公开(公告)号：US20160224619A1

公开(公告)日：2016-08-04

申请号：US14611026

申请日：2015-01-30

Applicant: SPLUNK INC.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F17/30 ,  G06F3/0484 ,  G06F3/0482

CPC classification number: G06F17/30398 ,  G06F3/0482 ,  G06F3/04842 ,  G06F3/04847

Abstract: A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell displaying a textual representation of at least one of the data items of the event attribute of a corresponding column. Based on a user selecting a portion of the textual representation in a corresponding cell, a list of options is displayed that corresponds to the selected portion of the textual representation. Furthermore, one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the selected portion of the textual representation in the corresponding cell.

Abstract translation: 搜索界面以包括一个或多个列的表格格式显示，每列包括事件属性的数据项，数据项是一组事件，以及多行形成具有一个或多个列的单元的行， 每个单元显示相应列的事件属性的至少一个数据项的文本表示。 基于用户选择相应单元格中的文本表示的一部分，显示对应于文本表示的所选部分的选项列表。 此外，一个或多个命令被添加到与该组事件相对应的搜索查询中，所述一个或多个命令基于至少一个选项，该选项是从选项列表中选择的，并且所选择的部分中的文本表示在 相应的单元格。

公开(公告)号：US20190012304A1

公开(公告)日：2019-01-10

申请号：US16042989

申请日：2018-07-23

Applicant: Splunk Inc.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD ,  JESSE MILLER

IPC: G06F17/24 ,  G06F17/30 ,  G06F21/62 ,  G06F3/0484 ,  G06Q10/10

Abstract: A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell including one or more of the data items of the event attribute of a corresponding column. Based on a user selecting one or more of the cells, a list of options if displayed corresponding to the selection, and one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the event attribute for each of the one or more of the data items of each of the selected one or more cells.

公开(公告)号：US20160224618A1

公开(公告)日：2016-08-04

申请号：US14611002

申请日：2015-01-30

Applicant: SPLUNK INC.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD ,  JESSE MILLER

IPC: G06F17/30 ,  G06F3/0484 ,  G06F3/0482

CPC classification number: G06F17/245 ,  G06F3/0484 ,  G06F17/30 ,  G06F17/30365 ,  G06F17/30374 ,  G06F17/30392 ,  G06F17/30466 ,  G06F17/30507 ,  G06F17/30551 ,  G06F17/30572 ,  G06F17/30634 ,  G06F17/30663 ,  G06F21/6227 ,  G06Q10/10

Abstract: A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell including one or more of the data items of the event attribute of a corresponding column. Based on a user selecting one or more of the cells, a list of options if displayed corresponding to the selection, and one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the event attribute for each of the one or more of the data items of each of the selected one or more cells.

Abstract translation: 搜索界面以包括一个或多个列的表格格式显示，每列包括事件属性的数据项，数据项是一组事件，以及多行形成具有一个或多个列的单元的行， 每个单元包括相应列的事件属性的一个或多个数据项。 基于选择一个或多个单元的用户，如果对应于选择显示选项列表，并且将一个或多个命令添加到与该组事件相对应的搜索查询中，则一个或多个命令基于 至少一个从所述选项列表中选择的选项和所选一个或多个单元中的每一个的所述一个或多个所述数据项中的每一个的事件属性。

公开(公告)号：US20210209080A1

公开(公告)日：2021-07-08

申请号：US17212953

申请日：2021-03-25

Applicant: SPLUNK INC.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F16/22 ,  G06F16/24 ,  G06F16/2455

Abstract: A search interface is displayed in a table format that includes a plurality of columns, each column including data items of an event attribute, the data items being of a set of events, each column being selectable by a user, and a plurality of rows forming cells with the one or more columns, each cell comprising one or more of the data items of the event attribute of a corresponding column. Based on the user selecting one or more of the columns, a list of options is displayed corresponding to the selected one or more columns, and one or more commands are added to a search query that corresponds to the set of events. The one or more commands are based on at least an option that is selected from the list of options and the event attribute of each of the selected one or more columns.

公开(公告)号：US20180150507A1

公开(公告)日：2018-05-31

申请号：US15878299

申请日：2018-01-23

Applicant: SPLUNK INC.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F17/30 ,  G06Q10/10

CPC classification number: G06F16/2423 ,  G06Q10/103

Abstract: A list of command entries is displayed in a search interface, each of the command entries representing one or more commands of a plurality of commands of a search query. The list of command entries are displayed in a sequence corresponding to the plurality of commands of the search query. Based on a user interaction with a designated command entry in the displayed list of command entries, the displayed list of command entries is modified with respect to the designated command. Furthermore, the search query is automatically modified with respect to the corresponding one or more commands represented by the designated command entry. The modification can include causing the designated command entry to be removed from or reordered in the displayed list of command entries and the automatic modification cam include causing the corresponding one or more commands to be removed from or reordered in the search query.

