IP Library › Granted Patent US 12,360,991
Granted Patent B1
US 12,360,991 · App. 18/066,835 · Granted Jul 15, 2025

Cell-based table manipulation of event data to generate search commands

Inventors: Marc Vincent Robichaud (San Francisco, CA); Cory Eugene Burke (San Francisco, CA); Jeffrey Thomas Lloyd (San Francisco, CA); Jesse Miller (San Francisco, CA)
G06F16/24524G06F3/0482G06F3/0484G06F3/04842G06F16/00G06F16/22G06F16/23G06F16/235G06F16/2372G06F16/2423G06F16/24544G06F16/2455G06F16/24564G06F16/2477G06F16/26G06F16/33G06F16/3334G06F21/6227G06F40/177G06Q10/00G06T11/206G06Q10/10G06T2200/24
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,360,991
App. No.
18/066,835
Granted
Jul 15, 2025
Kind
B1
Abstract

A search interface is displayed in a table format that includes one or more columns, each column including data items of an event attribute, the data items being of a set of events, and a plurality of rows forming cells with the one or more columns, each cell including one or more of the data items of the event attribute of a corresponding column. Based on a user selecting one or more of the cells, a list of options if displayed corresponding to the selection, and one or more commands are added to a search query that corresponds to the set of events, the one or more commands being based on at least an option that is selected from the list of options and the event attribute for each of the one or more of the data items of each of the selected one or more cells.

Claims (45)

1. A computer-implemented method comprising:

causing display of a set of events within a table format that includes:

one or more columns, each column corresponding to an event attribute, and

a plurality of rows forming a plurality of cells with the one or more columns, each row of the plurality of rows corresponding to an event of the set of events, wherein a particular cell in a particular row of the plurality of rows is in a particular column of the one or more columns, the particular cell comprises one or more data items of the event corresponding to the row, and the one or more data items in the particular cell correspond to the event attribute of the particular column;

in response to receiving a user selection of the particular cell of the plurality of cells in the table format, causing display of a plurality of options corresponding to the particular cell, wherein each option corresponds with a command for inclusion in a search query for searching the set of events within the table format; and

in response to receiving a user selection of a first option of the plurality of options corresponding to the particular cell in the table format, generating one or more search commands, based on the first option, for searching the set of events within the table format.

2. The computer-implemented method of claim 1 , wherein the set of events corresponds to search results of a first search query represented as a search string that specifies an initial plurality of search commands.

3. The computer-implemented method of claim 1 , wherein each event included in the set of events corresponds to a portion of raw machine data and is associated with a timestamp.

4. The computer-implemented method of claim 1 , wherein the set of events corresponds to search results of a first search query represented as a search string that specifies an initial plurality of search commands and the method further comprises:

causing the one or more generated search commands to be added to the initial plurality of search commands.

5. The computer-implemented method of claim 1 , wherein the display of the set of events in the table format is in a search screen, and generating the one or more search commands causes the table format in the displayed search screen to be automatically updated to add a new column that represents a new field extracted from the set of events by the one or more generated search commands.

6. The computer-implemented method of claim 1 , wherein the one or more generated search commands includes a first command of a plurality of predetermined commands of a search language, and the method further comprises:

causing a command identifier of the one or more generated search commands to be added to the search query independent of the particular cell to cause the display of the plurality of options; and

causing arguments of the one or more generated search commands to be added to the search query that are composed based on the particular cell to cause the display of the plurality of options.

7. The computer-implemented method of claim 1 , further comprising causing the first option to be included in the displayed plurality of options based on a determination that the particular cell is an empty cell.

8. The computer-implemented method of claim 1 , further comprising causing the first option to be included in the displayed plurality of options based on a determination that at least one of the one or more of the data items of the particular cell is of a numeric data type.

9. The computer-implemented method of claim 1 , further comprising causing the first option to be included in the displayed plurality of options based on a determination that at least one of the one or more of the data items of the particular cell is of a categorical data type.

10. The computer-implemented method of claim 1 , further comprising causing the first option to be included in the displayed plurality of options based on a determination that at least one of the one or more of the data items of the particular cell comprises raw machine data for a first event of the set of events.

11. The computer-implemented method of claim 1 , further comprising causing the first option to be included in the displayed plurality of options based on a determination that at least one of the one or more of the data items of the particular cell comprises, for a first event of the set of events, a timestamp associated with raw machine data of the first event.

