Michael Joseph Baum

Segmenting machine data into events

Search phrase processing

Determining timestamps to be associated with events in machine data

Segmenting machine data into events to identify matching events

Segmenting machine data into events based on source signatures

Time series search phrase processing

Determining time stamps in machine data derived events

Storing events derived from log data and performing a search on the events and data that is not log data

TIME SERIES SEARCH PHRASE PROCESSING

Deriving signature-based rules for creating events from machine data

Identifying behavioral patterns of events derived from machine data that reveal historical behavior of an information technology environment

Determining system behavior using event patterns in machine data

Analyzing machine data based on relationships between log data and network traffic data

Searching Packed Raw Data in Events Using Segment Lookup Data Structures

Determining Time Stamps in Machine Data Derived Events

Segmenting machine data using token-based signatures

Identifying pattern relationships in machine data

Applying time-based search phrases across event data

Storing events derived from log data and performing a search on the events and data that is not log data

Storing log data and performing a search on the log data and data that is not log data

Storing events associated with a time stamp extracted from log data and performing a search on the events and data that is not log data

Identifying matching event data from disparate data sources

Aggregating search results from a plurality of searches executed across time series data

Storing log data as events and performing a search on the log data and data obtained from a real-time monitoring environment

Log data time stamp extraction and search on log data real-time monitoring environment

Storing and executing a search on log data and data obtained from a real-time monitoring environment

Identifying relationships between network traffic data and log data

Source differentiation of machine data

QUERY-INITIATED SEARCH ACROSS SEPARATE STORES FOR LOG DATA AND DATA FROM A REAL-TIME MONITORING ENVIRONMENT

Unified time series search across both log data and data from a real-time monitoring environment

Search based on a relationship between log data and data from a real-time monitoring environment

Application of search policies to searches on event data stored in persistent data structures

Time stamp creation for event data

Identifying security-related events derived from machine data that match a particular portion of machine data

Identifying system performance patterns in machine data

Uniform storage and search of security-related events derived from machine data from different sources

Expiration of persistent data structures that satisfy search queries

Normalization of time stamps for event data

Aggregation and display of search results from multi-criteria search queries on event data

Determining timestamps to be associated with events in machine data

Search query processing using operational parameters

Automatic creation of rules for identifying event boundaries in machine data

Identifying events derived from machine data that match a particular portion of machine data

Using extractions to search events derived from machine data

Identifying events derived from machine data based on an extracted portion from a first event

PATTERN IDENTIFICATION, PATTERN MATCHING, AND CLUSTERING FOR EVENTS DERIVED FROM MACHINE DATA

Time series search in primary and secondary memory

Searching of events derived from machine data using field and keyword criteria

Identification of systems with anomalous behaviour using events derived from machine data produced by those systems

Uniform storage and search of events derived from machine data from different sources

Machine data web

Machine data web

Time series search engine

Machine data web