公开(公告)号：US11500783B1

公开(公告)日：2022-11-15

申请号：US17382043

申请日：2021-07-21

Applicant: Splunk Inc.

Inventor： Bharath Aleti ,  Alexandros Batsakis ,  Paul J. Lucas ,  Igor Stojanovski

IPC: G06F12/121 ,  G06F16/22 ,  G06F16/2455

Abstract: Systems and methods are disclosed for making space available in a local storage of a data intake and query system. A cache manager of the data intake and query system may determine an amount of storage space of a local data store that is available for use to perform a query. The cache manager may then use one or more eviction policies associated with content stored at the local data store to purge content items to evict from the local storage. The system may then retrieve content for performing the query from a remote storage and store the retrieved content at the local storage.

公开(公告)号：US20210049150A1

公开(公告)日：2021-02-18

申请号：US17084965

申请日：2020-10-30

Applicant: Splunk Inc.

Inventor： Amritpal Singh Bath ,  Yuan Xu, Jr. ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US11809405B2

公开(公告)日：2023-11-07

申请号：US17084965

申请日：2020-10-30

Applicant: Splunk Inc.

Inventor： Amritpal Singh Bath ,  Yuan Xu ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/00 ,  G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

CPC classification number: G06F16/2365 ,  G06F16/2255 ,  G06F16/2465 ,  G06F16/27 ,  G06F16/951

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US11074196B1

公开(公告)日：2021-07-27

申请号：US16147103

申请日：2018-09-28

Applicant: Splunk Inc.

Inventor： Bharath Aleti ,  Alexandras Batsakis ,  Paul J. Lucas ,  Igor Stojanovski

IPC: G06F12/121 ,  G06F16/22 ,  G06F16/2455

Abstract: Systems and methods are disclosed for making space available in a local storage of a data intake and query system. A cache manager of the data intake and query system may determine an amount of storage space of a local data store that is available for use to perform a query. The cache manager may then use one or more eviction policies associated with content stored at the local data store to purge content items to evict from the local storage. The system may then retrieve content for performing the query from a remote storage and store the retrieved content at the local storage.

公开(公告)号：US10891284B2

公开(公告)日：2021-01-12

申请号：US15582458

申请日：2017-04-28

Applicant: SPLUNK INC.

Inventor： Amritpal Singh Bath ,  Yuan Xu, Jr. ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/00 ,  G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US20180314726A1

公开(公告)日：2018-11-01

申请号：US15582458

申请日：2017-04-28

Applicant: SPLUNK INC.

Inventor： Amritpal Singh Bath ,  Yuan Xu, JR. ,  Bharath Aleti ,  Manu Jose

IPC: G06F17/30

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US11768776B1

公开(公告)日：2023-09-26

申请号：US18045421

申请日：2022-10-10

Applicant: Splunk Inc.

Inventor： Bharath Aleti ,  Alexandros Batsakis ,  Paul J. Lucas ,  Igor Stojanovski

IPC: G06F12/121 ,  G06F16/22 ,  G06F16/2455

CPC classification number: G06F12/121 ,  G06F16/2282 ,  G06F16/24553 ,  G06F2212/1044

Abstract: Systems and methods are disclosed for making space available in a local storage of a data intake and query system. A cache manager of the data intake and query system may determine an amount of storage space of a local data store that is available for use to perform a query. The cache manager may then use one or more eviction policies associated with content stored at the local data store to purge content items to evict from the local storage. The system may then retrieve content for performing the query from a remote storage and store the retrieved content at the local storage.

公开(公告)号：US10956278B2

公开(公告)日：2021-03-23

申请号：US15582441

申请日：2017-04-28

Applicant: SPLUNK INC.

Inventor： Ankit Jain ,  Manu Jose, Jr. ,  Bharath Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC: G06F16/00 ,  G06F11/14 ,  G06F16/21 ,  G06F11/34 ,  H04L12/26 ,  H04L12/24 ,  G06F11/30 ,  G06F16/27

Abstract: Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.

公开(公告)号：US20180314601A1

公开(公告)日：2018-11-01

申请号：US15582441

申请日：2017-04-28

Applicant: SPLUNK INC.

Inventor： Ankit Jain ,  Manu Jose, JR. ,  Bharath Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC: G06F11/14 ,  G06F17/30

Abstract: Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.