12. The computer-implemented method of claim 1 , wherein the selected particular cell comprises a first selected cell and a second selected cell, and the selected first option is caused to be included in the displayed plurality of options based on a determination that a second selected cell is in a second column of the one or more columns and the second cell is separate from the particular column.

13. The computer-implemented method of claim 1 , further comprising causing the selected first option to be included in the displayed plurality of options based on a determination that at least one of the one or more of the data items of the selected particular cell comprises a statistical value generated by one or more statistical functions performed on values of data items of a first event of the set of events.

14. The computer-implemented method of claim 1 , further comprising:

causing a field label of a field label-value pair to be detected in a subportion of text displayed in the particular cell; and

causing the field label to be displayed in an option in the displayed plurality of options.

15. The computer-implemented method of claim 1 , further comprising:

receiving one or more command elements of one or more initial search commands entered into a form, the first option being displayed in the plurality of options as the form.

16. The computer-implemented method of claim 1 , wherein one or more command elements of the one or more generated search commands include at least one value of the one or more of the data items of the selected particular cell.

17. The computer-implemented method of claim 1 further comprising:

in response to receiving the selection of the particular cell, causing the event attribute for each of the one or more of the data items of the particular cell to be included as one or more command elements of the one or more generated search commands.

18. The computer-implemented method of claim 1 , comprising:

in response to receiving the selection of the particular cell, causing a displayed representation of a search query in a user interface to be automatically updated to include a representation of the one or generated search more commands.

19. A computer-implemented system for searching data, the system comprising:

one or more data processors; and

one or more computer-readable storage media containing instructions which when executed on the one or more data processors, cause the one or more processors to perform operations including:

causing display of a set of events within a table format that includes:

one or more columns, each column corresponding to an event attribute, and

a plurality of rows forming a plurality of cells with the one or more columns, each row of the plurality of rows corresponding to an event of the set of events, wherein a particular cell in a particular row of the plurality of rows is in a particular column of the one or more columns, the particular cell comprises one or more data items of the event corresponding to the row, and the one or more data items in the particular cell correspond to the event attribute of the particular column;

in response to receiving a user selection of the particular cell of the plurality of cells in the table format, causing display of a plurality of options corresponding to the particular cell, wherein each option corresponds with a command for inclusion in a search query for searching the set of events within the table format; and

in response to receiving a user selection of a first option of the plurality of options corresponding to the particular cell in the table format, generating one or more search commands, based on the first option, for searching the set of events within the table format.

20. One or more non-transitory computer-storage media storing computer-useable instructions that, when executed by at least one computing device, cause the at least one computing device to perform a method, the method comprising:

causing display of a set of events within a table format that includes:

one or more columns, each column corresponding to an event attribute, and

a plurality of rows forming a plurality of cells with the one or more columns, each row of the plurality of rows corresponding to an event of the set of events, wherein a particular cell in a particular row of the plurality of rows is in a particular column of the one or more columns, the particular cell comprises one or more data items of the event corresponding to the row, and the one or more data items in the particular cell correspond to the event attribute of the particular column;

in response to receiving a user selection of the particular cell of the plurality of cells in the table format, causing display of a plurality of options corresponding to the particular cell, wherein each option corresponds with a command for inclusion in a search query for searching the set of events within the table format; and

in response to receiving a user selection of a first option of the plurality of options corresponding to the particular cell in the table format, generating one or more search commands, based on the first option, for searching the set of events within the table format.

