Patent Document ID: 9384261
Application ID: 14530686
Patent Flag: 1

Claim One:
1. A method, comprising: analyzing machine data stored in at least one storage device; based on the machine data analysis, automatically creating rules, for different machine data sources, for identification of boundaries of events within the machine data; organizing machine data into a plurality of events using at least one rule among the automatically created rules in order to segment the machine data into a plurality of events by determining beginning and ending of each event in the plurality of events in the machine data, each event in the plurality of events including a portion of the machine data segmented for that event, the plurality of events including both events produced from a first data source and events produced from a second data source that is different from the first data source, the machine data in one or more events produced from the first data source having a different data format than the machine data in one or more events produced from the second data source; wherein the method is performed by one or more computing devices.