公开(公告)号：US11789804B1

公开(公告)日：2023-10-17

申请号：US17589556

申请日：2022-01-31

Applicant: Splunk Inc.

Inventor： Gergely Danyi ,  Sakshi Garg ,  Maxime Petazzoni ,  Sahinaz Safari Sanjani ,  Timothy Matthew Robin Williamson ,  Eric Wohlstadter

IPC: G06F11/00 ,  G06F11/07

CPC classification number: G06F11/079 ,  G06F11/0751 ,  G06F11/0778

Abstract: A method of identifying a root cause of a failure for a trace within a microservices-based application includes determining if a root span of the trace is an error span resulting in an error experienced by a user at a front end of the microservices-based application. If the root span of the trace is an error span, the method analyzes a plurality of spans comprising the trace to determine if the trace comprises at least one leaf error span. If the trace comprises a single leaf error span, the method attributes the root cause of the failure in the trace to a service associated with the single leaf error span. If the trace comprises multiple leaf error spans the method attributes the root cause of the failure in the trace to a service associated with a leaf error span of the multiple leaf error spans comprising a latest starting timestamp.

公开(公告)号：US11782989B1

公开(公告)日：2023-10-10

申请号：US17670773

申请日：2022-02-14

Applicant: SPLUNK Inc.

Inventor： Brian Bingham ,  Tristan Fletcher ,  Alok Anant Bhide

IPC: G06F16/9038 ,  G06F16/901 ,  G06F16/9032 ,  G06F16/903 ,  G06F16/2458 ,  G06F16/26 ,  G06F3/0488 ,  G06F3/0482 ,  G06F9/455 ,  G06F11/32 ,  G06F11/34

CPC classification number: G06F16/9038 ,  G06F3/0482 ,  G06F3/0488 ,  G06F9/45533 ,  G06F11/323 ,  G06F16/2471 ,  G06F16/26 ,  G06F16/9017 ,  G06F16/90328 ,  G06F16/90335 ,  G06F11/3409 ,  G06F2201/815

Abstract: The disclosed system and method acquire and store performance measurements relating to performance of a component in an information technology (IT) environment and log data produced by the IT environment, in association with corresponding time stamps. The disclosed system and method correlate at least one of the performance measurements with at least one of the portions of log data.

公开(公告)号：US11782920B1

公开(公告)日：2023-10-10

申请号：US17163118

申请日：2021-01-29

Applicant: Splunk Inc.

Inventor： Phil Yonghui Wang ,  Steve Zhang

IPC: G06F16/24 ,  G06F16/245 ,  G06F16/2453 ,  G06F16/2458

CPC classification number: G06F16/24535 ,  G06F16/2477 ,  G06F16/24542

Abstract: A data intake and query system executes a search query at a first execution time for querying events having associated time stamps within a first time period characterized by a first start time and a first end time. The first start time is computed based upon a time indicated by reference time information stored prior to execution of the search query. The system determines whether execution of the search query completed successfully based upon a first search result obtained from executing the search query. If the first execution of the search query was not successful, the system computes for a second execution of the search query after the first execution, a second time period using the reference time information. The second execution is configured to query events with associated timestamps that fall within a second time period that includes the first time period and an additional time period.

公开(公告)号：US11777945B1

公开(公告)日：2023-10-03

申请号：US17586086

申请日：2022-01-27

Applicant: SPLUNK Inc.

Inventor： George Apostolopoulos ,  Ignacio Nicolas Bermudez Corrales

IPC: G06N20/00 ,  G06N7/00 ,  H04L9/40 ,  G06F16/28

CPC classification number: H04L63/102 ,  G06F16/288 ,  G06N7/00 ,  G06N20/00 ,  H04L63/1425

Abstract: Embodiments of the present invention are directed to facilitating detection of suspicious access to resources. In accordance with aspects of the present disclosure, an access graph is generated. The access graph contains access data that includes observed accesses between entities and resources. Access scores can be determined for entity-resource pairs in the access graph by applying a set of access rules to the entity-resource pairs in the access graph. The access scores indicate an extent of relatedness between the corresponding entity and resource. Thereafter, the access scores can be used to train a probabilistic prediction model that predicts suspiciousness of accesses between entities and resources.

公开(公告)号：US11768836B2

公开(公告)日：2023-09-26

申请号：US16582205

申请日：2019-09-25

Applicant: Splunk Inc.

Inventor： Arun Ramani ,  Anupadmaja Raghavan ,  Tristan Antonio Fletcher ,  Marc Chene

IPC: G06F15/16 ,  G06F16/2457 ,  G06Q10/00

CPC classification number: G06F16/24573 ,  G06Q10/00

Abstract: A service monitoring system (SMS) produces key performance indicator (KPI) scores that indicate the performance of a service. To produce the KPI scores, the SMS may process the data for a large number of machine entities that perform the service. This data can be processed on a per-entity basis to produce a per-entity KPI score representing the contribution of a particular machine to the overall KPI. The per-entity KPI scores can be transformed to statistical representations which can be visualized as a distribution stream graph. The visualization may be presented with interactive aspects. Automatic entity definitions may also be generated based on content derived from the processed data.

