Enhanced data extraction via efficient extraction rule matching

    公开(公告)号:US11977523B1

    公开(公告)日:2024-05-07

    申请号:US16859203

    申请日:2020-04-27

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/211

    Abstract: Embodiments of the present invention are directed to facilitating performing data extraction via efficient extraction rule matching. Generally, an extraction rule can be determined to match an event based on a two-step process. In particular, initially, a determination that a set of fixed substrings associated with the extraction rule matches fixed substrings of the event can be made. Based on fixed substring match, a determination can be made that a set of fields associated with the extraction rule matches fields of the event. In such a case, the extraction rule can be deemed to match the event and used to extract values from the event.

Patent Agency Ranking