Patent ID: 9582585
Date: 2017-02-28
CPC Classifications: G06F

Claim:
1. A method comprising: accessing events returned in response to an initial search query, the accessed events comprising portions of raw data; discovering fields in the accessed events, the fields being defined by extraction rules each comprising a regular expression for extracting values from corresponding portions of raw data; causing display of a graphical user interface (GUI) that enables a user to select or enter criteria for a subset of the discovered fields without entering a search query in a search bar; receiving through a portion of the GUI that does not include a search bar for entering a search query at least one criterion for at least one field from the subset of the discovered fields; causing, by a processing device, the events returned in response to the initial search query to be filtered based on the received at least one criterion for the at least one field; determining a number of the returned events that comprise a first field of the discovered fields; and calculating a score for the first field based on the number of the returned events that comprise the first field, wherein a first field name associated with the first field is selected to be displayed in the GUI based on the calculated score.