| CPC G06F 9/542 (2013.01) | 19 Claims | 

| 
               1. A system, comprising: 
            a processor configured to: 
                receive a first mapped event that is generated based on semantic mapping of a first raw event associated with a first time, wherein the first mapped event is generated according to a first semantic mapping function configured via a user interface, and 
                wherein a preview of raw event traffic is presented via the user interface; 
                receive a second mapped event that is generated based on semantic mapping of a second raw event associated with a second time that is subsequent to the first time; and 
                  determine a stateful metric based on the first mapped event and the second mapped event that are generated from the first and second raw events that are separated in time; and 
                a memory coupled to the processor and configured to provide the processor with instructions. 
               |