×

Sampling Events for Rule Creation with Process Selection

  • US 20150234905A1
  • Filed: 04/29/2015
  • Published: 08/20/2015
  • Est. Priority Date: 01/22/2013
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented method, comprising:

  • accessing a plurality of events, wherein each event in the plurality of events includes a portion of raw machine data;

    receiving, from a user, a selection of one or more processes for identifying which events to include in a set;

    wherein the one or more processes selected by the user include at least one of the following;

    a diverse event-identification process, an outlier event-identification process, a random event-identification process, an earliest event-identification process, and a latest event-identification process;

    for each selected process, identifying events for inclusion in the set using the process; and

    causing display of one or more events in the set of events in a graphical user interface that enables development of a field-extraction rule that specifies how to extract, from the machine data included in each of the one or more events, a value for a field that is defined for each of the one or more events, wherein each of the one or more events is searchable using the field.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×