Facilitating metric forecasting via a graphical user interface
Operational machine components of an information technology (IT) or other microprocessor- or microcontroller-permeated environment generate disparate forms of machine data. Network connections are established between these components and processors of an automatic data intake and query system (DIQS). The DIQS conducts network transactions on a periodic and/or continuous basis with the machine components to receive the disparate data and ingest certain of the data as measurement entries of a DIQS metrics datastore that is searchable for DIQS query processing. The DIQS may receive search queries to process against the received and ingested data via an exposed network interface. In one example embodiment, a query building component conducts a user interface using a network attached client device. The query building component may elicit search criteria via the user interface using a natural language interface, construct a proper query therefrom, and present new information based on results returned from the DIQS.
1. A computer-implemented method comprising:
determining a forecast definition, from among a set of forecasting definitions, based on a forecasting algorithm to utilize to forecast data;
causing display of a first portion of a graphical user interface (GUI) having the forecast definition, the forecast definition presented as a natural language expression in a sentence structure that includes a set of one or more selectable parameters dispersed among parameter context, within the sentence structure, that provides context for the one or more selectable parameters within the natural language expression;
receiving input representing one or more parameter values, corresponding with the set of one or more selectable parameters, indicated by a user interaction with the first portion of the GUI;
in accordance with the one or more parameter values:
identifying a historical time series data set associated with a metric for which data forecasting is desired, and
determining a forecast time series data set associated with the metric based at least in part on the historical time series data set; and
causing display of a second portion of the GUI including:
a graphical representation of at least a portion of the historical time series data set, and
a graphical representation of at least a portion of the forecast time series data set.
2. The computer-implemented method of claim 1 , wherein the first portion of the GUI includes an alert condition definition that includes a set of one or more alert parameters, the GUI enabling user interaction to indicate an alert parameter value for each of the one or more alert parameters.
3. The computer-implemented method of claim 1 , wherein the set of one or more selectable parameters comprises a data source parameter, a metric parameter, the forecasting algorithm parameter, a timespan or length of time parameter, a time interval parameter, a holdback parameter, a confidence level parameter, or a combination thereof.
4. The computer-implemented method of claim 1 , wherein upon a user selection of a selectable parameter within the forecast definition, causing display of one or more parameter value options associated with the parameter, the one or more parameter value options being selectable by a user to input the one or more parameter values.
5. The computer-implemented method of claim 1 , wherein the metric for which data forecasting is desired comprises a capacity planning metric.
6. The computer-implemented method of claim 1 , wherein the metric for which data forecasting is desired comprises one of a data center capacity metric, a sales metric, a license uses metric, a CPU usage metric, a machine temperature metric, a network metric, a memory metric, a storage usage metric, a marketing value metric, or a number of logins metric.
7. The computer-implemented method of claim 1 , wherein the first portion of the GUI includes an alert condition definition that includes a set of one or more alert parameters, the GUI enabling user interaction to indicate an alert parameter value for each of the one or more alert parameters, and wherein in accordance with the alert condition definition, determining an alert instance during the forecast time series data set at which the alert condition definition is expected to be satisfied.
8. The computer-implemented method of claim 1 , further comprising:
causing display of an alert condition definition that includes a set of one or more alert parameters;
determining an alert instance during the forecast time series data set at which the alert condition is expected to be satisfied by:
referencing a threshold value provided in the alert condition definition; and
comparing the forecast time series data set with the alert condition definition to identify at least one instance at which a data in the forecast time series data set exceeds the threshold value.
9. The computer-implemented method of claim 1 further comprising:
causing display of an alert condition definition that includes a set of one or more alert parameters;
determining an alert instance during the forecast time series data set at which the alert condition is expected to be satisfied by:
referencing a threshold value provided in the alert condition definition;
comparing the forecast time series data set with the alert condition definition to identify at least one instance at which a data in the forecast time series data set exceeds the threshold value; and
identifying an earliest time associated with the at least one instance at which the data in the forecast time series data set exceeds the threshold value.
10. The computer-implemented method of claim 1 further comprising:
causing display of an alert condition definition that includes a set of one or more alert parameters;
determining an alert instance during the forecast time series data set at which the alert condition is expected to be satisfied; and
determining a time range associated with the alert instance, the time range indicating a range of time during which the alert condition definition is expected to be satisfied.
