US 12,488,032 B1
Hybrid query system for searching unstructured data
Itay Neeman, Seattle, WA (US); and Bradford H. Lovering, Seattle, WA (US)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Dec. 27, 2022, as Appl. No. 18/146,691.
Application 18/146,691 is a continuation of application No. 17/332,070, filed on May 27, 2021, granted, now 11,567,978.
Application 17/332,070 is a continuation of application No. 15/920,434, filed on Mar. 13, 2018, granted, now 11,023,504, issued on Jun. 1, 2021.
Application 15/920,434 is a continuation of application No. 15/473,532, filed on Mar. 29, 2017, granted, now 9,934,309, issued on Apr. 3, 2018.
Application 15/473,532 is a continuation of application No. 15/421,429, filed on Jan. 31, 2017, granted, now 9,916,379, issued on Mar. 13, 2018.
Application 15/421,429 is a continuation of application No. 14/611,106, filed on Jan. 30, 2015, granted, now 9,594,828, issued on Mar. 14, 2017.
Application 14/611,106 is a continuation of application No. 14/266,833, filed on May 1, 2014, granted, now 9,122,746, issued on Sep. 1, 2015.
Application 14/266,833 is a continuation of application No. 13/956,258, filed on Jul. 31, 2013, granted, now 8,751,486, issued on Jun. 10, 2014.
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/3332 (2025.01); G06F 16/242 (2019.01); G06F 16/3331 (2025.01); G06F 16/338 (2019.01); G06F 16/80 (2019.01); G06F 16/903 (2019.01); G06F 16/9032 (2019.01)
CPC G06F 16/3332 (2019.01) [G06F 16/2433 (2019.01); G06F 16/3331 (2019.01); G06F 16/338 (2019.01); G06F 16/80 (2019.01); G06F 16/9032 (2019.01); G06F 16/90335 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method of executing structured queries on unstructured data, the method comprising:
receiving a structured query in a structured query language;
determining a schema that defines a structure for unstructured data, wherein the schema identifies a plurality of fields in the unstructured data;
executing a pilot query on the unstructured data, by using the schema, to identify one or more fields in the unstructured data;
converting the structured query in the structured query language into an unstructured query in an unstructured query language, by using the one or more fields identified by executing the pilot query, wherein the unstructured query is used to access the unstructured data; and
executing a search on the unstructured data by using the unstructured query, to produce a result of the search.