Tightly-Coupled Synchronized Selection, Filtering, and Sorting Between Log Tables and Log Charts

Abstract

In an event detection and monitoring system displaying event data in both tabular and chart formats, the displays of each are tightly-coupled to one another so that when a user selects an event in one format the corresponding event in the other format is highlighted or otherwise emphasized. When a user selects a row containing an event of interest in the event log table, the symbol in the event log chart corresponding to the selected event is simultaneously highlighted. Similarly, when a user selects a symbol in the event log chart corresponding to an event of interest, the row in the event log table containing the corresponding event is simultaneously highlighted. In addition, the rows of the event log table can be sorted and filtered according to predetermined criteria, and the events selected by the filters are highlighted in the chart with indicia distinguishing the filter.

1 - 20 . (canceled) 
   
   
       21 . A memory storing a program of computer readable instructions executable by a processor for performing actions directed to controlling a display, the actions comprising:
 displaying, for each of a plurality of logged events, at least a first portion of the logged event in a tabular format and at least a second portion of the logged event in a graphical format;   in response to at least one event being selected in the tabular format, changing the display of the corresponding at least one event in the graphical format;   in response to at least one event being selected in the graphical format, changing the display of the corresponding at least one event in the tabular format; and   displaying, in the graphical format, the logged events that comprise an alert requiring a user input with an indicia identifying the event as an alert and also the logged events that do not require an alert without the indicia, wherein the indicia comprises at least one of a shape, color, contrast and outline of a graphical symbol.   
   
   
       22 . The memory of  claim 21  wherein each of the plurality of logged events is displayed in the graphical format as the graphical symbol, and at least one event being selected in the graphical format comprises at least one of the graphical symbols being selected in the graphical format. 
   
   
       23 . The memory of  claim 22  wherein the graphical format defines a first axis representing time in consecutive discrete time intervals and a second axis, wherein a first and a second logged event occurring within a common discrete time interval are displayed as discrete boxes stacked along the second axis. 
   
   
       24 . The memory of  claim 21 , the actions further comprising, for each of the plurality of logged events that comprises an alert requiring a user input, displaying said at least first portion of the logged event in the graphical format with an indicia identifying the event as an alert. 
   
   
       25 . A memory storing a program of computer readable instructions executable by a processor for performing actions directed to controlling a display, the actions comprising:
 displaying, for each of a plurality of logged events, at least a first portion of the logged event in a tabular format and at least a second portion of the logged event in a graphical format;   in response to at least one event being selected in the tabular format, changing the display of the corresponding at least on event in the graphical format;   in response to at least one event being selected in the graphical format, changing the display of the corresponding at least one event in the tabular format;   filtering the plurality of logged events by a filter criteria entered within the displayed tabular format; and   displaying the logged events that pass the filtering and the logged events that do not pass the filtering in both the tabular format and the graphical format while automatically distinguishing by a displayed distinguishing indicia the logged events that pass the filtering from the logged events that do not pass the filtering in both the tabular format and the graphical format.   
   
   
       26 . The memory of  claim 25  wherein automatically distinguishing the logged events that pass the filtering from the logged events that do not pass the filtering comprises removing the logged events that do not pass the filtering from at least the tabular format display. 
   
   
       27 . The memory of  claim 25  wherein the distinguishing indicia in the graphical format comprises at least one of color or shape of a graphical symbol. 
   
   
       28 . The memory of  claim 21 , the actions further comprising:
 in response to a user positioning an indicator at an event in the graphical format, displaying a tooltip proximal to the event in the graphical format that includes a text entry of the first portion.   
   
   
       29 . The memory of  claim 21  wherein changing the display of the corresponding at least one event comprises highlighting the corresponding at least one event. 
   
   
       30 . A memory storing a program of computer readable instructions executable by a processor for performing actions directed to controlling a display, the actions comprising:
 providing a display of a plurality of recorded events in both a chart format and a graphical format;   in response to selection of an event from the chart format, visually accentuating the event in both the chart format and the graphical format;   in response to selection of an event from the graphical format, visually accentuating the event in both the chart format and the graphical format; and   in response to modifying a selected event at the chart format, changing the display of the selected event in the graphical format to reflect the modification.   
   
