US 11,893,010 B1
Data model selection and application based on data sources
Alice Emily Neels, San Francisco, CA (US); Archana Sulochana Ganapathi, San Francisco, CA (US); Marc Vincent Robichaud, San Francisco, CA (US); Stephen Phillip Sorkin, San Francisco, CA (US); and Steve Yu Zhang, San Francisco, CA (US)
Assigned to SPLUNK INC., San Francisco, CA (US)
Filed by SPLUNK INC., San Francisco, CA (US)
Filed on May 2, 2022, as Appl. No. 17/734,786.
Application 17/734,786 is a continuation of application No. 16/204,989, filed on Nov. 29, 2018, granted, now 11,321,311.
Application 16/204,989 is a continuation of application No. 15/421,415, filed on Jan. 31, 2017, granted, now 10,169,405, issued on Jan. 1, 2019.
Application 15/421,415 is a continuation of application No. 14/815,884, filed on Jul. 31, 2015, granted, now 9,589,012, issued on Mar. 7, 2017.
Application 14/815,884 is a continuation of application No. 14/611,232, filed on Jan. 31, 2015, granted, now 9,128,980, issued on Sep. 8, 2015.
Application 14/611,232 is a continuation of application No. 14/067,203, filed on Oct. 30, 2013, granted, now 8,983,994, issued on Mar. 17, 2015.
Application 14/067,203 is a continuation of application No. 13/607,117, filed on Sep. 7, 2012, granted, now 8,788,525, issued on Jul. 22, 2014.
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/242 (2019.01); G06F 16/27 (2019.01); G06F 16/245 (2019.01); G06F 16/248 (2019.01); G06F 16/9535 (2019.01); G06F 16/2457 (2019.01); G06F 40/186 (2020.01); G06F 3/0482 (2013.01)
CPC G06F 16/2425 (2019.01) [G06F 3/0482 (2013.01); G06F 16/245 (2019.01); G06F 16/248 (2019.01); G06F 16/24575 (2019.01); G06F 16/27 (2019.01); G06F 16/9535 (2019.01); G06F 40/186 (2020.01)] 19 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
identifying a first data set to be retrieved and analyzed, a report template that is associated with one or more selected data models, wherein:
the first data set comprises a plurality of time-stamped, searchable events stored in a first data store,
each event in the plurality of time-stamped, searchable events includes a portion of unstructured raw machine data reflecting activity in an information technology environment, and
the one or more selected data models represent a view of the first data set and include a first object,
selecting, based on the first data set, a report template that is associated with the first object, wherein the first object is associated with (i) an object query that, when executed, retrieves a first set of time stamped, searchable events included in the first data set and (ii) an object schema;
executing the object query to retrieve, from the first data store, a first set of time-stamped, searchable events, wherein the first set of time-stamped, searchable events includes portions of unstructured raw machine data;
applying the object schema to the first set of time-stamped, searchable events to generate one or more fields of structured data from the portions of unstructured raw machine data; and
generating a report corresponding to the report template based on the one or more fields of structured data.