Invention Grant
US09031955B2 Sampling of events to use for developing a field-extraction rule for a field to use in event searching
有权
对事件进行抽样以用于开发用于事件搜索的字段的字段提取规则
- Patent Title: Sampling of events to use for developing a field-extraction rule for a field to use in event searching
- Patent Title (中): 对事件进行抽样以用于开发用于事件搜索的字段的字段提取规则
-
Application No.: US14168888Application Date: 2014-01-30
-
Publication No.: US09031955B2Publication Date: 2015-05-12
- Inventor: R. David Carasso , Micah James Delfino
- Applicant: Splunk Inc.
- Applicant Address: US CA San Francisco
- Assignee: Splunk Inc.
- Current Assignee: Splunk Inc.
- Current Assignee Address: US CA San Francisco
- Agency: Haynes Beffel & Wolfeld LLP
- Agent Ernest J. Beffel, Jr.
- Main IPC: G06F17/30
- IPC: G06F17/30 ; G06F7/24

Abstract:
Embodiments are directed towards generating a representative sampling as a subset from a larger dataset that includes unstructured data. A graphical user interface enables a user to provide various data selection parameters, including specifying a data source and one or more subset types desired, including one or more of latest records, earliest records, diverse records, outlier records, and/or random records. Diverse and/or outlier subset types may be obtained by generating clusters from an initial selection of records obtained from the larger dataset. An iteration analysis is performed to determine whether a sufficient number of clusters and/or cluster types have been generated that exceed at least one threshold and when not exceeded, additional clustering is performed on additional records. From the resultant clusters, and/or other subtype results, a subset of records is obtained as the representative sampling subset.
Public/Granted literature
- US20140207784A1 SAMPLING OF EVENTS TO USE FOR DEVELOPING A FIELD-EXTRACTION RULE FOR A FIELD TO USE IN EVENT SEARCHING Public/Granted day:2014-07-24
Information query