upon execution cause a system to:

• identify attributes in incoming data records;
• add data records to episodes that correspond to respective ones of the attributes, where adding a given one of the data records to a particular one of the episodes is in response to determining that the given data record has a time distance to a previous data record of less than an aggregate time distance among data records of the particular episode;
• score the episodes, where the particular episode is scored based on relative time densities between successive data records of the particular episode and on the aggregate time distance;
• and
• produce a visualization of at least some of the episodes based on the scoring to provide an alert of time-dense episodes.

A system comprising:

• at least one processor to:
• identify attributes in data records;
• detect episodes corresponding to the respective attributes, wherein each of the episodes includes a respective collection of events represented by the data records that relate to a corresponding attribute;
• score the episodes, where scoring of a particular one of the episodes is based on relative time densities between successive data records of the particular episode;
• produce a visualization of at least some of the episodes to provide an alert of time-dense episodes, the visualization including graphical portions representing the respective at least some of the episodes, each of the graphical portions including graphical elements representing respective events in a corresponding one of the episodes;
• and
• ordering, by the system, the graphical portions in the visualization according to scores calculated by the scoring of the episodes, the scores including a score calculated by the scoring of the particular episode.