GROUPING AND MANAGING EVENT STREAMS GENERATED FROM CAPTURED NETWORK DATA

摘要

The disclosed embodiments provide a system that facilitates the processing of network data. During operation, the system causes for display a graphical user interface (GUI) for configuring the generation of time-series event data from network packets captured by one or more remote capture agents. Next, the system causes for display, in the GUI, a first set of user-interface elements for specifying a grouping of a set of event streams containing the time-series event data by an event stream attribute associated with the event streams. The system then causes for display, in the GUI, a second set of user-interface elements containing event stream information for one or more subsets of the event streams represented by the grouping of the event streams by the event stream attribute.

主权项

1. A method for facilitating the processing of network data, comprising:
causing for display, on a computer system, a graphical user interface (GUI) for configuring the generation of time-series event data from network packets captured by one or more remote capture agents; causing for display, in the GUI, a first set of user-interface elements for specifying a grouping of a set of event streams containing the time-series event data by an event stream attribute associated with the event streams; and causing for display, in the GUI, a second set of user-interface elements comprising event stream information for one or more subsets of the event streams represented by the grouping of the event streams by the event stream attribute.