A computer-implemented method of obtaining a label for graphically presented operating behavior is disclosed. The method comprises receiving a set of sequences of values that describe operating behavior of one or more machines that were observed over one or more windows of time, at least one sequence of values of the set of sequences of values corresponds to a time series of varying values; causing display of one or more graphical elements that change in appearance over time according to the at least one sequence of values, at least one of the one or more graphical elements representing a characteristic of a part of the one or more machines; detecting an upcoming occurrence of an event based on the one sequence of values, the event corresponding to a certain sequence of values of the set of sequences of values; causing, in response to detecting the upcoming occurrence of the event and prior to an occurrence of the event, display of the at least one graphical elements that change in appearance in a specific manner; receiving, after display of the certain sequence of values, a label for the event, storing, based at least in part on the input, the label in association with the certain sequence of values.