Eric J Sammer

US Patent:

20200104731, Apr 2, 2020

Filed:

Oct 30, 2018

Appl. No.:

16/175642

Inventors:

- San Francisco CA, US
Eric Sammer - San Francisco CA, US
Kristal Curtis - San Francisco CA, US
Nghi Nguyen - Union City CA, US

International Classification:

G06N 5/04
G06F 17/30

Abstract:

As described herein, a portion of machine data of a message may be analyzed to infer, using an inference model, a sourcetype of the message. The portion of machine data may be generated by one or more components in an information technology environment. Based on the inference, a set of extraction rules associated with the sourcetype may be selected. Each extraction rule may define criteria for identifying a sub-portion of text from the portion of machine data of the message to produce a value. The set of extraction rules may be applied to the portion of machine data of the message to produce a result set that indicates a number of values identified using the set of extraction rules. Based on the result set, at least one action may be performed on one or more of inference data associated with the inference model and one or more messages.

US Patent:

20190236194, Aug 1, 2019

Filed:

Jan 31, 2018

Appl. No.:

15/885645

Inventors:

- San Francisco CA, US
Joseph Gabriel Echeverria - San Francisco CA, US
Eric Sammer - San Francisco CA, US

International Classification:

G06F 17/30

Abstract:

Operational machine components of an information technology (IT) or other microprocessor- or microcontroller-permeated environment generate disparate forms of machine data. Network connections are established between these components and processors of data intake and query system (DIQS). The DIQS conducts network transactions on a periodic and/or continuous basis with the machine components to receive disparate data and ingest certain of the data as entries of a data store that is searchable for DIQS query processing. The DIQS may receive queries to process against the received and ingested data via an exposed network interface. In one example embodiment, the DIQS receives a query identifying data to be processed, dynamically generates a query processing scheme based on the state of the data to be processed, such as streaming or at rest, and dynamically communicates the query processing scheme to a query executor based on the state of the data to be processed.