Creating an entity definition from a search result set
First Claim
1. A method comprising:
- performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
causing display of the entries in a table of a user interface, the table having rows and columns, wherein the data items of each entry appear in respective columns of the same row;
receiving user input designating, for a column of the table, information for at least one of identifying or locating a data item appearing in the column within an entity definition; and
storing the data item appearing in the column in the entity definition in accordance with the user input;
wherein the entity definition represents an entity from among one or more entities that provide a service, the entity definition having an identification of machine data produced by or about the entity, the service having a Key Performance Indicator (KPI) defined by a second search query that derives a value at least in part from the machine data, thereby transforming the machine data to the value indicating the performance of the service at a point in time or during a period of time;
wherein the method is performed by a computer system comprising one or more processing devices.
1 Assignment
0 Petitions
Accused Products
Abstract
A processing device performs a search query to produce a search result set having entries having data items. Each data item has an ordinal position. A table, having rows and columns, is displayed in a graphical user interface. Each data item of a particular entry appears in a respective column of the same row of the table. Each column corresponds to the ordinal position of its respective data item. User input is received designating, for each respective column, a field name and an entity definition component type to which the respective column pertains, and stores for each data item of the particular entry an element value of an entity definition. The element has the element name designated for the respective column in which the data item appeared, and is associated with an entity definition component having the type designated for the respective column in which the data item appeared.
-
Citations
30 Claims
-
1. A method comprising:
- performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
causing display of the entries in a table of a user interface, the table having rows and columns, wherein the data items of each entry appear in respective columns of the same row;
receiving user input designating, for a column of the table, information for at least one of identifying or locating a data item appearing in the column within an entity definition; and
storing the data item appearing in the column in the entity definition in accordance with the user input;
wherein the entity definition represents an entity from among one or more entities that provide a service, the entity definition having an identification of machine data produced by or about the entity, the service having a Key Performance Indicator (KPI) defined by a second search query that derives a value at least in part from the machine data, thereby transforming the machine data to the value indicating the performance of the service at a point in time or during a period of time;
wherein the method is performed by a computer system comprising one or more processing devices. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20)
- performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
-
21. A system comprising:
- a memory; and
a processing device coupled with the memory to;
perform a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
cause display of the entries in a table of a user interface, the table having rows and columns, wherein the data items of each entry appear in respective columns of the same row;
receive user input designating, for a column of the table, information for at least one of identifying or locating a data item appearing in the column within an entity definition; and
store the data item appearing in the column in the entity definition in accordance with the user input;
wherein the entity definition represents an entity from among one or more entities that provide a service, the entity definition having an identification of machine data produced by or about the entity, the service having a Key Performance Indicator (KPI) defined by a second search query that derives a value at least in part from the machine data, thereby transforming the machine data to the value indicating the performance of the service at a point in time or during a period of time. - View Dependent Claims (22, 23, 24, 25)
- a memory; and
-
26. A non-transitory computer readable storage medium encoding instructions thereon that, in response to execution by one or more processing devices, cause the processing device to perform operations comprising:
- performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
causing display of the entries in a table of a user interface, the table having rows and columns, wherein the data items of each entry appear in respective columns of the same row;
receiving user input designating, for a column of the table, information for at least one of identifying or locating a data item appearing in the column within an entity definition; and
storing the data item appearing in the column in the entity definition in accordance with the user input;
wherein the entity definition represents an entity from among one or more entities that provide a service, the entity definition having an identification of machine data produced by or about the entity, the service having a Key Performance Indicator (KPI) defined by a second search query that derives a value at least in part from the machine data, thereby transforming the machine data to the value indicating the performance of the service at a point in time or during a period of time. - View Dependent Claims (27, 28, 29, 30)
- performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry;
Specification