Event-based setting of process tracing scope

1. A method of detecting an anomaly comprising:

storing data associated with a master track, wherein the data in the master track corresponds to a sequence of one or more inputs associated with user interactions;

receiving an indication that a first computer system monitoring instrument is desired to begin monitoring a first resource of a computer system upon satisfaction of a start criterion during a replay of the master track; and

configuring the first instrument to begin monitoring performance of the first resource upon satisfaction of the start criterion during a replay of the master track, wherein monitoring performance includes collecting data associated with input to and output from the first resource; and

wherein the master track is replayed two or more times, and during each replay, the sequence of one or more inputs associated with user interactions is configured to be again input into the computer system to generate an output track, and wherein a difference, if any, is determined between a first output track associated with a first replay of the master track and a second output track associated with a second replay of the master track.

2. The method of claim 1 wherein the first instrument is configured automatically.

3. The method of claim 1 further comprising configuring the first instrument to stop performing monitoring based at least in part on a stop criterion.

4. The method of claim 1 wherein an input associated with user interactions comprises an input to a computer system component.

5. The method of claim 4 wherein the sequence of one or more inputs associated with user interactions is provided to the computer system component in the course of replaying the master track.

6. The method of claim 4 wherein the computer system component comprises one or more of the following: an application; a process; a hardware component; a software component; a combination of one or more software components; a combination of one or more hardware components; and a combination of one or more software and one or more hardware components.

7. The method of claim 1 wherein the first instrument is configured based at least in part on time.

8. The method of claim 1 further comprising causing an indication to be displayed when an event that triggers the first instrument to start monitoring Occurs.

9. The method of claim 1 wherein an activity associated with the start criterion is one that occurs during a period in which one or more of the following is performed with respect to a computer system component: monitoring, observing, analyzing, exercising, using, and playing back a master track of previously recorded inputs to the computer system component.

10. The method of claim 9 wherein the computer system component comprises one or more of the following: an application; a process; a hardware component; a software component; a combination of one or more software components; a combination of one or more hardware components; and a combination of one or more software and one or more hardware components.

11. The method of claim 1 , wherein the master track includes pre-recorded input to and output from the monitored computer system.

12. The method of claim 1 wherein configuring the first instrument comprises configuring a filter.

13. The method of claim 12 wherein the filter causes the first instrument to monitor a first event and ignore a second event.

14. A computer system comprising:

a processor configured to:

store data associated with a master track, wherein the data in the master track corresponds to a sequence of one or more inputs associated with user interactions;

receive an indication that a first computer system monitoring instrument is desired to begin monitoring a first resource of the computer system upon satisfaction of a start criterion during a replay of the master track; and

configure the first instrument to begin monitoring performance of the first resource upon satisfaction of the start criterion during a replay of the master track, wherein monitoring performance includes collecting data associated with input to and output from the first resource; and

wherein the master track is replayed two or more times, and during each replay, the sequence of one or more inputs associated with user interactions is configured to be again input into the computer system to generate an output track, and wherein a difference, if any, is determined between a first output track associated with a first replay of the master track and a second output track associated with a second replay of the master track; and

a memory coupled to the processor and configured to provide instructions to the processor.

15. The system of claim 14 wherein the processor is further configured to configure the first instrument to stop performing monitoring based at least in part on a stop criterion.

16. The system of claim 14 wherein the first instrument is configured based at least in part on time.

17. The system of claim 14 wherein configuring the first instrument comprises configuring a filter.

18. The system of claim 17 wherein the filter causes the first instrument to monitor a first event and ignore a second event.

19. A computer program product for detecting an anomaly, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

storing data associated with a master track, wherein the data in the master track corresponds to a sequence of one or more inputs associated with user interactions;

receiving an indication that a first computer system monitoring instrument is desired to begin monitoring a first resource of the computer system upon satisfaction of a start criterion during a replay of the master track;

configuring the first instrument to begin monitoring performance of the first resource upon satisfaction of the start criterion during a replay of the master track, wherein monitoring performance includes collecting data associated with input to and output from the first resource; and

wherein the master track is replayed two or more times, and during each replay, the sequence of one or more inputs associated with user interactions is configured to be again input into the computer system to generate an output track, and wherein a difference, if any, is determined between a first output track associated with a first replay of the master track and a second output track associated with a second replay of the master track.