US 11,698,913 B2
Cross-system journey monitoring based on relation of machine data
Joerg Beringer, Redwood City, CA (US); and Isabelle Park, San Mateo, CA (US)
Assigned to Splunk he., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Mar. 3, 2022, as Appl. No. 17/653,343.
Application 17/653,343 is a continuation of application No. 16/894,525, filed on Jun. 5, 2020, granted, now 11,269,908.
Application 16/894,525 is a continuation of application No. 15/715,074, filed on Sep. 25, 2017, granted, now 10,678,804, issued on Jun. 9, 2020.
Prior Publication US 2022/0261397 A1, Aug. 18, 2022
Int. Cl. G06F 16/248 (2019.01); G06F 16/2457 (2019.01)
CPC G06F 16/248 (2019.01) [G06F 16/2457 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
obtaining data describing a series of related steps, wherein each step of the series of related steps is associated with a query to be applied to events associated with a plurality of data sources, wherein a first event associated with a first data source of the plurality of data sources includes first information indicative of a first entity associated with the first event, wherein a second event associated with a second data source of the plurality of data sources includes second information indicative of a second entity associated with the second event, and wherein a stitching scheme defines relationships between steps of the series of related steps;
relating, using the stitching scheme, a first set of events associated with the first data source to a second set of events associated with the second data source, wherein the stitching scheme relates the first set of events to the second set of events based on the first information included with the first set of events corresponding to the second information included with the second set of events, and wherein relating the first set of events to the second set of events produces a particular series of related steps associated with a particular entity;
determining, using the stitching scheme, that one or more steps of the particular series of steps are one or more sub-steps of a particular step of the particular series of steps; and
causing display of the particular series of steps, wherein the one or more sub-steps are displayed as nested within the particular step.