Enhanced graphical user interface for representing events

1. A computer-implemented method comprising:

causing display of a graphical user interface, the graphical user interface including a first element enabling input to specify a time range and a second element enabling input to specify a field;

upon receiving first input specifying the time range and second input specifying the field, identifying a plurality of events, wherein each event of the plurality events is associated with respective a timestamp that is within the time range;

determining, using values for the field included in the plurality of events, unique values;

causing display, in the graphical user interface, of a visualization of the unique values, the visualization including a first set of rows for each unique value, wherein each row of the first set of rows is divided into regions each representing a timeslot within the time range, wherein each region in a particular row of the first set of rows graphically illustrates a count of events from the plurality of events that both have an associated timestamp that is within a respective timeslot represented by the region and include a particular unique value associated with the particular row;

causing display, in the graphical user interface, of a table including a second set of rows that each correspond to the first set of rows, wherein each row of the second set of rows includes a set of statistics determined from events from the plurality of events, and wherein the table and the visualization are concurrently displayed; and

based on a user input of hovering, scanning, or dragging on a specific area of the visualization, causing presentation of a dialog window that includes a hyperlink that, when selected, causes presentation of additional information related to the specific area of visualization.

2. The method of claim 1 , wherein the table includes a set of columns, and wherein each column of the set of columns corresponds with a particular type of statistic.

3. The method of claim 1 , wherein based on a user selection of a set of regions presented in the visualization, causing presentation of a dialog window that provides information related to the set of regions.

4. The method of claim 1 , wherein the regions are vertically aligned by a corresponding timeslot.

5. The method of claim 1 , wherein each event of the plurality of events includes a portion of raw data from which the event was derived, the raw data related to security or performance of one or more information technology systems.

6. The method of claim 1 further comprising causing display, in the graphical user interface, of a set of formatting controls that enable user selection of at least one format to apply to the visualization, wherein the at least one format comprises a color format for indicating colors applied to the regions in the visualization.

7. The method of claim 1 further comprising causing display, in the graphical user interface, of a set of formatting controls that enable user selection of at least one format to apply to the visualization, wherein the set of formatting controls displayed are selected based on a type of data associated with the visualization.

8. The method of claim 1 further comprising causing display, in the graphical user interface, of a set of formatting controls that enable user selection of at least one format to apply to the visualization, wherein at least one formatting control comprises a scope control enabling control of a scope of a color gradient mapping for the plurality of events indicated in the visualization.

9. The method of claim 1 further comprising causing display, in the graphical user interface, of a scale control enabling user selection of a color gradient based on a linear scale, a logarithmic scale, a rank, or an exponential scale.

10. The method of claim 1 , further comprising sorting the first set of rows, wherein each row is sorted in ascending or descending order based on a number of events corresponding to an intersection of that row with a selected time period.

11. The method of claim 1 , further comprising reordering the first set of rows based on a drag and drop gesture received from a user input device.

12. The method of claim 1 , wherein each region in the particular row of the first set of rows graphically illustrates the count of events via a color or a color gradient.

13. A non-transitory computer readable storage medium, storing instructions that, when executed by one or more processors, cause performance of:

causing display of a graphical user interface, the graphical user interface including a first element enabling input to specify a time range and a second element enabling input to specify a field;

upon receiving first input specifying the time range and second input specifying the field, identifying a plurality of events, wherein each event of the plurality events is associated with respective a timestamp that is within the time range;

determining, using values for the field included in the plurality of events, unique values;

causing display, in the graphical user interface, of a visualization of the unique values, the visualization including a first set of rows for each unique value, wherein each row of the first set of rows is divided into regions each representing a timeslot within the time range, wherein each region in a particular row of the first set of rows graphically illustrates a count of events from the plurality of events that both have an associated timestamp that is within a respective timeslot represented by the region and include a particular unique value associated with the particular row;

causing display, in the graphical user interface, of a table including a second set of rows that each correspond to the first set of rows, wherein each row of the second set of rows includes a set of statistics determined from events from the plurality of events, and wherein the table and the visualization are concurrently displayed; and

based on a user input of hovering, scanning, or dragging on a specific area of the visualization, causing presentation of a dialog window that includes a hyperlink that, when selected, causes presentation of additional information related to the specific area of visualization.

14. The non-transitory computer readable storage medium of claim 13 , further comprising causing display, in the graphical user interface, of a set of formatting controls that enable user selection of at least one format to apply to the visualization, wherein the at least one format comprises a color format for indicating colors applied to the regions in the visualization.

15. The non-transitory computer readable storage medium of claim 13 , further comprising causing display, in the graphical user interface, of a scale control enabling user selection of a color gradient based on a linear scale, a logarithmic scale, a rank, or an exponential scale.

16. The non-transitory computer readable storage medium of claim 13 , further comprising sorting the first set of rows, wherein each row is sorted in ascending or descending order based on a number of events corresponding to an intersection of that row with a selected time period.

17. The non-transitory computer readable storage medium of claim 13 , wherein each region in the particular row of the first set of rows graphically illustrates the count of events via a color or a color gradient.

18. A system comprising:

a memory having processor-readable instructions stored therein; and

a processor configured to access the memory and execute the processor-readable instructions, which when executed by the processor, configures the processor to perform a plurality of functions, including functions to:

cause display of a graphical user interface, the graphical user interface including a first element enabling input to specify a time range and a second element enabling input to specify a field;

upon receiving first input specifying the time range and second input specifying the field, identify a plurality of events, wherein each event of the plurality events is associated with respective a timestamp that is within the time range;

determine, using values for the field included in the plurality of events, unique values;

cause display, in the graphical user interface, of a visualization of the unique values, the visualization including a first set of rows for each unique value, wherein each row of the first set of rows is divided into regions each representing a timeslot within the time range, wherein each region in a particular row of the first set of rows graphically illustrates a count of events from the plurality of events that both have an associated timestamp that is within a respective timeslot represented by the region and include a particular unique value associated with the particular row;

cause display, in the graphical user interface, of a table including a second set of rows that each correspond to the first set of rows, wherein each row of the second set of rows includes a set of statistics determined from events from the plurality of events, and wherein the table and the visualization are concurrently displayed; and

based on a user input of hovering, scanning, or dragging on a specific area of the visualization, cause presentation of a dialog window that includes a hyperlink that, when selected, causes presentation of additional information related to the specific area of visualization.