Invention Application
- Patent Title: PIPELINED SEARCH QUERY, LEVERAGING REFERENCE VALUES OF AN INVERTED INDEX TO ACCESS A SET OF EVENT DATA AND PERFORMING FURTHER QUERIES ON ASSOCIATED RAW DATA
-
Application No.: US17876404Application Date: 2022-07-28
-
Publication No.: US20220365932A1Publication Date: 2022-11-17
- Inventor: David Ryan Marquardt , Karthikeyan Sabhanatarajan , Steve Yu Zhang
- Applicant: Splunk Inc.
- Applicant Address: US CA San Francisco
- Assignee: Splunk Inc.
- Current Assignee: Splunk Inc.
- Current Assignee Address: US CA San Francisco
- Main IPC: G06F16/2453
- IPC: G06F16/2453 ; G06F16/2458 ; G06F16/22

Abstract:
Embodiments of the present disclosure provide techniques for using an inverted index in a pipelined search query. A field searchable data store is provided that comprises a plurality of event records, each event record comprising a time-stamped portion of raw machine data. Responsive to the reciept of an incoming search query, the search engine accesses an inverted index, wherein each entry in the inverted index comprises at least one field name, a corresponding at least one field value and a reference value associated with each field name and value pair that identifies a location in the data store where an associated event record is stored. Once the inverted index is accessed, it can be used to identify and search a subset of the plurality of event records, wherein the subset comprises one or more event records with corresponding reference values in the inverted index.
Public/Granted literature
Information query