Object Score Adjustment Based on Analyzing Machine Data

摘要

Systems and methods for assigning scores to objects based on evaluating triggering conditions applied to datasets produced by search queries in data aggregation and analysis systems. An example method may comprise: executing, by one or more processing devices, a search query to produce a dataset comprising one or more data items derived from source data; and responsive to determining that at least a portion of the dataset satisfies a triggering condition, modifying a score assigned to an object to which the portion of the dataset pertains.

主权项

1. A method comprising:
executing, by a computer system, a search query against a set of events, each of the events including time-stamped machine data indicative of performance or operation of an information technology environment; determining, by the computer system, whether at least a portion of a result of the search query satisfies a triggering condition; in response to a determination that at least a portion of the result of the search query satisfies the triggering condition,
identifying, by the computer system, an object that has a predefined association with the search query, for score adjustment, andadjusting a score of the object, by the computer system; and causing an output, by the computer system, of the score of the object or an indication of an adjustment of the score of the object.