Field Value Search Drill Down

摘要

In embodiments of field value search drill down, a search system exposes a search interface that displays one or more events returned as a search result set. A field-value pair can be emphasized in the field-value pairs of an event displayed in the search interface, and a menu is displayed with search options that are selectable to operate on the emphasized field-value pair of the event. The menu includes the search options to add search criteria of the emphasized field-value pair to a search command in a search bar of the search interface, exclude the search criteria of the emphasized field-value pair from a search, or create a new data search based on the emphasized field-value pair. A selection of one of the search options in the menu can be received, and the search command in the search bar is updated based on the search option that is selected.

主权项

1. A method, comprising:
executing a search system on one or more computing devices to perform:
causing emphasis of a field-value pair in an event displayed in a search interface;causing display of a menu of search options that are selectable to operate on the emphasized field-value pair of the event;receiving a selection of one of the search options displayed in the menu; andupdating a search command in a search bar of the search interface based on the search option that is selected from the menu for the emphasized field-value pair.