公开(公告)号：US11816321B1

公开(公告)日：2023-11-14

申请号：US16264517

申请日：2019-01-31

Applicant: SPLUNK INC.

Inventor： Li Li ,  Yongxin Su ,  Ting Yuan ,  Qian Jie Zhong ,  Yiyun Zhu

IPC: G06F3/04847 ,  G06F3/0482 ,  G06F16/245 ,  G06F16/25 ,  G06N20/00

CPC classification number: G06F3/04847 ,  G06F3/0482 ,  G06F16/245 ,  G06F16/25 ,  G06N20/00

Abstract: Embodiments of the present invention are directed to enhancing extraction rules utilizing user feedback. In embodiments, a set of extraction rules relevant to an event set are provided for display. Thereafter, a selection of an extraction rule is received and, in response, a set of events matching the selected extraction rule is provided for display. A modification, for example provided by a user, in association with the extraction rule or the set of events is received. Such a modification is then used (e.g., via machine learning) to enhance extraction rules available for performing subsequent data extraction.

公开(公告)号：US11669533B1

公开(公告)日：2023-06-06

申请号：US17376021

申请日：2021-07-14

Applicant: Splunk Inc.

Inventor： Li Li ,  Yongxin Su ,  Ting Yuan ,  Qian Jie Zhong ,  Yiyun Zhu

IPC: G06F16/2458 ,  H04L67/10 ,  G06F3/04847

CPC classification number: G06F16/2465 ,  G06F3/04847 ,  H04L67/10

Abstract: Embodiments of the present invention are directed to validating extraction rules. In embodiments, a set of events for which field extraction is desired is obtained. Thereafter, an extraction rule is applied to the set of events to extract fields of the events. The application of the extraction rule can be monitored to determine that the applied extraction rule is invalid. Based on the applied extraction rule being invalid, a new extraction rule can be generated to apply to the set of events.

公开(公告)号：US11086890B1

公开(公告)日：2021-08-10

申请号：US16264525

申请日：2019-01-31

Applicant: SPLUNK INC.

Inventor： Li Li ,  Yongxin Su ,  Ting Yuan ,  Qian Jie Zhong ,  Yiyun Zhu

IPC: G06F16/2458 ,  H04L29/08 ,  G06F3/0484

Abstract: Embodiments of the present invention are directed to validating extraction rules. In embodiments, a set of events for which field extraction is desired is obtained. Thereafter, an extraction rule is applied to the set of events to extract fields of the events. The application of the extraction rule can be monitored to determine that the applied extraction rule is invalid. Based on the applied extraction rule being invalid, a new extraction rule can be generated to apply to the set of events.