Patent ID: 9208206
Filing Date: 2015-12-08
Classification: G06F,G06K

Abstract:
1. A method, comprising: selecting a portion of raw data from at least one data source; analyzing at least the selected portion of raw data to find a match of a signature or pattern of a known data type, the match corresponding to a parsing rule in a plurality of stored parsing rules; parsing the selected portion of raw data into a set of searchable, time-stamped events using the parsing rule corresponding to the match, each searchable, time-stamped event in the set of searchable, time-stamped events including raw data from the selected portion of raw data; causing display of a preview of at least a portion of the set of searchable, time-stamped events in a graphical user interface; and in response to user input received via the graphical user interface, processing raw data from the at least one data source using the parsing rule corresponding to the match, to create searchable, time-stamped events, the processed raw data including at least some data not in the selected portion of raw data; wherein the method is performed by one or more computing devices.