The following diagram is a visual representation of the data model.
The data model consists of the below items. Refer to the Data model example article for a detailed example.
Events: Actions or occurrences recognized by software that can be measured over time.
Activities: A collection of related events and other sub-activities. Such collections are sometimes referred to as tracking events. A relationship is configured via a grouping of events or a set of correlators (across threads and applications). Activities may have a set of user-defined properties that are grouped into property snapshots.
Sets: Collections of activities that meet specific criteria.
Snapshots: A customized collection of measurable properties, including source category, name, and time stamp when the snapshot is taken, for example, duration of computer startup. One or more property snapshots may be grouped into an activity.
Dictionaries: Contains generic, free-form entries composed of user-defined properties.
Sources: Represent origins of events and activities. Possibly sources are:
- Geo-location
- Data center
- Network
- Device
- Address
- Server
- Process
- Run-time
- Application server
- Application
- Source user
- Virtual source