11. The computer-implemented method of claim 1 further comprising determining a forecasted value expected to occur at a particular date, a particular time, or a particular date and time.
12. The computer-implemented method of claim 1 further comprising:
determining a forecasted value expected to occur at a particular date and/or time selected via a graphical display having a timeline; and
causing display of a text box having the forecasted value expected to occur at the particular date and/or time.
13. The computer-implemented method of claim 1 further comprising:
determining a forecasted value expected to occur at a particular date and/or time selected via a graphical display having a timeline;
determining a forecasted value range associated with the forecasted value, the forecasted value range including an upper value and a lower value; and
causing display of a text box having the forecasted value expected to occur at the particular date and/or time and the forecasted value range.
14. One or more computer-readable storage media having instructions stored thereon, wherein the instructions, when executed by a computing device, cause the computing device to:
determining a forecast definition, from among a set of forecasting definitions, based on a forecasting algorithm to utilize to forecast data;
causing display of a first portion of a graphical user interface (GUI) having the forecast definition, the forecast definition presented as a natural language expression in a sentence structure that includes a set of one or more selectable parameters dispersed among parameter context, within the sentence structure, that provides context for the one or more selectable parameters within the natural language expression;
receiving input representing one or more parameter values, corresponding with the set of one or more selectable parameters, indicated by a user interaction with the first portion of the GUI;
in accordance with the one or more parameter values:
identifying a historical time series data set associated with a metric for which data forecasting is desired, and
determining a forecast time series data set associated with the metric based at least in part on the historical time series data set; and
causing display of a second portion of the GUI including:
a graphical representation of at least a portion of the historical time series data set, and
a graphical representation of at least a portion of the forecast time series data set.
15. A computing system comprising:
one or more processors; and
a memory coupled with the one or more processors, the memory having instructions stored thereon, wherein the instructions, when executed by the one or more processors, cause the computing system to:
determine a forecast definition, from among a set of forecasting definitions, based on a forecasting algorithm to utilize to forecast data;
cause display of a first portion of a graphical user interface (GUI) having the forecast definition, the forecast definition presented as a natural language expression in a sentence structure that includes a set of one or more selectable parameters dispersed among parameter context, within the sentence structure, that provides context for the one or more selectable parameters within the natural language expression;
receive input representing one or more parameter values, corresponding with the set of one or more selectable parameters, indicated by a user interaction with the first portion of the GUI;
in accordance with the one or more parameter values:
identify a historical time series data set associated with a metric for which data forecasting is desired, and
determine a forecast time series data set associated with the metric based at least in part on the historical time series data set; and
cause display of a second portion of the GUI including:
a graphical representation of at least a portion of the historical time series data set, and
a graphical representation of at least a portion of the forecast time series data set.
16. The system of claim 15 , wherein the first portion of the GUI includes an alert condition definition that includes a set of one or more alert parameters, the GUI enabling user interaction to indicate an alert parameter value for each of the one or more alert parameters.
17. The system of claim 15 , wherein the set of one or more selectable parameters comprises a data source parameter, a metric parameter, the forecasting algorithm parameter, a timespan or length of time parameter, a time interval parameter, a holdback parameter, a confidence level parameter, or a combination thereof.
18. The system of claim 15 , wherein upon a user selection of a selectable parameter within the forecast definition, causing display of one or more parameter value options associated with the parameter, the one or more parameter value options being selectable by a user to input the one or more parameter values.
19. The system of claim 15 , wherein the metric for which data forecasting is desired comprises one of a capacity planning metric, a data center capacity metric, a sales metric, a license uses metric, a CPU usage metric, a machine temperature metric, a network metric, a memory metric, a storage usage metric, a marketing value metric, or a number of logins metric.
20. The system of claim 15 , wherein the first portion of the GUI includes an alert condition definition that includes a set of one or more alert parameters, the GUI enabling user interaction to indicate an alert parameter value for each of the one or more alert parameters, and wherein in accordance with the alert condition definition, determining an alert instance during the forecast time series data set at which the alert condition definition is expected to be satisfied.