利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

2140 条记录 (耗时 0.033 秒)

    Supporting graph data structure transformations in graphs generated from a query to event data
    111.
    发明授权
    Supporting graph data structure transformations in graphs generated from a query to event data 有权

    公开(公告)号：US11625394B1

    公开(公告)日：2023-04-11

    申请号：US17653626

    申请日：2022-03-04

    申请人： Splunk Inc.

    发明人： Chandrashekar Basavaiah ,  Elizabeth Li ,  Eric Tschetter ,  Joshua Walters

    IPC分类号： G06F9/44 ,  G06F16/2452 ,  G06F16/21 ,  G06F8/77

    摘要： Systems and methods are disclosed for supporting transformations of a graph generated from a query to event data. The event data may be unstructured event data, from which instances of a journey can be identified that represent sequences of related events describing actions performed in a computing environment. When evaluating journey instances, it can be helpful to visualize the instances as a graph. Depending on the instances viewed, a user may desire different modifications to the graph. While such modifications can be made when initially building instances from the unstructured event data, this can limit reuse of the resulting instances (since the modification would also be present when evaluating other subsets). To address this, embodiments of the present disclosure enable graph modifications to be applied to subsets of journey instances after building those instances from unstructured event data, increasing reuse of instances built from a query against the unstructured data.

    Identifying threat indicators by processing multiple anomalies
    114.
    发明授权
    Identifying threat indicators by processing multiple anomalies 有权

    公开(公告)号：US11606379B1

    公开(公告)日：2023-03-14

    申请号：US17236890

    申请日：2021-04-21

    申请人： Splunk Inc.

    发明人： Robert Winslow Pratt ,  Ravi Prasad Bulusu

    IPC分类号： H04L29/06 ,  H04L29/08 ,  H04L9/14 ,  H04L9/40 ,  G06N20/00

    摘要： Techniques are described for processing anomalies detected using user-specified rules with anomalies detected using machine-learning based behavioral analysis models to identify threat indicators and security threats to a computer network. In an embodiment, anomalies are detected based on processing event data at a network security system that used rules-based anomaly detection. These rules-based detected anomalies are acquired by a network security system that uses machine-learning based anomaly detection. The rules-based detected anomalies are processed along with machine learning detected anomalies to detect threat indicators or security threats to the computer network. The threat indicators and security threats are output as alerts to the network security system that used rules-based anomaly detection.

    Expediting processing of selected events on a time-limited basis
    116.
    发明授权
    Expediting processing of selected events on a time-limited basis 有权

    公开(公告)号：US11593477B1

    公开(公告)日：2023-02-28

    申请号：US16779465

    申请日：2020-01-31

    申请人： Splunk Inc.

    发明人： Vadan Thimmegowda ,  Sourabh Satish ,  Tejas Wanjari

    IPC分类号： G06F21/55 ,  G06F21/57 ,  G06F16/245 ,  G06F9/48 ,  G06F16/25 ,  G06F21/71

    摘要： Techniques are described that enable an IT and security operations application to prioritize the processing of selected events for a defined period of time. Data is obtained reflecting activity within an IT environment, wherein the data includes a plurality of events each representing an occurrence of activity within the IT environment. A severity level is assigned to each event of the plurality of events, where the events are processed by the IT and security operations application in an order that is based at least in part on the severity level assigned to each event. Input is received identifying at least one event of the plurality of events for expedited processing to obtain a set of expedited events, and the identified events are processed by the IT and security operations application before processing events that are not in the set of expedited events.

    Bucket data distribution for exporting data to worker nodes
    117.
    发明授权
    Bucket data distribution for exporting data to worker nodes 有权

    公开(公告)号：US11580107B2

    公开(公告)日：2023-02-14

    申请号：US16398038

    申请日：2019-04-29

    申请人： Splunk Inc.

    发明人： Sourav Pal ,  Arindam Bhattacharjee ,  Asha Andrade ,  Nikhil Roy

    IPC分类号： G06F16/00 ,  G06F16/2455 ,  G06F9/50 ,  G06F16/22

    摘要： Systems and methods are described for exporting bucket data from one or more buckets to one or more worker nodes. The system can identify data from different bucket data from buckets stored in a data intake and query system that is to be processed by one or more worker nodes. The system can allocate one or more execution resources, such as a processing pipeline, to process and export the bucket data from the buckets. The system can assign bucket data corresponding to individual buckets to the execution resource based on a bucket distribution policy. The indexer can export the bucket data to the worker nodes for further processing based on the bucket data-execution resource assignment.

    Automated generation of display layouts
    118.
    发明授权
    Automated generation of display layouts 有权

    公开(公告)号：US11574429B1

    公开(公告)日：2023-02-07

    申请号：US16399990

    申请日：2019-04-30

    申请人： SPLUNK INC.

    发明人： Simon Tam ,  Everett Yip

    IPC分类号： G06F40/103 ,  G06T11/60 ,  G06T3/40 ,  G06F9/451 ,  G06T3/20 ,  G06F40/106 ,  G06F40/197

    摘要： A client device executes a display layout application that receives a size of each display item included in a set of display items. The set of display items is associated with a first frame included in a bounding box associated with a display screen. The display layout application determines a reference size based on the sizes of the set of display items. The display layout application determines a size of the first frame based on the reference size. The display layout application determines a position for a first display item included in the set of display items based on a position of the first frame within the bounding box. The display layout application generates a layout for display on the display screen, where the layout includes the first display item.

    Search and data analysis collaboration system
    119.
    发明授权
    Search and data analysis collaboration system 有权

    公开(公告)号：US11573971B1

    公开(公告)日：2023-02-07

    申请号：US16148890

    申请日：2018-10-01

    申请人： Splunk Inc.

    发明人： Finlay Cannon ,  Nicholas John Filippi ,  Bradford H. Lovering ,  Hema Krishnamurthy Mohan ,  Tram Theresa Vu

    IPC分类号： G06F16/00 ,  G06F7/00 ,  G06F16/248 ,  G06F16/25 ,  G06F16/2455

    摘要： A search and data analysis collaboration system is described. The search and data analysis collaboration system enables users to search for and process stored data, and further includes a home page component that can help guide users embarking on data analyses; a discovery component that enables users to discover what data is available for search and analysis; a search component that enables users to efficiently search accessible data and to iterate on search queries and corresponding results; a workbooks component that enables users to create aggregated collections of data analysis artifacts; and an actions component that enables users to configure various actions to be performed in response to analyses.