Assignments (4)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
CHANGE OF NAME Recorded Jan 6, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 069826/0060 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 19, 2022
From: ROBICHAUD, MARC VINCENT; BURKE, CORY EUGENE; LLOYD, JEFFREY THOMAS; MILLER, JESSE
To: SPLUNK INC.
Reel/Frame 062143/0201 →
Continuity (2)
Continuation 16042989 · Jul 23, 2018
Continuation 14611002 · Jan 30, 2015
References Cited (219)
US 5251152A · Notess · 1993 [cited by applicant]
US 5261044A · Dev et al. · 1993 [cited by applicant]
US 5619688A · Bosworth et al. · 1997 [cited by applicant]
US 5625812A · David · 1997 [cited by applicant]
US 5760770A · Bliss et al. · 1998 [cited by applicant]
US 5781773A · Vanderpool et al. · 1998 [cited by applicant]
US 5787411A · Groff et al. · 1998 [cited by applicant]
US 5966712A · Sabatini et al. · 1999 [cited by applicant]
US 5982370A · Kamper · 1999 [cited by applicant]
US 6072493A · Driskell et al. · 2000 [cited by applicant]
US 6301584B1 · Ranger · 2001 [cited by applicant]
US 6430584B1 · Comer et al. · 2002 [cited by applicant]
US 6438565B1 · Ammirato et al. · 2002 [cited by applicant]
US 6493703B1 · Knight et al. · 2002 [cited by applicant]
US 6513033B1 · Trauring · 2003 [cited by applicant]
US 6553317B1 · Lincoln et al. · 2003 [cited by applicant]
US 6691254B2 · Kaler et al. · 2004 [cited by applicant]
US 6768997B2 · Schirmer et al. · 2004 [cited by applicant]
US 6775682B1 · Ballamkonda et al. · 2004 [cited by applicant]
US 6851088B1 · Conner et al. · 2005 [cited by applicant]
US 6985901B1 · Sachse et al. · 2006 [cited by applicant]
US 7003475B1 · Friedland et al. · 2006 [cited by applicant]
US 7034710B2 · Falada et al. · 2006 [cited by applicant]
US 7131037B1 · LeFaive et al. · 2006 [cited by applicant]
US 7173651B1 · Knowles · 2007 [cited by applicant]
US 7190382B1 · Retlich et al. · 2007 [cited by applicant]
US 7243046B1 · Patlashenko et al. · 2007 [cited by applicant]
US 7324108B2 · Hild et al. · 2008 [cited by applicant]
US 7480647B1 · Murstein et al. · 2009 [cited by applicant]
US 7583187B1 · Cheng et al. · 2009 [cited by applicant]
US 7603349B1 · Kraft et al. · 2009 [cited by applicant]
US 7669119B1 · Orelind et al. · 2010 [cited by applicant]
US 7703026B2 · Bechtold et al. · 2010 [cited by applicant]
US 7750910B2 · Hild et al. · 2010 [cited by applicant]
US 7797585B1 · Sahin et al. · 2010 [cited by applicant]
US 7797635B1 · Denise · 2010 [cited by applicant]
US 7822707B1 · Yehuda · 2010 [cited by examiner]
US 7925660B2 · Dieberger et al. · 2011 [cited by applicant]
US 7937344B2 · Baum et al. · 2011 [cited by applicant]
US 8112425B2 · Baum et al. · 2012 [cited by applicant]
US 8140563B2 · Midgley · 2012 [cited by applicant]
US 8150815B2 · Vian et al. · 2012 [cited by applicant]
US 8150960B2 · Kumbalimutt · 2012 [cited by applicant]
US 8166071B1 · Korablev · 2012 [cited by examiner]
US 8296412B2 · Secor et al. · 2012 [cited by applicant]
US 8364709B1 · Das et al. · 2013 [cited by applicant]
US 8412696B2 · Zhang et al. · 2013 [cited by applicant]
US 8473250B2 · Adest et al. · 2013 [cited by applicant]
US 8473520B1 · Tsang et al. · 2013 [cited by applicant]
US 8484208B1 · Raghavan et al. · 2013 [cited by applicant]
US 8515963B1 · Blank, Jr. et al. · 2013 [cited by applicant]
US 8516008B1 · Marquardt et al. · 2013 [cited by applicant]
US 8577911B1 · Stepinski et al. · 2013 [cited by applicant]
US 8583631B1 · Ganapathi et al. · 2013 [cited by applicant]
US 8707194B1 · Jenkins et al. · 2014 [cited by applicant]
US 8712993B1 · Ordonez · 2014 [cited by applicant]
US 8751529B2 · Zhang et al. · 2014 [cited by applicant]
