Defining a graphical visualization along a time-based graph lane using key performance indicators derived from machine data

摘要

A service monitoring system receives a selection of key performance indicators (KPIs) that each indicate a different aspect of how a service provided by one or more entities is performing. Each entity of the one or more entities produces machine data or wherein each entity has its operation reflected in machine data not produced by the entity. Each KPI is defined by a different search query that derives one or more values from the machine data pertaining to the one or more entities providing the service, where each of the one or more values is associated with a point in time and representing the aspect of how the service is performing at the associated point in time. For each of the selected KPIs, the service monitoring system derives the one or more values and causes display of a graphical visualization of the derived one or more values for the KPI along a time-based graph lane. The graph lanes for the selected KPIs are parallel to each other and the graphical visualizations in the graph lanes are all calibrated to a same time scale.

主权项

1. A method, comprising:
receiving a selection of key performance indicators (KPIs) that each indicate a different aspect of how a service provided by one or more entities is performing, wherein:
a stored service definition associates the one or more entities that provide the service,for each of the entities, a stored entity definition identifies machine data pertaining to the entity, the machine data produced by one or more components within an information technology environment and reflecting activity within the information technology environment, and the machine data comprising unstructured data, andeach KPI is defined by a search query that derives one or more values from machine data identified in the entity definitions, the one or more values associated with a point in time or a period of time; for each of the selected KPIs:
deriving the one or more values, andcausing display of a graphical visualization of the derived one or more values for the KPI along a time-based graph lane; wherein the graph lanes for the selected KPIs are parallel to each other; wherein the graphical visualizations in the graph lanes are all calibrated to a same time scale; and wherein the method is performed by one or more processing devices.