Patent ID: 11972203
Assignee: SPLUNK INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. One or more computer-storage media storing computer-executable instructions that, when executed by a computing device, perform a method comprising:
causing display, via a graphical user interface, of an example event having a set of field values corresponding with fields, wherein a first field value, corresponding with a first field, is visually indicated as corresponding with a field extraction rule that extracts one or more values for one or more fields;
based on an indication that the field extraction rule fails to extract a second field value associated with a second field in the example event, receiving an input indicating to anchor the second field to the first field, wherein the second field and the first field are adjacent to one another; and
generating a new field extraction rule configured to extract the first field value of the first field and the second field value of the second field of the example event based on the second field being anchored to the first field.