×

Identifying events using informational fields

  • US 9,146,962 B1
  • Filed: 01/31/2015
  • Issued: 09/29/2015
  • Est. Priority Date: 10/09/2014
  • Status: Active Grant
First Claim
Patent Images

1. A method comprising:

  • determining if events in a machine data store in a computer memory satisfy event selection criteria of a search query, the machine data store comprising machine data, and the event selection criteria including a first field-value pair;

    wherein determining if one of the events satisfies the event selection criteria includes comparing the first field-value pair with a second field-value pair from an entity definition associated with the event via a third field-value pair associated with data corresponding to the event in the machine data store;

    reflecting in the computer memory a result for the search query based at least in part on said determining;

    wherein the entity definition represents an entity that provides a service, the service being represented by a service definition, the entity definition having an association with the service definition, and the service definition having an associated key performance indicator (KPI) defined by a KPI search query that produces a value from machine data identified in one or more entity definitions associated with the service, the value indicative of how the service is performing at a point in time or during a period of time;

    wherein the entity definition and the service definition are stored in the computer memory; and

    wherein the method is performed by a computer system comprising one or more processing devices coupled to the computer memory.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×