US 12,443,641 B2
Data identification using inverted indexes
Jesse Miller, Piedmont, CA (US); Jason Szeto, Belmont, CA (US); Jose Solis, Mountain View, CA (US); Jindrich Dinga, Los Altos, CA (US); and David Marquardt, San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Jan. 22, 2024, as Appl. No. 18/419,179.
Application 18/419,179 is a continuation of application No. 17/861,083, filed on Jul. 8, 2022, granted, now 11,880,399.
Application 17/861,083 is a continuation of application No. 17/079,121, filed on Oct. 23, 2020, granted, now 11,403,333, issued on Aug. 2, 2022.
Application 17/079,121 is a continuation of application No. 15/479,804, filed on Apr. 5, 2017, granted, now 10,853,399, issued on Dec. 1, 2020.
Prior Publication US 2024/0419712 A1, Dec. 19, 2024
Int. Cl. G06F 16/34 (2025.01); G06F 16/335 (2019.01); G06F 16/358 (2025.01); G06T 11/20 (2006.01)
CPC G06F 16/345 (2019.01) [G06F 16/335 (2019.01); G06F 16/358 (2019.01); G06T 11/206 (2013.01); G06T 2200/24 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
causing display, via a graphical user interface, of one or more identifiers of one or more groupings of events, each event including raw machine data corresponding with a timestamp, the one or more groupings of events being generated based on first filter criteria and categorization criteria, wherein the first filter criteria identifies a set of data, wherein the categorization criteria identifies one or more fields to categorize event references, wherein categorization criteria-value pairs correspond to unique combinations of the one or more fields and field values of the one or more fields, and wherein each grouping of the one or more groupings includes a respective group of event references corresponding to a respective group of events that have a same field-value for a field of the one or more fields and satisfy the first filter criteria;
in response to an interaction with a display object displayed via the graphical user interface and associated with a particular grouping of the one or more groupings, identifying, using an inverted index, one or more event references corresponding to one or more events that satisfy the first filter criteria and second filter criteria, wherein the second filter criteria is based on the particular grouping, and wherein the one or more event references correspond to a subset of data; and
causing display, via the graphical user interface, of an identifier of the one or more events.