US 9,811,234 B2
Parallel display of multiple graphical indicators representing differing search criteria evaluated across a plurality of events
Cary Noel, Pleasant Hill, CA (US); and John Coates, Berkeley, CA (US)
Assigned to Splunk Inc., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Apr. 20, 2015, as Appl. No. 14/691,045.
Application 14/691,045 is a continuation of application No. 14/326,459, filed on Jul. 8, 2014, granted, now 9,043,717, issued on May 26, 2015.
Application 14/326,459 is a continuation of application No. 14/046,767, filed on Oct. 4, 2013, granted, now 8,806,361, issued on Aug. 12, 2014.
Claims priority of provisional application 61/883,071, filed on Sep. 26, 2013.
Claims priority of provisional application 61/878,498, filed on Sep. 16, 2013.
Prior Publication US 2016/0011723 A1, Jan. 14, 2016
Int. Cl. G06F 3/048 (2013.01); G06F 3/0481 (2013.01); G06F 17/30 (2006.01); G06F 3/0484 (2013.01)
CPC G06F 3/0481 (2013.01) [G06F 3/0484 (2013.01); G06F 3/04842 (2013.01); G06F 17/30551 (2013.01); G06F 17/30554 (2013.01)] 32 Claims
OG exemplary drawing
 
1. A method, comprising:
causing display of a representation of a timeline;
concurrently causing display along the representation of the timeline of at least one graphical indicator that represents a first set of events among a plurality of events, wherein the first set of events is associated with a time frame within a time period represented by the timeline, wherein one or more events in the first set of events is derived from raw data, each event in the first set of events has an associated event time that occurs within the associated time frame, the at least one graphical indicator is displayed at a position along the representation of the timeline corresponding to the associated time frame;
causing display of a second at least one graphical indicator that represents a second set of events among the plurality of events, the second at least one graphical indicator displayed in a display area that is parallel with a display area in which the at least one graphical indicator is displayed;
wherein the first set of events was generated by a first search query executed against the plurality of events and the second set of events was generated by a second search query executed against the plurality of events, search criteria in the first search query differing from search criteria in the second search query;
wherein the method is performed by one or more computing devices.