Splunk Inc.
Recommending query templates during query formation

Abstract:

Systems and methods are disclosed for recommending query templates to a user. The system can identify a token query parameter from a portion of a query entered in a user interface, and use the token to identify a query template from a group of query templates. In some cases, some of the query templates can correspond to other queries associated with users of different tenants and can be generated by replacing user query parameters with placeholders. The system can identify query parameters for the placeholders and cause a user interface to display the query template with the query parameters in place of the placeholders.