Patent ID: 9146962
Filing Date: 2015-09-29
Classification: G06F,H04L

Abstract:
1. A method comprising: determining if events in a machine data store in a computer memory satisfy event selection criteria of a search query, the machine data store comprising machine data, and the event selection criteria including a first field-value pair; wherein determining if one of the events satisfies the event selection criteria includes comparing the first field-value pair with a second field-value pair from an entity definition associated with the event via a third field-value pair associated with data corresponding to the event in the machine data store; reflecting in the computer memory a result for the search query based at least in part on said determining; wherein the entity definition represents an entity that provides a service, the service being represented by a service definition, the entity definition having an association with the service definition, and the service definition having an associated key performance indicator (KPI) defined by a KPI search query that produces a value from machine data identified in one or more entity definitions associated with the service, the value indicative of how the service is performing at a point in time or during a period of time; wherein the entity definition and the service definition are stored in the computer memory; and wherein the method is performed by a computer system comprising one or more processing devices coupled to the computer memory.