Service Detail Monitoring Console

Patent metadata

Field	Value
Publication number	US-2016294606-A1
Application number	US-201615088087-A
Country	US
Kind code	A1
Filing date	Mar 31, 2016
Priority date	Oct 9, 2014
Publication date	Oct 6, 2016
Grant date	—

Abstract

An automatic service monitor in an information-technology environment performs regular search queries against generated machine data to derive performance measurements. The information technology environment is defined in terms of services provided by entities, and the performance measurements are defined as key performance indicators (KPIs) of the services. Generated machine data used by the search queries pertain to the entities performing the service. Definitional information for the services, entities, and KPIs is administered by a user to control the operation of the service monitor. Various aspects of such definitional information as well as related performance measurement information may be presented in a unified console display tailored to, and organized around, a particular service. The console display may serve as a central launch point by supporting user interaction to navigate to other specialized monitoring interfaces.

First claim

What is claimed is:

1 . A method comprising:
receiving an identification of a service having a stored service definition, the stored service definition identifying one or more entities that perform the service; causing display of a service-specific interface page in accordance with the received identification, the interface page including:
a service portion including an identifier of the particular service;
a key performance indicator (KPI) portion including at least one interactive KPI entry; and
an entity portion including at least one interactive entity entry;
wherein each entity entry corresponds to an entity from among the one or more entities that perform the service, each of the one or more entities having a stored entity definition that identifies machine data produced by or about the entity, the machine data produced by one or more components within an information technology environment and reflecting activity within the information technology environment; wherein each KPI entry corresponds to a KPI defined by a search query that derives a value from machine data identified in one or more of the entity definitions, the value indicative of a performance measure of the service; and wherein the method is performed by a computer system comprising one or more processors.

2 . The method of claim 1 wherein the interface page further includes a service topology portion including a representation of the service and one or more other services each having a dependency relationship with the service.

3 . The method of claim 1 further comprising:
receiving an indication of a user-specified time frame; and
causing a refresh of information of the at least one interactive KPI entry and of the at least one interactive entity entry based on the user-specified time frame.

4 . The method of claim 1 wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier and a graphical depiction of related time series performance data.

5 . The method of claim 1 wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier, a graphical depiction of related time series performance data, and an indication of an associated state.

6 . The method of claim 1 wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier, a graphical depiction of related time series performance data, and a color-coded indication of an associated state.

7 . The method of claim 1 further comprising:
receiving an indication of a user interaction with the KPI entry and responsively causing the display of a different user interface having a time-based graph lane visualizing data of the KPI corresponding to the KPI entry.

8 . The method of claim 1 wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier and a graphical depiction of related time series performance data.

9 . The method of claim 1 wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier, a graphical depiction of related time series performance data, and an indication of an associated state.

10 . The method of claim 1 wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier, a graphical depiction of related time series performance data, and a color-coded indication of an associated state.

11 . The method of claim 1 further comprising:
receiving an indication of a user interaction with the entity entry and responsively causing the display of an entity detail interface based on the entity corresponding to the entity entry.

12 . The method of claim 1 :
wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier and a graphical depiction of related time series performance data; and wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier and a graphical depiction of related time series performance data.

13 . The method of claim 1 :
wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier, a graphical depiction of related time series performance data, and a color-coded indication of an associated state; and wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier and a graphical depiction of related time series performance data.

14 . The method of claim 1 :
wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier, a graphical depiction of related time series performance data, and a color-coded indication of an associated state; and wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier, a graphical depiction of related time series performance data, and a color-coded indication of an associated state.

15 . A system comprising:
a memory; and a processing device coupled with the memory to:
receive an identification of a service having a stored service definition, the stored service definition identifying one or more entities that perform the service;
cause display of an interface page specialized to the service in accordance with the received identification, the interface page including:
a service portion including an identifier of the particular service;
a key performance indicator (KPI) portion including at least one interactive KPI entry; and
an entity portion including at least one interactive entity entry;

wherein each entity entry corresponds to an entity from among the one or more entities that perform the service, each of the one or more entities having a stored entity definition that identifies machine data produced by or about the entity, the machine data produced by one or more components within an information technology environment and reflecting activity within the information technology environment; and
wherein each KPI entry corresponds to a KPI defined by a search query that derives a value from machine data identified in one or more of the entity definitions, the value indicative of a performance measure of the service.

16 . The system of claim 15 wherein the interface page further includes a service topology portion including a representation of the service and one or more other services each having a dependency relationship with the service.

17 . The system of claim 15 further comprising to:
receive an indication of a user-specified time frame; and
cause a refresh of information of the at least one interactive KPI entry and of the at least one interactive entity entry based on the user-specified time frame.

18 . The system of claim 15 wherein the KPI entry includes, for the KPI corresponding to the KPI entry, an identifier and a graphical depiction of related time series performance data.

19 . The system of claim 15 further comprising to:
receive an indication of a user interaction with the KPI entry and responsively causing the display of a different user interface having a time-based graph lane visualizing data of the KPI corresponding to the KPI entry.

20 . The system of claim 15 wherein the entity entry includes, for the entity corresponding to the entity entry, an identifier and a graphical depiction of related time series performance data.

21 . The system of claim 15 further comprising to:
receive an indication of a user interaction with the entity entry and responsively causing the display of an entity detail interface based on the entity cor

Assignees

• Splunk Inc

Inventors

• Puri Asmita
• Hardin Alan Vincent
• Hsiao Fang I
• Bhide Alok Anant

Classifications

• G06Q10/06393 Primary

  Score-carding, benchmarking or key performance indicator [KPI] analysis · CPC title

• H04L43/04

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L67/22

  Electricity · mapped topic

• H04L41/0695 Primary

  the faulty arrangement being the maintenance, administration or management system · CPC title

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title