Identifying field values based on user-selected extraction mode
AssigneeSplunk Inc.
InventorJesse Brandau Miller
Life of this patent
Estimating the term…
Abstract
In embodiments, method and systems are provided for facilitating identification of field values based on delimiters. In some implementations, a user selection of a delimiter type to use for identifying values within fields is received. The values within fields are generally separated from one another by delimiters. A first set of one or more values from a plurality of events based on the selected delimiter is identified. Further, a second set of one or more values from the plurality of events is identified based on the selected delimiter. The identified first set of one or more values to a first field and the second set of one or more values to a second field. Additional embodiments are described and/or claimed.
Claims30
A computer-implemented method, comprising:
- receiving, via a graphical user interface, a user selection of an extraction mode defining a method of performing extraction to identify values within fields;
- identifying a first set of one or more values from a plurality of events based on the selected extraction mode;
- identifying a second set of one or more values from the plurality of events based on the selected extraction mode;
- and
- assigning the identified first set of one or more values to a first field and the second set of one or more values to a second field.
One or more computer-storage media storing computer-useable instructions that, when executed by a computing device, perform operations comprising:
- receiving, via a graphical user interface, a user selection of an extraction mode defining a method of performing extraction to identify values within fields;
- identifying a first set of one or more values from a plurality of events based on the selected extraction mode;
- identifying a second set of one or more values from the plurality of events based on the selected extraction mode;
- and
- assigning the identified first set of one or more values to a first field and the second set of one or more values to a second field.
A system comprising:
- one or more data processors;
- and
- one or more computer-readable storage media containing instructions which when executed on the one or more data processors, cause the one or more processors to perform operations including:
- receiving, via a graphical user interface, a user selection of an extraction mode defining a method of performing extraction to identify values within fields;
- identifying a first set of one or more values from a plurality of events based on the selected extraction mode;
- identifying a second set of one or more values from the plurality of events based on the selected extraction mode;
- and
- assigning the identified first set of one or more values to a first field and the second set of one or more values to a second field.
Dependencies are inferred from the claim text.