Automated extraction rule generation using a timestamp selector
AssigneeSplunk Inc.
InventorsR. David Carasso, Micah James Delfino
Life of this patent
Estimating the term…
Loading patent…
AssigneeSplunk Inc.
InventorsR. David Carasso, Micah James Delfino
Estimating the term…
Embodiments are directed towards a graphical user interface identify locations within event records with splittable timestamp information. A display of event records is provided using any of a variety of formats. A splittable timestamp selector allows a user to select one or more locations within event records as having time related information that may be split across the one or more locations, including, information based on date, time of day, day of the week, or other time information. Any of a plurality of mechanisms is used to associate the selected locations with the split timestamp information, including tags, labels, or header information within the event records. In other embodiments, a separate table, list, index, or the like may be generated that associates the selected locations with the split timestamp information. The split timestamp information may be used within extraction rules for selecting subsets or the event records.
A method in a computing system, comprising:
A computing system, comprising:
One or more computer storage media having computer-executable instructions embodied thereon that, when executed by one or more processors, cause the one or more processors to perform a method, the method comprising:
Dependencies are inferred from the claim text.