Invention Grant
US09031955B2 Sampling of events to use for developing a field-extraction rule for a field to use in event searching 有权
对事件进行抽样以用于开发用于事件搜索的字段的字段提取规则

  • Patent Title: Sampling of events to use for developing a field-extraction rule for a field to use in event searching
  • Patent Title (中): 对事件进行抽样以用于开发用于事件搜索的字段的字段提取规则
  • Application No.: US14168888
    Application Date: 2014-01-30
  • Publication No.: US09031955B2
    Publication Date: 2015-05-12
  • Inventor: R. David CarassoMicah James Delfino
  • Applicant: Splunk Inc.
  • Applicant Address: US CA San Francisco
  • Assignee: Splunk Inc.
  • Current Assignee: Splunk Inc.
  • Current Assignee Address: US CA San Francisco
  • Agency: Haynes Beffel & Wolfeld LLP
  • Agent Ernest J. Beffel, Jr.
  • Main IPC: G06F17/30
  • IPC: G06F17/30 G06F7/24
Sampling of events to use for developing a field-extraction rule for a field to use in event searching
Abstract:
Embodiments are directed towards generating a representative sampling as a subset from a larger dataset that includes unstructured data. A graphical user interface enables a user to provide various data selection parameters, including specifying a data source and one or more subset types desired, including one or more of latest records, earliest records, diverse records, outlier records, and/or random records. Diverse and/or outlier subset types may be obtained by generating clusters from an initial selection of records obtained from the larger dataset. An iteration analysis is performed to determine whether a sufficient number of clusters and/or cluster types have been generated that exceed at least one threshold and when not exceeded, additional clustering is performed on additional records. From the resultant clusters, and/or other subtype results, a subset of records is obtained as the representative sampling subset.
Information query
Patent Agency Ranking
0/0