US 8752014B2 · Harmon · 2014 [cited by applicant]
US 8788525B2 · Neels et al. · 2014 [cited by applicant]
US 9002873B1 · King · 2015 [cited by applicant]
US 9152929B2 · Carasso et al. · 2015 [cited by applicant]
US 9218615B2 · Wan et al. · 2015 [cited by applicant]
US 9286413B1 · Coates et al. · 2016 [cited by applicant]
US 9437022B2 · Vander Broek · 2016 [cited by applicant]
US 9507848B1 · Li et al. · 2016 [cited by applicant]
US 9641334B2 · Faitelson · 2017 [cited by examiner]
US 10127258B2 · Lamas et al. · 2018 [cited by applicant]
US 10282350B1 · Pathak · 2019 [cited by applicant]
US 20020049713A1 · Khemlani et al. · 2002 [cited by applicant]
US 20020194166A1 · Fowler · 2002 [cited by applicant]
US 20030100999A1 · Markowitz · 2003 [cited by applicant]
US 20030217043A1 · Weiss et al. · 2003 [cited by applicant]
US 20030220940A1 · Futoransky et al. · 2003 [cited by applicant]
US 20040010564A1 · Imaida et al. · 2004 [cited by applicant]
US 20040030741A1 · Wolton et al. · 2004 [cited by applicant]
US 20040186826A1 · Choi et al. · 2004 [cited by applicant]
US 20040186835A1 · Sakurai · 2004 [cited by applicant]
US 20040196308A1 · Blomquist · 2004 [cited by applicant]
US 20040221296A1 · Ogielski et al. · 2004 [cited by applicant]
US 20040236757A1 · Caccavale et al. · 2004 [cited by applicant]
US 20040254919A1 · Giuseppini · 2004 [cited by applicant]
US 20050015624A1 · Ginter et al. · 2005 [cited by applicant]
US 20050027845A1 · Secor et al. · 2005 [cited by applicant]
US 20050044065A1 · McArdle · 2005 [cited by applicant]
US 20050066027A1 · Hakiel et al. · 2005 [cited by applicant]
US 20050086187A1 · Grosser et al. · 2005 [cited by applicant]
US 20050091198A1 · Dettinger et al. · 2005 [cited by applicant]
US 20050172261A1 · Yuknewicz et al. · 2005 [cited by applicant]
US 20050198247A1 · Perry et al. · 2005 [cited by applicant]
US 20060028470A1 · Bennett et al. · 2006 [cited by applicant]
US 20060069635A1 · Ram et al. · 2006 [cited by applicant]
US 20060100974A1 · Dieberger et al. · 2006 [cited by applicant]
US 20060129554A1 · Suyama et al. · 2006 [cited by applicant]
US 20060129914A1 · Ellis et al. · 2006 [cited by applicant]
US 20060184529A1 · Berg et al. · 2006 [cited by applicant]
US 20060221184A1 · Vallone et al. · 2006 [cited by applicant]
US 20070022125A1 · Salam · 2007 [cited by examiner]
US 20070078872A1 · Cohen · 2007 [cited by applicant]
US 20070088723A1 · Fish · 2007 [cited by examiner]
US 20070100878A1 · Fielding et al. · 2007 [cited by applicant]
US 20070118642A1 · Kumbalimutt · 2007 [cited by applicant]
US 20070130585A1 · Perret et al. · 2007 [cited by applicant]
US 20070174188A1 · Fish · 2007 [cited by examiner]
US 20070214164A1 · MacLennan et al. · 2007 [cited by applicant]
US 20070280123A1 · Atkins et al. · 2007 [cited by applicant]
US 20080071580A1 · Marcus et al. · 2008 [cited by applicant]
US 20080086363A1 · Kass et al. · 2008 [cited by applicant]
US 20080091466A1 · Butler et al. · 2008 [cited by applicant]
US 20080104542A1 · Cohen et al. · 2008 [cited by applicant]
US 20080147578A1 · Leffingwell et al. · 2008 [cited by applicant]
US 20080195649A1 · Lefebvre · 2008 [cited by examiner]
US 20080228442A1 · Lippincott et al. · 2008 [cited by applicant]
US 20080270369A1 · Myerson et al. · 2008 [cited by applicant]
US 20090063472A1 · Pell et al. · 2009 [cited by applicant]
US 20090063473A1 · Van Den Berg et al. · 2009 [cited by applicant]
US 20090192985A1 · Bolls et al. · 2009 [cited by applicant]
US 20090299998A1 · Kim · 2009 [cited by applicant]
US 20090319498A1 · Zabokritski et al. · 2009 [cited by applicant]
US 20090327240A1 · Meehan · 2009 [cited by examiner]