   
       31 . The memory of  claim 30  wherein providing a display of a plurality of recorded events comprises populating said display from a separate database of recorded events, and wherein modifying a selected event at the chart format comprises updating the database from the modified selected event and subsequently refreshing the graphical format from the updated database. 
   
   
       32 . A method comprising:
 for each of a plurality of logged events in a database, displaying at least a first portion of the logged event in a tabular format and at least a second portion of the logged event in a graphical format;   in response to at least one event being selected in the tabular format, changing the display of the corresponding at least one event in the graphical format;   in response to at least one event being selected in the graphical format, changing the display of the corresponding at least one event in the tabular format; and   displaying, in the graphical format, the logged events that comprises an alert requiring a user input with an indicia identifying the event as an alert and also the logged events that do not require an alert without the indicia, wherein the indicia comprises at least one of a shape, color, contrast and outline of a graphical symbol.   
   
   
       33 . The method of  claim 32  further comprising, for each of the plurality of logged events that comprises an alert requiring a user input, displaying said at least first portion of the logged event in the graphical format with an indicia identifying the event as an alert. 
   
   
       34 . A system for coupling a tabular display of data to a graphical display of data comprising:
 a computer readable first memory to store a plurality of recorded events, each event having a first portion of data fields and a second portion of data fields wherein at least one data field is within both the first and second portion;   a processor coupled to said first memory to arrange the first portion into a tabular format and the second portion into a graphical format, said formats combined into an output signal that enables a monitor to simultaneously display said tabular format and said graphical format;   an input coupled to said processor to receive a first and a second user input that respectively selects a first and a second portion of a recorded event, and a third user input that filters the plurality of events according to one of said data fields;   a computer readable second memory coupled to said processor to store computer instructions to:
 in response to each of said first and second user inputs, alter the output signal so that the recorded event selected by said user input is visually offset from other recorded events in both the tabular format and the graphical format; and 
 in response to the third user input, alter the output signal so that only a subset of the plurality of recorded events that is consistent with said third user input are included in said output signal 
   
     wherein the output signal enables the monitor to display the logged events that pass the filter and the logged events that do not pass the filter in both the tabular format and the graphical format while automatically distinguishing by a displayed distinguishing indicia the logged events that pass the filter from the logged events that do not pass the filter in both the tabular format and the graphical format, wherein the distinguishing indicia in the graphical format comprises at least one of a shape, color, contrast and outline of a graphical symbol. 
   
   
       35 . The memory of  claim 25 , wherein the filter criteria is one of a user text entry or a user selection from a fixed list of options. 
   
   
       36 . The system of  claim 34 , wherein the third input is displayed within the tabular format. 
   
   
       37 . The system of  claim 34 , further comprising a select-all function that operates to select only those events that pass the filter for a next operation. 
   
   
       38 . The memory of  claim 21 , the actions further comprising:
 filtering the plurality of logged events by a filter criteria entered within the displayed tabular format, where the filter criteria comprises a user text entry and a user selection from a fixed pulldown list of options; and   displaying the logged events that pass the filtering and the logged events that do not pass the filtering in both the tabular format and the graphical format while automatically distinguishing by a displayed distinguishing indicia the logged events that pass the filtering from the logged events that do not pass the filtering in both the tabular format and the graphical format.   
   
   
       39 . The memory of  claim 38  where the graphical format defines a first axis representing time in consecutive discrete time intervals and a second axis, wherein a first and second logged event occurring within a common discrete time interval are displayed as discrete boxes stacked along the second axis. 
   
   
       40 . The memory of  claim 38 , the actions further comprising:
 prior to an event becoming a selected event, displaying a tooltip proximal to the event in the graphical format that includes at least a text entry of the first portion of the event from the event log.   
   
   
       41 . The memory of  claim 38  where changing the display of the corresponding at least one event comprises highlighting the corresponding at least one event.