| CPC G06F 16/9032 (2019.01) [G06F 16/9024 (2019.01); G06F 16/9038 (2019.01); G06F 16/906 (2019.01)] | 24 Claims |
|
1. A computer implemented method to query across different log data source types, the method comprising:
attempting to classify, according to a plurality of field types, label fields used by structures in instances of different log data source types, wherein the different log data source types use different structure types and different path information to access the structures of those structure types within the instances, wherein each of the instances includes at least one structure, wherein each of the structures includes at least one of the label fields and at least one data field associated with the at least one of the label fields, wherein the label fields store field labels descriptive of the associated data fields;
storing a result of the attempting, wherein the result includes the path information to access the structures and mappings of at least some of the field labels to the plurality of field types;
responsive to submission of a system level query, determining a set of one or more of the plurality of field types involved in the system level query;
generating a set of one or more query graphs based on the set of field types and the result, wherein the set of query graphs identify those of the field labels determined to be mapped to one of the set of field types, those of the structures that use those field labels, and any of the path information to access those structures, wherein each of the set of query graphs is for one of the instances;
generating a set of one or more instance level queries for a set of one or more of the instances according to the set of query graphs;
submitting the set of one or more instance level queries to the set of one or more of the instances;
receiving a set of one or more instance level query results responsive to the submitting; and
transmitting the instance level query results as a response to the submission of the system level query.
|