Patent Document ID: 20150234905
Application ID: 14700006
Patent Status: 0

Claim One:
1. A computer-implemented method, comprising: accessing a plurality of events, wherein each event in the plurality of events includes a portion of raw machine data; receiving, from a user, a selection of one or more processes for identifying which events to include in a set; wherein the one or more processes selected by the user include at least one of the following: a diverse event-identification process, an outlier event-identification process, a random event-identification process, an earliest event-identification process, and a latest event-identification process; for each selected process, identifying events for inclusion in the set using the process; and causing display of one or more events in the set of events in a graphical user interface that enables development of a field-extraction rule that specifies how to extract, from the machine data included in each of the one or more events, a value for a field that is defined for each of the one or more events, wherein each of the one or more events is searchable using the field.