-
131.发明申请公开(公告)号：US20170139962A1
公开(公告)日：2017-05-18
申请号：US15420985
申请日：2017-01-31
Applicant: Splunk Inc.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Rory Greene , Bradley Hall , Nicholas Christian Mealy , Brian Philip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Erik M. Swan
IPC: G06F17/30
CPC classification number: G06F16/2272 , G06F16/2228 , G06F16/2291 , G06F16/2322 , G06F16/24568 , G06F16/24575 , G06F16/24578 , G06F16/2477 , G06F16/248 , G06F16/951
Abstract: Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.
-
公开(公告)号：US09514175B2
公开(公告)日：2016-12-06
申请号：US15007176
申请日：2016-01-26
Applicant: Splunk Inc.
Inventor： Erik M. Swan , R. David Carasso , Robin Kumar Das , Rory Greene , Bradley Hall , Nicholas Christian Mealy , Brian Philip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Michael Joseph Baum
CPC classification number: G06F17/30336 , G06F17/30321 , G06F17/30342 , G06F17/30353 , G06F17/30516 , G06F17/30528 , G06F17/3053 , G06F17/30551 , G06F17/30554 , G06F17/30864
Abstract: Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.
Abstract translation: 根据本发明的方法和设备提供了基于搜索来组织，索引，搜索和呈现时间序列数据的能力。 时间序列数据是在一个或多个通常连续的流中发生的时间戳记录的序列，表示某种类型的活动。 在一个实施例中，时间序列数据被组织成具有归一化时间戳的离散事件，并且事件由时间和关键字索引。 完全或部分地基于搜索时计算的时间索引机制，关键字索引机制或统计索引，检索相关的事件信息。
-
133.发明申请IDENTIFYING SECURITY-RELATED EVENTS DERIVED FROM MACHINE DATA THAT MATCH A PARTICULAR PORTION OF MACHINE DATA 审中-公开识别与机器数据特定部分相匹配的机器数据获得的安全相关事件公开(公告)号：US20160255108A1
公开(公告)日：2016-09-01
申请号：US15011622
申请日：2016-01-31
Applicant: Splunk Inc.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Bradley Hall , Brian Philip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Erik M. Swan , Rory Greene , Nicholas Christian Mealy , Christina Frances Regina Noren
CPC classification number: G06F16/285 , G06F11/3476 , G06F16/2358 , G06F16/2455 , G06F16/24564 , G06F16/24573 , G06F16/2477 , G06F16/288 , G06F16/316 , G06F16/3331 , G06F16/35 , G06F17/2785 , G06F2216/03 , G06K9/6217 , H04L63/1425 , H04L63/20
Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Abstract translation: 与本发明一致的方法和设备提供组织和构建由各种信息处理环境生成的机器数据的理解的能力。 机器数据是信息处理系统（例如，活动日志，配置文件，消息，数据库记录）的产物，并且表示已经发生并以原始数据格式记录的特定事件的证据。 在一个实施例中，机器数据通过将机器数据组织到事件中并将事件链接在一起而变成机器数据网。
-
公开(公告)号：US20160246873A1
公开(公告)日：2016-08-25
申请号：US15143581
申请日：2016-04-30
Applicant: Splunk Inc.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Bradley Hall , Brian Philip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Erik M. Swan , Rory Greene , Nicholas Christian Mealy , Christina Frances Regina Noren
IPC: G06F17/30
CPC classification number: G06F17/30598 , G06F11/3476 , G06F17/2785 , G06F17/30368 , G06F17/30477 , G06F17/30507 , G06F17/30525 , G06F17/30551 , G06F17/30604 , G06F17/30619 , G06F17/30657 , G06F17/30705 , G06K9/6217 , H04L63/1425 , H04L63/20
Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Abstract translation: 与本发明一致的方法和设备提供组织和构建由各种信息处理环境生成的机器数据的理解的能力。 机器数据是信息处理系统（例如，活动日志，配置文件，消息，数据库记录）的产物，并且表示已经发生并以原始数据格式记录的特定事件的证据。 在一个实施例中，机器数据通过将机器数据组织到事件中并将事件链接在一起而变成机器数据网。
-
135.发明申请公开(公告)号：US20160154836A1
公开(公告)日：2016-06-02
申请号：US15008425
申请日：2016-01-27
Applicant: Splunk Inc.
Inventor： Erik M. Swan , R. David Carasso , Robin Kumar Das , Rory Greene , Bradley Hall , Nicholas Christian Mealy , Brian Philip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Michael Joseph Baum
IPC: G06F17/30
CPC classification number: G06F17/30336 , G06F17/30321 , G06F17/30342 , G06F17/30353 , G06F17/30516 , G06F17/30528 , G06F17/3053 , G06F17/30551 , G06F17/30554 , G06F17/30864
Abstract: Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.