公开(公告)号：US20160224626A1

公开(公告)日：2016-08-04

申请号：US14611018

申请日：2015-01-30

Applicant: SPLUNK, INC.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F17/30

CPC classification number: G06F17/30315 ,  G06F17/30386 ,  G06F17/30477

Abstract: A search interface is displayed in a table format that includes a plurality of columns, each column including data items of an event attribute, the data items being of a set of events, each column being selectable by a user, and a plurality of rows forming cells with the one or more columns, each cell comprising one or more of the data items of the event attribute of a corresponding column. Based on the user selecting one or more of the columns, a list of options is displayed corresponding to the selected one or more columns, and one or more commands are added to a search query that corresponds to the set of events. The one or more commands are based on at least an option that is selected from the list of options and the event attribute of each of the selected one or more columns.

Abstract translation: 搜索界面以包括多个列的表格格式显示，每列包括事件属性的数据项，数据项是一组事件，每列可由用户选择，并且多行形成 具有一个或多个列的单元，每个单元包括相应列的事件属性的一个或多个数据项。 基于用户选择一个或多个列，对应于所选择的一个或多个列显示选项列表，并且一个或多个命令被添加到与该组事件相对应的搜索查询中。 一个或多个命令至少基于从选项列表中选择的选项和所选择的一个或多个列中的每一个的事件属性。

公开(公告)号：US20210097070A1

公开(公告)日：2021-04-01

申请号：US17121935

申请日：2020-12-15

Applicant: SPLUNK Inc.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F16/242 ,  G06F3/0482 ,  G06F3/0484

Abstract: A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell displaying a textual representation of at least one of the data items of the event attribute of a corresponding column. Based on a user selecting a portion of the textual representation in a corresponding cell, a list of options is displayed that corresponds to the selected portion of the textual representation. Furthermore, one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the selected portion of the textual representation in the corresponding cell.

公开(公告)号：US20180276272A1

公开(公告)日：2018-09-27

申请号：US15996226

申请日：2018-06-01

Applicant: Splunk Inc.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F17/30 ,  G06F3/0482 ,  G06F3/0484

CPC classification number: G06F16/2428 ,  G06F3/0482 ,  G06F3/04842 ,  G06F3/04847

Abstract: A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell displaying a textual representation of at least one of the data items of the event attribute of a corresponding column. Based on a user selecting a portion of the textual representation in a corresponding cell, a list of options is displayed that corresponds to the selected portion of the textual representation. Furthermore, one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the selected portion of the textual representation in the corresponding cell.

公开(公告)号：US20170139983A1

公开(公告)日：2017-05-18

申请号：US15421415

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： ALICE EMILY NEELS ,  ARCHANA SULOCHANA GANAPATHI ,  MARC VINCENT ROBICHAUD ,  STEPHEN PHILLIP SORKIN ,  STEVE YU ZHANG

IPC: G06F17/30 ,  G06F3/0482

CPC classification number: G06F17/30395 ,  G06F3/0482 ,  G06F17/248 ,  G06F17/30283 ,  G06F17/30424 ,  G06F17/30528 ,  G06F17/30554 ,  G06F17/30867

Abstract: Embodiments include generating data models that may give semantic meaning for unstructured or structured data that may include data generated and/or received by search engines, including a time series engine. A method includes generating a data model for data stored in a repository. Generating the data model includes generating an initial query string, executing the initial query string on the data, generating an initial result set based on the initial query string being executed on the data, determining one or more candidate fields from one or results of the initial result set, generating a candidate data model based on the one or more candidate fields, iteratively modifying the candidate data model until the candidate data model models the data, and using the candidate data model as the data model.

公开(公告)号：US20210097068A1

公开(公告)日：2021-04-01

申请号：US17121949

申请日：2020-12-15

Applicant: SPLUNK Inc.

Inventor： MARC VINCENT ROBICHAUD ,  CORY EUGENE BURKE ,  JEFFREY THOMAS LLOYD

IPC: G06F16/242 ,  G06Q10/10

Abstract: A list of command entries is displayed in a search interface, each of the command entries representing one or more commands of a plurality of commands of a search query. The list of command entries are displayed in a sequence corresponding to the plurality of commands of the search query. Based on a user interaction with a designated command entry in the displayed list of command entries, the displayed list of command entries is modified with respect to the designated command. Furthermore, the search query is automatically modified with respect to the corresponding one or more commands represented by the designated command entry. The modification can include causing the designated command entry to be removed from or reordered in the displayed list of command entries and the automatic modification cam include causing the corresponding one or more commands to be removed from or reordered in the search query.