US 12,481,621 B2
File browser user interface
Clint Sharp, Oakland, CA (US); Jesse Miller, Berkeley, CA (US); Jason Szeto, Redwood City, CA (US); and Nima Haddadkaveh, San Francisco, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Jan. 31, 2015, as Appl. No. 14/611,227.
Prior Publication US 2017/0270132 A1, Sep. 21, 2017
Int. Cl. G06F 16/13 (2019.01); G06F 16/14 (2019.01); G06F 16/16 (2019.01); G06F 16/182 (2019.01)
CPC G06F 16/134 (2019.01) [G06F 16/148 (2019.01); G06F 16/168 (2019.01); G06F 16/182 (2019.01)] 30 Claims
OG exemplary drawing
 
1. A method, comprising:
retrieving raw data streamed from a data source;
causing display of a graphical user interface that displays a plurality of selectable event break options, wherein each event break option of the plurality of selectable event break options indicates a different type of break used to generate distinct events when parsing the raw data, each distinct event including a plurality of values corresponding with a plurality of fields, and wherein the plurality of selectable event break options includes at least one selectable event break option that generates an event break within the raw data to generate events based on a string specified by a custom delimiter rule when parsing the raw data and at least one selectable event break option that enables a pattern to be specified by a regular expression for when an event break is to occur when parsing the raw data;
in response to a selected first event break option associated with a first type of break, parsing the raw data streamed from the data source into a first plurality of events using the selected first event break option and concurrently displaying, in a real time preview area, in-progress parsed event data comprising the first plurality of events as the parsing occurs, each event in the first plurality of events comprising at least a portion of the raw data including a first plurality of values corresponding with a first plurality of fields;
in response to a selected second event break option associated with a second type of break different from the first type of break, modifying a manner in which the raw data is parsed to parse at least a portion of the raw data streamed from the data source into a second plurality of events using the selected second event break option and concurrently displaying, in the real time preview area, in-progress parsed event data comprising the second plurality of events as the parsing occurs; and
storing the selected event break option as part of a late binding schema.