MONITORING SERVICE-LEVEL PERFORMANCE USING A KEY PERFORMANCE INDICATOR (KPI) CORRELATION SEARCH

摘要

A service monitoring system executing on one or more processors may have operations that are determined by control information. Control over the operation of the service monitoring system can be exerted through the use of a graphical interface. The graphical interface may present the control information of a new or existing correlation search definition for user interaction. The service monitoring system may maintain a data store of key performance indicator (KPI) data, where a KPI value in the data store is produced by a KPI-defining search query that derives the value from machine data associated with one or more entities that perform a monitored service. A correlation search definition of the service monitoring system determines how a search of the KPI data is conducted, how its data is evaluated to determine whether a triggering condition has been met, and, if so, determines what triggered action is to be initiated.

主权项

1. A method comprising:
causing display of a graphical interface enabling user interaction to indicate control information that determines operation of a service monitoring system, the control information belonging to a definition for a correlation search, the definition having:
search information to identify relevant KPI values from a data store;trigger determination information to tailor an evaluation of the relevant KPI values to produce a trigger determination; andaction information to specify a potential action conditioned on the trigger determination; receiving user input in response to user interaction with the graphical interface, the user input indicating one or more definition items; storing the definition items among one or more of the search information, the trigger determination information, and the action information of the definition; wherein each of the KPI values is indicative of one of a plurality of KPI states and is derived, by a search query that defines the KPI, from machine data associated with one or more entities that perform a service; and wherein the method is performed by one or more processors.