9. A computer system, comprising: one or more processors; and one or more hardware computer-readable storage media having stored thereon computer-executable instructions that are executable by the one or more processors to cause the computer system to perform a search over a trace of program execution, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following: receive a search expression including one or more search criteria, the search expression being targeted at one or more trace data streams storing a trace of program execution; based on the one or more search criteria, identify a plurality of families of code entity invocations, each family identifying a plurality of code entity invocations that are related to each other, the plurality of code entity invocations being identified based on the one or more trace data streams; identify a ranking among the plurality of families of code entity invocations; and based at least on the identified ranking among the plurality of families of code entity invocations, return a set of code entity invocations determined to meet the one or more search criteria, wherein the set of code entity invocations is ordered by a relevance determined based at least on the ranking among the plurality of families.
9. A computer system, comprising: one or more processors; and one or more hardware computer-readable storage media having stored thereon computer-executable instructions that are executable by the one or more processors to cause the computer system to perform a search over a trace of program execution, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following: receive a search expression including one or more search criteria, the search expression being targeted at one or more trace data streams storing a trace of program execution; based on the one or more search criteria, identify a plurality of families of code entity invocations, each family identifying a plurality of code entity invocations that are related to each other, the plurality of code entity invocations being identified based on the one or more trace data streams; identify a ranking among the plurality of families of code entity invocations; and based at least on the identified ranking among the plurality of families of code entity invocations, return a set of code entity invocations determined to meet the one or more search criteria, wherein the set of code entity invocations is ordered by a relevance determined based at least on the ranking among the plurality of families. 14. The computer system of claim 9 , wherein identifying the plurality of families of code entity invocations comprises providing one or more program code attributes as an input to an anomaly detection algorithm.