US 20100030888A1 · Nawabzada et al. · 2010 [cited by applicant]
US 20100049692A1 · Astito · 2010 [cited by examiner]
US 20100062796A1 · Tayton et al. · 2010 [cited by applicant]
US 20100114885A1 · Bowers et al. · 2010 [cited by applicant]
US 20100122194A1 · Rogers · 2010 [cited by applicant]
US 20100162140A1 · Fereira et al. · 2010 [cited by applicant]
US 20100205521A1 · Folting · 2010 [cited by applicant]
US 20100228752A1 · Folting et al. · 2010 [cited by applicant]
US 20100313127A1 · Gosper et al. · 2010 [cited by applicant]
US 20100325118A1 · Takemoto · 2010 [cited by applicant]
US 20110032260A1 · Duggan et al. · 2011 [cited by applicant]
US 20110066585A1 · Subrahmanyam et al. · 2011 [cited by applicant]
US 20110083167A1 · Carpenter et al. · 2011 [cited by applicant]
US 20110099500A1 · Smith et al. · 2011 [cited by applicant]
US 20110145786A1 · Fayed et al. · 2011 [cited by applicant]
US 20110167058A1 · van Os · 2011 [cited by applicant]
US 20110251992A1 · Bethlehem et al. · 2011 [cited by applicant]
US 20110314148A1 · Petersen et al. · 2011 [cited by applicant]
US 20120005044A1 · Coleman · 2012 [cited by examiner]
US 20120011474A1 · Kashik et al. · 2012 [cited by applicant]
US 20120047025A1 · Strohman · 2012 [cited by applicant]
US 20120102396A1 · Arksey et al. · 2012 [cited by applicant]
US 20120124072A1 · Vaidyanathan et al. · 2012 [cited by applicant]
US 20120173752A1 · Erskins · 2012 [cited by applicant]
US 20120173985A1 · Peppel · 2012 [cited by applicant]
US 20120197934A1 · Zhang et al. · 2012 [cited by applicant]
US 20120246303A1 · Petersen et al. · 2012 [cited by applicant]
US 20120265727A1 · Naryzhnyy et al. · 2012 [cited by applicant]
US 20120265805A1 · Samdadiya et al. · 2012 [cited by applicant]
US 20130073573A1 · Huang et al. · 2013 [cited by applicant]
US 20130086587A1 · Naik et al. · 2013 [cited by applicant]
US 20130151491A1 · Gislason · 2013 [cited by applicant]
US 20130151563A1 · Addepalli et al. · 2013 [cited by applicant]
US 20130173398A1 · Wang et al. · 2013 [cited by applicant]
US 20130179460A1 · Acuña et al. · 2013 [cited by applicant]
US 20130179793A1 · Duggan et al. · 2013 [cited by applicant]
US 20130191371A1 · Poznanski et al. · 2013 [cited by applicant]
US 20130212125A1 · Wierenga et al. · 2013 [cited by applicant]
US 20130238968A1 · Barrus · 2013 [cited by applicant]
US 20130283168A1 · Brown et al. · 2013 [cited by applicant]
US 20130305183A1 · Kumagai et al. · 2013 [cited by applicant]
US 20130326620A1 · Merza et al. · 2013 [cited by applicant]
US 20140006871A1 · Lakshmanan et al. · 2014 [cited by applicant]
US 20140032694A1 · Cohn et al. · 2014 [cited by applicant]
US 20140053070A1 · Powers et al. · 2014 [cited by applicant]
US 20140108437A1 · Brown et al. · 2014 [cited by applicant]
US 20140149393A1 · Bhatt et al. · 2014 [cited by applicant]
US 20140149592A1 · Krishna · 2014 [cited by applicant]
US 20140160238A1 · Yim et al. · 2014 [cited by applicant]
US 20140222641A1 · Køber et al. · 2014 [cited by applicant]
US 20140222750A1 · Uchiumi et al. · 2014 [cited by applicant]
US 20140244625A1 · Seghezzi et al. · 2014 [cited by applicant]
US 20140297666A1 · Morris · 2014 [cited by applicant]
US 20140310649A1 · Bernstein et al. · 2014 [cited by applicant]
US 20140324862A1 · Bingham et al. · 2014 [cited by applicant]
US 20140344249A1 · Magistrado · 2014 [cited by examiner]
US 20140344622A1 · Huang et al. · 2014 [cited by applicant]
US 20150058318A1 · Blackwell et al. · 2015 [cited by applicant]
US 20150109305A1 · Black · 2015 [cited by applicant]
US 20150213631A1 · Vander Broek · 2015 [cited by applicant]
US 20150254138A1 · Anderson et al. · 2015 [cited by applicant]