公开(公告)号：US11768776B1

公开(公告)日：2023-09-26

申请号：US18045421

申请日：2022-10-10

Applicant: Splunk Inc.

Inventor： Bharath Aleti ,  Alexandros Batsakis ,  Paul J. Lucas ,  Igor Stojanovski

IPC: G06F12/121 ,  G06F16/22 ,  G06F16/2455

CPC classification number: G06F12/121 ,  G06F16/2282 ,  G06F16/24553 ,  G06F2212/1044

Abstract: Systems and methods are disclosed for making space available in a local storage of a data intake and query system. A cache manager of the data intake and query system may determine an amount of storage space of a local data store that is available for use to perform a query. The cache manager may then use one or more eviction policies associated with content stored at the local data store to purge content items to evict from the local storage. The system may then retrieve content for performing the query from a remote storage and store the retrieved content at the local storage.

公开(公告)号：US11762442B1

公开(公告)日：2023-09-19

申请号：US16945723

申请日：2020-07-31

Applicant: SPLUNK INC.

Inventor： Matteo Merli ,  Karthikeyan Ramasamy ,  Ram Sriharsha

IPC: G06F1/26 ,  G06F1/3296 ,  G06N20/00 ,  H04L67/12

CPC classification number: G06F1/266 ,  G06F1/3296 ,  G06N20/00 ,  H04L67/12

Abstract: Various implementations of the present application set forth a computer-implemented method comprising obtaining, by a low-power hub device, a first set of data published by an edge device, where the low-power hub device subscribes to at least a subset of data published by the edge device, generating, by the low-power hub device, a second set of data from the first set of data by inputting the first set of data into a machine learning (ML) model executing on the low-power hub device, and transmitting the second set of data to a remote server computer system.

公开(公告)号：US11755453B1

公开(公告)日：2023-09-12

申请号：US17973394

申请日：2022-10-25

Applicant: SPLUNK Inc.

Inventor： Tigran Najaryan ,  Aunsh Bharat Chaudhari ,  Morgan James McLean ,  Yiqing Pei

IPC: G06F9/44 ,  G06F11/34

CPC classification number: G06F11/3495

Abstract: In response to receiving a selection of an option to discover uninstrumented entities within a monitored environment, information retrieved from monitoring agents currently installed on instrumented entities within a system is analyzed to discover additional entities within the system that are connected to the instrumented entities. Each of these discovered entities is analyzed to determine whether a monitoring agent is able to be installed within the entity; if installation is possible, such installation is automatically performed (or a guided manual installation is implemented utilizing an interface). After a monitoring agent is installed within a discovered entity, information is retrieved from that monitoring agent may be used to discover additional entities within the system that are connected to that discovered entity. In this way, an iterative discovery of all entities within a system may be performed. Results of this iterative discovery may be presented via an interface.

公开(公告)号：US20230273936A1

公开(公告)日：2023-08-31

申请号：US18313240

申请日：2023-05-05

Applicant: SPLUNK INC.

Inventor： Da XU ,  Sundar VASAN ,  Dhruva Kumar BHAGI

IPC: G06F16/27 ,  G06F16/22 ,  G06F11/30 ,  G06F11/20 ,  G06F11/34 ,  H04L67/1097 ,  G06F11/32

CPC classification number: G06F16/27 ,  G06F16/2272 ,  G06F11/3006 ,  G06F11/2094 ,  G06F11/3476 ,  H04L67/1097 ,  G06F11/3409 ,  G06F11/32 ,  G06F11/3072 ,  G06F3/0617

Abstract: A method for performing disaster recovery in a clustered environment comprises identifying, at a master device, a first indexer from a set of indexers to serve as a primary indexer for responding to queries pertaining to a subset of data. The method also comprises assigning, at the master device, a generation identifier indicating that the first indexer is the primary indexer for the subset of data. Responsive to an event prompting a change in a primary indexer designation for the subset of data, the method comprises identifying, at the master device, a second indexer from the set of indexers to serve as the primary indexer for responding to queries pertaining to the subset of data. Further, the method comprises assigning, at the master device, a new generation identifier indicating that the second indexer is the primary indexer for the subset of data.

公开(公告)号：USD997188S1

公开(公告)日：2023-08-29

申请号：US29812102

申请日：2021-10-19

Applicant: SPLUNK Inc.

Designer： Jindrich Dinga ,  Jacob Sebastian Stark ,  Mudit Mittal ,  Clark E Mullen

Abstract: The sole FIGURE is a front view of a display screen or portion thereof having a graphical user interface showing my new design.
The outermost broken-line rectangle depicts the perimeter of a display screen or portion thereof having a graphical user interface and forms no part of the claimed design. The remaining broken lines depict portions of a graphical user interface and form no part of the claimed design.