Invention Application
- Patent Title: Generating and Storing Summarization Tables for Sets of Searchable Events
- Patent Title (中): 生成和存储可搜索事件集合的汇总表
-
Application No.: US14815973Application Date: 2015-08-01
-
Publication No.: US20160004750A1Publication Date: 2016-01-07
- Inventor: David Ryan Marquardt , Stephen Phillip Sorkin , Steve Yu Zhang
- Applicant: Splunk Inc.
- Main IPC: G06F17/30
- IPC: G06F17/30

Abstract:
Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.
Public/Granted literature
- US09990386B2 Generating and storing summarization tables for sets of searchable events Public/Granted day:2018-06-05
Information query