Graph reclustering based on different clustering criteria

1. A method, comprising:

generating a logical graph by performing a clustering operation with respect to log data associated with a plurality of machines, the clustering operation performed using a rust clustering criteria and causing the logical graph to initially include a rust set of nodes representative of the machines and generated in accordance with relationship requirements of an underlying model and a first set of edges representing communication between machines represented by nodes included in the first set of nodes; and

augmenting the logical graph by performing a reclustering operation with respect to the log data using a second clustering criteria different than the first clustering criteria, the reclustering operation updating the logical graph to include, in place of the first set of nodes, a second set of nodes representative of the machines and generated while maintaining the relationship requirements of the underlying model and a second set of edges representing communication between machines represented by nodes included in the second set of nodes.

2. The method of claim 1 , wherein the reclustering is performed using a set of one or more user provided tags.

3. The method of claim 1 , wherein a machine type is generated from each cluster resulting from the reclustering.

4. The method of claim 1 , wherein the second clustering criteria comprises pod communication information.

5. The method of claim 1 , wherein the second clustering criteria comprises user information.

6. The method of claim 1 , wherein the first clustering criteria is based at least in part on machine to machine communications.

7. The method of claim 1 , wherein the second clustering criteria comprises a set of one or more attributes.

8. The method of claim 7 , wherein the one or more attributes are not initially present in the generated logical graph and are added during the reclustering via a join with an external data set.

9. The method of claim 1 , further comprising generating an alert when a change is made to the logical graph.

10. The method of claim 1 , wherein the logical graph is automatically created and wherein the reclustering is performed in response to a user interaction with an interface.

11. The method of claim 1 , wherein the reclustering maintains existing edge relations among nodes in the logical graph.

12. The method of claim 1 , wherein the log data is received from a set of agents executing on the machines.

13. A system comprising:

a processor configured to:

generate a logical graph by performing a clustering operation with respect to log data associated with a plurality of machines, the clustering operation performed using a first clustering criteria and causing the logical graph to initially include a firm set of nodes representative of the machines and generated in accordance with relationship requirements of an underlying model and a first set of edges representing communication between machines represented by nodes included in the first set of nodes; and

augment the logical graph by performing a reclustering operation with respect to the log data using a second clustering criteria different than the first clustering criteria, the reclustering operation updating the logical graph to include, in place of the first set of nodes, a second set of nodes representative of the machines and generated while maintaining the relationship requirements of the underlying model and a second set of edges representing communication between machines represented by nodes included in the second set of nodes.

14. The system of claim 13 , wherein the reclustering is performed using a set of one or more user provided tags.

15. The system of claim 13 , wherein a machine type is generated from each cluster resulting from the reclustering.

16. The system of claim 13 , wherein the second clustering criteria comprises pod communication information.

17. The system of claim 13 , wherein the second clustering criteria comprises user information.

18. The system of claim 13 , wherein the first clustering criteria is based at least in part on machine to machine communications.

19. The system of claim 13 , wherein the second clustering criteria comprises a set of one or more attributes.

20. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

generating a logical graph by performing a clustering operation with respect to log data associated with a plurality of machines, the clustering operation performed using a rut clustering criteria and causing the logical graph to initially include a first set of nodes representative of the machines and generated in accordance with relationship requirements of an underlying model and a first set of edges representing communication between machines represented by nodes included in the first set of nodes; and

augmenting the logical graph by performing a reclustering operation with respect to the log data using a second clustering criteria different than the first clustering criteria, the reclustering operation updating the logical graph to include, in place of the first set of nodes, a second set of nodes representative of the machines and generated while maintaining the relationship requirements of the underlying model and a second set of edges representing communication between machines represented by nodes included in the second set of nodes.