Interactive punchcard visualizations

Patent metadata

Field	Value
Publication number	US-2020019548-A1
Application number	US-201916581876-A
Country	US
Kind code	A1
Filing date	Sep 25, 2019
Priority date	Jul 31, 2016
Publication date	Jan 16, 2020
Grant date	—

Abstract

Disclosed are a system and a method for providing user-interactive diagrams. In an embodiment, a machine data search and analysis system retrieving search results including a plurality of events, in response to a search query. The system identifies a first characteristic type from data of the plurality of events as a horizontal dimension of a multidimensional chart, and a second characteristic type from the retrieved data as a vertical dimension of the multi-dimensional chart. The system causes display of the multi-dimensional chart indicative of the data of the plurality of events. The multi-dimensional chart includes a table of a plurality of objects. Each object of the plurality of objects represents one or more events that share a common value of the first characteristic type and share a common value of the second characteristic type.

First claim

What is claimed is:

1 . A method comprising:
in response to a search query, retrieving search results including a plurality of events, each of the plurality of events containing time-stamped data; identifying a first characteristic type from the time-stamped data of the plurality of events as a horizontal dimension of an interactive multi-dimensional chart, and a second characteristic type from the time-stamped data as a vertical dimension of the interactive multi-dimensional chart; causing display of the interactive multi-dimensional chart indicative of the time-stamped data corresponding to the plurality of events, the interactive multi-dimensional chart including a table of a plurality of objects, each object of the plurality of objects representing one or more events of the plurality of events that share a value of the first characteristic type and share a value of the second characteristic type; in response to a signal indicative of a user interaction with an individual object of the plurality of objects in the interactive multi-dimensional chart, identifying a subset of the plurality of events that correspond with the individual object; and causing dynamic updating of display of the interactive multi-dimensional chart based on a processing of the subset of the plurality of events.

2 . The method of claim 1 , wherein the interactive multi-dimensional chart is an interactive punchcard visualization, and wherein each of the plurality of objects are dots in the interactive punchcard visualization.

3 . The method of claim 1 , wherein the time-stamped data comprises machine data.

4 . The method of claim 1 , wherein the time-stamped data comprises real-time event data.

5 . The method of claim 1 , wherein causing display of the interactive multi-dimensional chart includes:
formatting the time-stamped data corresponding to the plurality of events for use with a code library for generating a static visualization; and rendering a formatted version of the time-stamped data using the code library.

6 . The method of claim 1 , further comprising:
continually updating the interactive multi-dimensional chart when the search results are updated with new events.

7 . The method of claim 1 , wherein a size of each individual object is indicative of a total number of the one or more events or a result of a statistical aggregation from a field across the one or more events, the one or more events sharing the value of the first characteristic type and sharing the value of the second characteristic type.

8 . The method of claim 1 , wherein a color of each individual object is indicative of a value of a third characteristic type shared by the one or more events.

9 . The method of claim 1 , wherein a color of each individual object is indicative of a data range of a field that is shared by the one or more events.

10 . The method of claim 1 , wherein a color of each individual object is indicative of a category that is shared by the one or more events.

11 . The method of claim 1 , wherein each of the plurality of objects is a dot.

12 . The method of claim 1 , where the signal is indicative of a cursor being positioned over the individual object of the plurality of objects, and wherein causing dynamic updating of display of the interactive multi-dimensional chart includes:
in response to the signal, displaying a total number of the one or more events that share the value of the first characteristic type and share the value of the second characteristic type.

13 . The method of claim 1 , where the signal is indicative of a cursor being positioned over the individual object of the plurality of objects, and wherein causing dynamic updating of display of the interactive multi-dimensional chart includes:
in response to the signal, displaying a hovering window that includes additional information related to the individual object.

14 . The method of claim 1 , where the signal is indicative of a cursor being positioned over the individual object of the plurality of objects, and wherein causing dynamic updating of display of the interactive multi-dimensional chart includes:
in response to the signal, displaying an event represented by the individual object.

15 . The method of claim 1 , wherein the horizontal dimension represents a first time unit and the vertical dimension represents a second time unit, the first time unit being a subset of the second time unit.

16 . The method of claim 1 , further comprising:
generating a user interface element for users to specify a time range of events as part of the search query.

17 . The method of claim 1 , further comprising:
in response to a user input, causing dynamic switching of the interactive multi-dimensional chart between a categorical color mode and a sequential color mode; wherein in the sequential color mode, a color of the individual object of the plurality of objects is indicative of a data range of a field that is shared by the events represented by the individual object; and wherein in the categorical color mode, the color of the individual object of the plurality of objects is indicative of a category that is shared by the events represented by the individual object.

18 . The method of claim 1 , further comprising:
displaying the plurality of objects in a plurality of colors, wherein a color of the individual object of the plurality of objects denotes a data range of a field that is shared by the events represented by the individual object; in response to a user input, adjusting the data ranges of the field for the plurality of colors; and causing the colors of the objects to dynamically change based on the adjusted data range of the field.

19 . The method of claim 1 , further comprising:
generating a second interactive multi-dimensional chart indicative of time-stamped data of corresponding to the subset of the plurality of events.

20 . The method of claim 1 , further comprising:
receiving a user input identifying a third characteristic type from time-stamped data corresponding to the subset of the plurality of events as a horizontal dimension of the interactive multi-dimensional chart, and identifying a fourth characteristic type from the time-stamped data corresponding to the subset of the plurality of events as a vertical dimension of the interactive multi-dimensional chart; wherein display of the interactive multi-dimensional chart is dynamically updated to include a second table of a second plurality of objects, each object of the second plurality of objects representing one or more of the subset of the plurality of events that share a value of the third characteristic type and share a value of the fourth characteristic type.

21 . The method of claim 1 , further comprising:
automatically identifying, without requiring further human input, a third characteristic type from time-stamped data corresponding to the subset of the plurality of events as a horizontal dimension of the interactive multi-dimensional chart, and a fourth characteristic type from the time-stamped data corresponding to the subset of the plurality of events as a vertical dimension of the interactive multi-dimensional chart; wherein display of the interactive multi-dimensional chart is dynamically updated to include a second table of a second plurality of objects, each object of the second plurality of objects representing one or more of the subset of the plurality of events that share a value of the third characteristic type and sh

Assignees

• Splunk Inc

Inventors

• Agnew Marshall Chalmers
• Porath Michael
• Wied Patrick
• Mullen Clark Eugene

Classifications

• G06T11/26

  Drawing of charts or graphs · CPC title

• G06F16/248 Primary

  Presentation of query results · CPC title

• G06F3/0482

  Interaction with lists of selectable items, e.g. menus · CPC title

• G06F3/04812

  Interaction techniques based on cursor appearance or behaviour, e.g. being affected by the presence of displayed objects · CPC title

• G06F16/2264

  Multidimensional index structures · CPC title