Interface templates for query commands
First Claim
1. A computer-implemented method for composing queries in a query interface, the method comprising:
- causing display of a set of events that are search results of a search query, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table, the table comprising;
a plurality of rows, each row representing an event of the events, the events associated with data items of event attributes;
a plurality of columns forming cells with the plurality of rows, each column representing a respective event attribute of the event attributes, the cells of the column displaying the data items of the respective event attribute; and
interactive regions of the table, each interactive region corresponding to one or more data items of the displayed data items and being user selectable to cause display of a list of options corresponding to the selected interactive region;
in response to a first user selection of a designated interactive region of the interactive regions of the table, causing display of the list of options corresponding to the designated interactive region, each displayed option corresponding to an interface template for composing query commands; and
based on a second user selection an option in the displayed list of options, causing one or more commands to be added to the search query, the one or more commands composed based on the one or more data items that corresponds to the designated interactive region according to instructions of the interface template of the selected option.
1 Assignment
0 Petitions
Accused Products
Abstract
A method includes causing display of events that correspond to search results of a search query in a table. The table includes rows representing events comprising data items of event attributes, columns forming cells with the row, the columns representing respective event attributes, and interactive regions corresponding to one or more data items of the displayed data items. The method also includes in response to the user selecting a designated interactive region, causing display of a list of options, each displayed option corresponding to an interface template for composing query commands, and based on the user selecting an option in the displayed list of options, causing one or more commands to be added to the search query, the one or more commands composed based on the one or more data items that corresponds to the designated interactive region according to instructions of the interface template of the selected option.
49 Citations
38 Claims
-
1. A computer-implemented method for composing queries in a query interface, the method comprising:
-
causing display of a set of events that are search results of a search query, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table, the table comprising; a plurality of rows, each row representing an event of the events, the events associated with data items of event attributes; a plurality of columns forming cells with the plurality of rows, each column representing a respective event attribute of the event attributes, the cells of the column displaying the data items of the respective event attribute; and interactive regions of the table, each interactive region corresponding to one or more data items of the displayed data items and being user selectable to cause display of a list of options corresponding to the selected interactive region; in response to a first user selection of a designated interactive region of the interactive regions of the table, causing display of the list of options corresponding to the designated interactive region, each displayed option corresponding to an interface template for composing query commands; and based on a second user selection an option in the displayed list of options, causing one or more commands to be added to the search query, the one or more commands composed based on the one or more data items that corresponds to the designated interactive region according to instructions of the interface template of the selected option. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21)
-
-
22. One or more non-transitory computer-readable media having instructions stored thereon, the instructions, when executed by a processor of a computing device, to cause the computing device to perform a method comprising:
-
causing display of a set of events that are search results of a search query, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table, the table comprising; a plurality of rows, each row representing an event of the events, the events associated with data items of event attributes; a plurality of columns forming cells with the plurality of rows, each column representing a respective event attribute of the event attributes, the cells of the column displaying the data items of the respective event attribute; and interactive regions of the table, each interactive region corresponding to one or more data items of the displayed data items and being user selectable to cause display of a list of options corresponding to the selected interactive region; in response to a first user selection of a designated interactive region of the interactive regions of the table, causing display of the list of options corresponding to the designated interactive region, each displayed option corresponding to an interface template for composing query commands; and based on a second user selection an option in the displayed list of options, causing one or more commands to be added to the search query, the one or more commands composed based on the one or more data items that corresponds to the designated interactive region according to instructions of the interface template of the selected option. - View Dependent Claims (23, 24, 25, 26)
-
-
27. A computer-implemented system comprising:
-
one or more processors; and memory having instructions stored thereon, the instructions, when executed by the one or more processors, to cause the system to perform a method comprising; causing display of a set of events that are search results of a search query, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table, the table comprising; a plurality of rows, each row representing an event of the events, the events associated with data items of event attributes; a plurality of columns forming cells with the plurality of rows, each column representing a respective event attribute of the event attributes, the cells of the column displaying the data items of the respective event attribute; and interactive regions of the table, each interactive region corresponding to one or more data items of the displayed data items and being user selectable to cause display of a list of options corresponding to the selected interactive region; in response to a first user selection of a designated interactive region of the interactive regions of the table, causing display of the list of options corresponding to the designated interactive region, each displayed option corresponding to an interface template for composing query commands; and based on a second user selection an option in the displayed list of options, causing one or more commands to be added to the search query, the one or more commands composed based on the one or more data items that corresponds to the designated interactive region according to instructions of the interface template of the selected option. - View Dependent Claims (28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38)
-
Specification