Enriched high fidelity metrics
A method including receiving events from different data sources for a service automatically executing in an enterprise system. A first event is enriched by providing the first event with first metadata that associates the first event with a first application used by the service. The first event is assigned to a time slice associated with the first application. A second event is enriched in a similar manner. A correlation graph of nodes and edges is built using the enriched events, with nodes representing the events and edges indicating relationships between the edges. A third event indicating a fault in the first application associated with the first node is received. The source of the error for the third event is identified using the second updated correlation graph and the time slice. The source of error is then mitigated.
1. A method comprising:
receiving a plurality of events from a plurality of different data sources for a service automatically executing in an enterprise system;
enriching at least a first event in the plurality of events by providing the first event with first metadata that associates the first event with a first application used by the service, wherein enriching the first event generates a first enriched event;
assigning the first event to a time slice associated with the first application;
creating, based on the first enriched event, a first node of a correlation graph that represents the first application, wherein the correlation graph comprises one node and zero edges;
enriching a second event in the plurality of events by providing the second event with second metadata that associates the second event with a second application, wherein enriching the second event generates a second enriched event;
assigning the second enriched event to the time slice;
creating, based on the second enriched event, a second node of a first updated correlation graph that represents the second application, wherein the first updated correlation graph comprises two nodes and zero edges;
correlating the second node with the first node, wherein the second node is dependent on the first node to generate a second updated correlation graph that represents the first application and the second application, wherein the second updated correlation graph comprises two nodes and one edge;
receiving a third event indicating a fault in the first application associated with the first node;
identifying, using the second updated correlation graph and the time slice, a source of error for the third event; and
mitigating the source of error.
2. The method of claim 1 , further comprising:
responsive to receiving the third event, identifying a second fault in the second application associated with the second node;
identifying, using the second updated correlation graph, a second source of error for the second fault; and
mitigating the second source of error.
3. The method of claim 1 , further comprising:
displaying only a plurality of time slices, including the time slice.
4. The method of claim 3 , further comprising:
responsive to receiving user input selecting the time slice, displaying the second updated correlation graph.
5. The method of claim 3 , further comprising:
responsive to receiving user input selecting the time slice, displaying a heat map indicating the fault.
6. The method of claim 5 , further comprising:
responsive to receiving additional user input selecting an indication of the fault in the heat map, displaying detailed information regarding the fault.
7. The method of claim 1 , further comprising:
displaying the time slice among a plurality of additional time slices associated with concurrently updated correlation graphs that indicate time-based behavior of the first application and the second application within the plurality of additional time slices.
8. The method of claim 7 , further comprising:
responsive to a user selecting one of the time slice or one of the plurality of additional time slices, displaying operational information for at least one of the first application and the second application in a corresponding time slice that was selected.
9. The method of claim 1 , wherein the first application and the second application are different logical applications, and wherein the first event and the second event are different events.
10. The method of claim 1 , wherein the first application and the second application comprise different corresponding functions of a single logical software program.