US 20150294256A1 · Mahesh et al. · 2015 [cited by applicant]
US 20150339405A1 · Vora et al. · 2015 [cited by applicant]
US 20160004736A1 · Tsuchida · 2016 [cited by examiner]
US 20160004741A1 · Johnson · 2016 [cited by examiner]
US 20160012111A1 · Pattabhiraman et al. · 2016 [cited by applicant]
US 20160125120A1 · Yu et al. · 2016 [cited by applicant]
US 20160155254A1 · Briscoe · 2016 [cited by applicant]
US 20160188744A1 · Ito et al. · 2016 [cited by applicant]
US 20160335303A1 · Madhalam et al. · 2016 [cited by applicant]
US 20170032550A1 · Vander Broek · 2017 [cited by applicant]
US 20170039229A1 · Verma · 2017 [cited by applicant]
US 20170364506A1 · Stern · 2017 [cited by examiner]
US 20170364534A1 · Zhang et al. · 2017 [cited by applicant]
US 20180025050A1 · Yadav et al. · 2018 [cited by applicant]
US 20180046643A1 · Brodt et al. · 2018 [cited by applicant]
US 20190004493A1 · Kawanoue · 2019 [cited by applicant]
US 20190034502A1 · Onoda · 2019 [cited by applicant]
US 20190098106A1 · Mungel et al. · 2019 [cited by applicant]
US 20190155802A1 · Miller · 2019 [cited by examiner]
US 20190188302A1 · Milby et al. · 2019 [cited by applicant]
US 20190266273A1 · Karlapudi et al. · 2019 [cited by applicant]
US 20190385014A1 · Malak et al. · 2019 [cited by applicant]
US 20200097534A1 · Von Tish · 2020 [cited by examiner]
US 20220141188A1 · Apger et al. · 2022 [cited by applicant]
US 20220334557A1 · Maturana · 2022 [cited by examiner]
US 20230129123A1 · Wang · 2023 [cited by applicant]
US 20230150529A1 · Stenson et al. · 2023 [cited by applicant]
JP 200699477A · 2006 [cited by applicant]
Bitincka, L., et al., “Optimizing Data Analysis With a Semi-Structured Time Series Database,” pp. 1-9 (2010). [cited by applicant]
Bumgarner, Vincent, “Implementing Splunk: Big Data Reporting and Development for Operational Intelligence,” Retrieved from Internet URL: http://2.droppdf.com/files/ug81f/implementing-splunk.pdf, 448 pages (Jan. 2013). [cited by applicant]
Carasso, D., “Exploring Splunk Search Processing Language (SPL) Primer and Cookbook”, CITO Research, pp. 1-156 (2012). [cited by applicant]
Citation of Link to Video Available Online: Wrangling Big Data from the CPG Industry with Cloudera & Trifacta, Published Oct. 20, 2014, Available at: https://www.youtube.com/watch?v=WuBjZzq8bWw, pp. 2, Last Accessed (De… [cited by applicant]
Citation of Link to Application Available Online: Data Wrangler Application, Available at: http://vis.stanford.edu/wrangler/app, Copyright 2011-2013 Stanford Visualization Group, pp. 3, Last accessed (Dec. 15, 2015). [cited by applicant]
“Display query system event subset—Bing,” Retrieved from Internet URL: http://www.bing.com/search?q=display%20query%20system%20event20subset&qs=n&f. . . , p. 1 (Apr. 4, 2016). [cited by applicant]
“Field Extractor App-SPLUNK,” Retrieved from Internet URL: https://www.youtube.com/watch?v=Gfi9Cm9v64Y video; dated Jul. 12, 2013, pp. 3 (Jan. 21, 2016). [cited by applicant]
“Splunk Cloud 8.0.2004 User Manual”, available online, retrieved on May 20, 2020 from docs.splunk.com, pp. 66. [cited by applicant]
Splunk Enterprise Security User Manual 2.0, https://web.archive.org/web/20120712034303/http://docs.splunk.com/Documentaiton/ES/latest/User/Incident Reviewdashboard; dated Jul. 12, 2012; last accessed Oct. 14, 2016 to sh… [cited by applicant]
“Splunk Enterprise 8.0.0 Overview”, available online, retrieved on May 20, 2020 from docs.splunk.com, pp. 17. [cited by applicant]
“Splunk Quick Reference Guide”, updated 2019, available online at https://www.splunk.com/pdfs/solution-guides/splunk-quick-reference-guide.pdf, retrieved on May 20, 2020, pp. 6. [cited by applicant]