Suggested Field Extraction
First Claim
1. A computer-implemented method comprising:
- based on a selection by a user of first one or more values of one or more events displayed in a graphical interface, automatically determining an extraction rule capable of extracting a field label-value pair at least partially within at least the selected one or more values;
causing display of an option corresponding to the determined extraction rule in the graphical interface; and
based on the user selecting the option in the graphical interface, causing display of second one or more values of one or more field label-value pairs extracted from the one or more events using the extraction rule.
1 Assignment
0 Petitions
Accused Products
Abstract
A based on a selection by a user of first one or more values of one or more events displayed in a graphical interface, an extraction rule is automatically determined that is capable of extracting a field label-value pair at least partially within at least the selected one or more values. An option is displayed that correspond to the determined extraction rule in the graphical interface. Based on the user selecting the option in the graphical interface, display is caused of second one or more values of one or more field label-value pairs extracted from the one or more events using the extraction rule. The one or more events may be displayed in a table format, and the first one or more value may be selected by the user selecting one or more cells, columns, or text portions in the table format.
237 Citations
30 Claims
-
1. A computer-implemented method comprising:
-
based on a selection by a user of first one or more values of one or more events displayed in a graphical interface, automatically determining an extraction rule capable of extracting a field label-value pair at least partially within at least the selected one or more values; causing display of an option corresponding to the determined extraction rule in the graphical interface; and based on the user selecting the option in the graphical interface, causing display of second one or more values of one or more field label-value pairs extracted from the one or more events using the extraction rule. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
-
16. A system comprising:
-
one or more data processors; and one or more computer-readable storage media containing instructions which when executed on the one or more data processors, cause the one or more processors to perform operations including; based on a selection by a user of first one or more values of one or more events displayed in a graphical interface, automatically determining an extraction rule capable of extracting a field label-value pair at least partially within at least the selected one or more values; causing display of an option corresponding to the determined extraction rule in the graphical interface; and based on the user selecting the option in the graphical interface, causing display of second one or more values of one or more field label-value pairs extracted from the one or more events using the extraction rule. - View Dependent Claims (17, 18, 19, 20, 21)
-
-
22. One or more computer-storage media storing computer-useable instructions that, when executed by a computing device, perform a method, the method comprising:
based on a selection by a user of first one or more values of one or more events displayed in a graphical interface, automatically determining an extraction rule capable of extracting a field label-value pair at least partially within at least the selected one or more values; causing display of an option corresponding to the determined extraction rule in the graphical interface; and based on the user selecting the option in the graphical interface, causing display of second one or more values of one or more field label-value pairs extracted from the one or more events using the extraction rule. - View Dependent Claims (23, 24, 25, 26, 27, 28, 29, 30)
Specification