OPTIMIZED COMMON INFORMATION MODEL

摘要

Technologies are disclosed for providing a common information model. Features include: detecting a scheduled time for a key performance indicator reflecting how a service provided by one or more entities is performing, entity definition information recording the association between the entities and its machine data, service definition information associating the entities that provide the service, and the KPI being defined by a search query, including a field identifier specified in a data model, the KPI derives a value from the machine data; performing the query in response to said detecting, including: associating values in the machine data having disparate field names in accordance with disparate schemas with the field identifier specified in the data model, and processing the associated values as semantically equivalent data instances. In doing so, values having the same semantic (or related semantics) can be used together despite being associated with disparate field names from disparate schemas.

主权项

1. A method comprising:
detecting a scheduled time for a key performance indicator (KPI) reflecting how a service provided by one or more entities is performing, stored entity definition information recording the association between each of the entities and its associated machine data, stored service definition information associating the entities that provide the service, and the KPI being defined by a search query, including a field identifier specified in a data model, the KPI derives a value from the associated machine data; performing the search query in response to said detecting, including
associating values in the machine data having disparate field names in accordance with disparate schemas with the field identifier specified in the data model, andprocessing the associated values as semantically equivalent data instances; wherein the method is performed by a computer system comprising one or more processors coupled to a memory having the service and entity definition information.