Service analyzer interface

Patent metadata

Field	Value
Publication number	US-9935864-B2
Application number	US-201414523661-A
Country	US
Kind code	B2
Filing date	Oct 24, 2014
Priority date	Sep 30, 2014
Publication date	Apr 3, 2018
Grant date	Apr 3, 2018

Abstract

Provided are systems and methods for determining and displaying service performance information via a graphical user interface. In one embodiment, a system can provide, for each of one or more machines associated with a service: obtaining performance data for the machine; and comparing the performance data for the machine to one or more predefined performance thresholds for the machine to determine a health status for the machine; and determining a health status for the service based at least in part on the health status of at least one of the one or more machines associated with the service.

First claim

What is claimed is:

1. A method comprising:
receiving source data produced by one or more components within an information technology environment that reflects activity regarding one or more machines associated with a service within the information technology environment, including sending a request and receiving a response over a network;
reflecting the source data in computer storage as timestamped events, each timestamped event comprising a segment of source data and an associated timestamp, wherein the associated timestamp is determined as part of said reflecting;
for each of the one or more machines associated with the service:
deriving a composite machine score for the machine from the one or more of the timestamped events selected at least on the basis of the associated timestamp of each of the one or more of the timestamped events, wherein the source data of the timestamped events does not include the composite machine score and wherein said deriving includes identifying field values from the source data of timestamped events by applying an extraction rule of a late-binding schema; and
comparing the composite machine score for the machine to one or more predefined thresholds to determine a health status for the machine from among a set of predefined health statuses, each threshold associated with at least one of the predefined health statuses to delimit a range of corresponding values; and

determining a health status for the service based at least in part on the health status of at least one of the one or more machines associated with the service;
wherein the method is performed by a computer system comprising one or more processors.

2. The method of claim 1 wherein the source data comprises performance data.

3. The method of claim 1 , further comprising:
for each of the one or more machines,
causing display of a plot of a history of the composite machine score for the machine over a given period of time.

4. The method of claim 1 , further comprising:
determining a score for the service based at least in part on the source data for the one or more machines associated with the service;
causing display of a plot of a history of the score for the service over a given period of time.

5. The method of claim 1 , wherein the health status for the service corresponds to a health status of a particular machine of the one or more machines associated with the service.

6. The method of claim 1 , wherein the health status for the service corresponds to a worst health status of the health statues of the one or more machines associated with the service.

7. The method of claim 1 , further comprising:
causing display of an element corresponding to the service, wherein a color of the element corresponds to the health status for the service.

8. The method of claim 1 , further comprising:
causing display of an element corresponding to the service, wherein a color of the element corresponds to the health status for the service, and wherein the health status of the service is from among the predefined set of health statuses.

9. The method of claim 1 , further comprising:
determining a score for the service that is indicative of a health of the service; and
determining a change value indicative of the change of the score for the service over a given period.

10. The method of claim 1 , further comprising:
determining a score for the service that is indicative of a health of the service;
determining a change value indicative of the change of the score for the service over a given period; and
causing display of the change value.

11. The method of claim 1 , further comprising:
causing display of an element corresponding to the service, wherein the element comprises performance information for the service, the performance information comprising at least one of the following:
a score for the service that is indicative of a health of the service;
a plot indicative of the recent history of the score for the service; or
a change value indicative of the change of the score for the service over a given period.

12. The method of claim 1 , wherein at least one of the one or more predefined thresholds for a machine are defined by a user.

13. The method of claim 1 , wherein at least one of the machines is associated with a first service and a second service, and wherein a first threshold value for a predefined threshold associated with the combination of the machine and the first service is different from a second threshold value for the predefined threshold associated with the combination of the machine and the second service.

14. The method of claim 1 , wherein the source data for a machine is received from an application monitoring the performance of the machine.

15. The method of claim 1 , wherein the source data for a machine is obtained from a performance data store system.

16. The method of claim 1 , wherein the source data is based at least in part on at least one of the following: system logs, network packet data, sensor data, and performance monitoring application output data.

17. The method of claim 1 , wherein comparing the composite machine score for the machine to one or more predefined thresholds to determine a health status for the machine comprises:
determining one or more metrics for the machine based at least in part on the source data for the machine; and
comparing the one or more determined metrics for the machine to one or more predefined metric thresholds for the machine to determine the health status for the machine.

18. The method of claim 1 , wherein the service is one of two or more child services associated with a parent service, the method further comprising:
causing display of a graphical user interface (GUI) comprising elements, wherein each of the elements:
corresponds to a respective one of the two or more child services of the parent service; and
comprises performance information for the respective child service corresponding to the element.

19. The method of claim 1 , wherein the service is one of two or more child services associated with a parent service, the method further comprising:
causing display of a graphical user interface (GUI) comprising tile elements, wherein each of the tile elements:
corresponds to a respective one of the two or more child services of the parent service;
comprises performance information for the respective child service corresponding to the tile element; and
is color-coded based on the a health status for the child service corresponding to the tile element.

20. The method of claim 1 , further comprising:
causing display of a first graphical user interface (GUI) comprising an interactive element corresponding to the service,
wherein the interactive element:
comprises performance information corresponding to the service; and
is user selectable to navigate to a second graphical user interface comprising one or more machine interactive elements corresponding to the one or more machines associated with the service, and

wherein each of the one or more machine interactive elements:
is associated with a respective one of the one or more machines associated with the service;
comprises performance information corresponding to the respective machine; and
is user selectable to navigate to a third graphical user interface comprising additional performance information for the respective machine.

21. The method of claim 1 , further comprising:
causing display of a first graphical user interface (GUI) com

Assignees

• Splunk Inc

Inventors

• Hall Adrian
• Sternberg Kenneth M
• Raghavan Anupadmaja
• Reyes Brian C

Classifications

• H04L43/0817

  by checking functioning · CPC title

• H04L41/0677

  Localisation of faults · CPC title

• H04L41/065

  involving logical or physical relationship, e.g. grouping and hierarchies · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06F16/24578

  using ranking · CPC title