Patent ID: 11886464
Assignee: SPLUNK INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 7:
8. A system comprising:
a memory; and
one or more processing devices coupled to the memory, the one or more processing devices to:
generate a plurality of notable events using machine data obtained from an information technology environment, the machine data reflecting activity of one or more components in the information technology environment;
apply, to the plurality of notable events, a score model defined by one or more values of respective substitution variables referenced by a score model template, wherein the one or more values of respective substitution variables are derived from historical data, and wherein the score model produces a set of numeric values, each numeric value reflecting a ranking of a respective notable event against other notable events of the plurality of notable events;
identify a subset of the plurality of notable events by filtering the plurality of notable events based on a selection criterion applied to the numeric values;
identify, by applying an action model to the subset of notable events, an action to be performed in response to the subset of notable events; and
generate a display identifying the action to be performed in response to the subset of notable events.