CloudLines: Compact Display of Event Episodes in Multiple Time-Series

Abstract

We propose incremental logarithmic time-series technique as a way to deal with time-based representations of large and dynamic event data sets in limited space. Modern data visualization problems in the domains of news analysis, network security and financial applications, require visual analysis of incremental data, which poses specific challenges that are normally not solved by static visualizations. The incremental nature of the data implies that visualizations have to necessarily change their content and still provide comprehensible representations. In particular, in this paper we deal with the need to keep an eye on recent events together with providing a context on the past and to make relevant patterns accessible at any scale. Our technique adapts to the incoming data by taking care of the rate at which data items occur and by using a decay function to let the items fade away according to their relevance. Since access to details is also important, we also provide a novel distortion magnifying lens technique which takes into account the distortions introduced by the logarithmic time scale to augment readability in selected areas of interest. We demonstrate the validity of our techniques by applying them on incremental data coming from online news streams in different time frames.

Pianola - Visualization of Multivariate Time-Series Security Event Data

“…Using a 1600x1000 monitor in portrait orientation, it is possible to display up to 50 sources plus 50 destinations without scrolling. However, it would be possible to either compress the grid, use focus+context effects [31] or increase the monitor size to display double the number of destinations. Even so, the limitation would be apparent if a network sweep scan were to trigger an alert for every host on a Class C network.…”

An Interactive Visualization for Tabbed Browsing Behavior Analysis

“…3). This combination of patches and parallel segments is similar to the representation of a parallel browsing session in [14], as well as to [18] where multiple time-series are visualized through a comparable solution.…”

Turning event logs into process movies: animating what has really happened

“…In [18] pioneering work is reported where visual analytics is applied to the field of data mining. Another interesting work is [19] which concerns displaying multiple time series without aggregation. The above body of work uses static representations for capturing time dependencies, i.e.…”