Abstract translation: 根据本发明的方法和设备提供了基于搜索来组织，索引，搜索和呈现时间序列数据的能力。 时间序列数据是在一个或多个通常连续的流中发生的时间戳记录的序列，表示某种类型的活动。 在一个实施例中，时间序列数据被组织成具有归一化时间戳的离散事件，并且事件由时间和关键字索引。 完全或部分地基于搜索时计算的时间索引机制，关键字索引机制或统计索引，检索相关的事件信息。
-
Patent Agency Ranking
136.发明申请PROPORTION BASED REAL TIME DISPLAY OF STATISTICS AND VALUES FOR SELECTED REGULAR EXPRESSIONS 审中-公开基于比例的实时统计显示和选定的常规表达值公开(公告)号：US20150339357A1
公开(公告)日：2015-11-26
申请号：US14816036
申请日：2015-08-02
Applicant: Splunk Inc.
Inventor： R. David Carasso , Micah James Delfino , Johnvey Hwang
IPC: G06F17/30 , G06F3/0482 , G06F3/0484
Abstract: Embodiments are directed towards real time display of event records and extracted values based on at least one extraction rule, such as a regular expression. A user interface may be employed to enable a user to have an extraction rule automatically generate and/or to manually enter an extraction rule. The user may be enabled to manually edit a previously provided extraction rule, which may result in real time display of updated extracted values. The extraction rule may be utilized to extract values from each of a plurality of records, including event records of unstructured machine data. Statistics may be determined for each unique extracted value, and may be displayed to the user in real time. The user interface may also enable the user to select at least one unique extracted value to display those event records that include an extracted value that matches the selected value.
Abstract translation: 实施例涉及基于诸如正则表达式的至少一个提取规则来实时显示事件记录和提取的值。 可以使用用户界面来使用户能够自动生成提取规则和/或手动输入提取规则。 可以使用户手动编辑先前提供的提取规则，这可以导致更新的提取值的实时显示。 提取规则可以用于从多个记录中的每一个提取值，包括非结构化机器数据的事件记录。 可以针对每个唯一提取的值确定统计量，并且可以实时地向用户显示。 用户界面还可以使用户能够选择至少一个唯一的提取值来显示包括与所选择的值匹配的提取值的那些事件记录。
-
公开(公告)号：US09128916B2
公开(公告)日：2015-09-08
申请号：US14170228
申请日：2014-01-31
Applicant: SPLUNK INC.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Bradley Hall , Brian Phillip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Erik M. Swan , Rory Greene , Nicholas Christian Mealy , Christina Frances Regina Noren
CPC classification number: G06F17/30604 , G06F11/3476 , G06F17/2785 , G06F17/30368 , G06F17/30477 , G06F17/30507 , G06F17/30525 , G06F17/30551 , G06F17/30598 , G06F17/30619 , G06F17/30657 , G06F17/30705 , G06K9/6217 , H04L63/1425 , H04L63/20
Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Abstract translation: 与本发明一致的方法和设备提供组织和构建由各种信息处理环境生成的机器数据的理解的能力。 机器数据是信息处理系统（例如，活动日志，配置文件，消息，数据库记录）的产物，并且表示已经发生并以原始数据格式记录的特定事件的证据。 在一个实施例中，机器数据通过将机器数据组织到事件中并将事件链接在一起而变成机器数据网。
-
公开(公告)号：US20150234905A1
公开(公告)日：2015-08-20
申请号：US14700006
申请日：2015-04-29
Applicant: SPLUNK INC.
Inventor： R. David Carasso , Micah James Delfino
IPC: G06F17/30 , G06F3/0484 , G06F3/0482
CPC classification number: G06F17/30563 , G06F3/0482 , G06F3/04842 , G06F7/24 , G06F17/30601 , G06F17/30705
Abstract: Embodiments are directed towards generating a representative sampling as a subset from a larger dataset that includes unstructured data. A graphical user interface enables a user to provide various data selection parameters, including specifying a data source and one or more subset types desired, including one or more of latest records, earliest records, diverse records, outlier records, and/or random records. Diverse and/or outlier subset types may be obtained by generating clusters from an initial selection of records obtained from the larger dataset. An iteration analysis is performed to determine whether a sufficient number of clusters and/or cluster types have been generated that exceed at least one threshold and when not exceeded, additional clustering is performed on additional records. From the resultant clusters, and/or other subtype results, a subset of records is obtained as the representative sampling subset.
Abstract translation: 实施例旨在从包括非结构化数据的较大数据集生成代表性采样作为子集。 图形用户界面使得用户能够提供各种数据选择参数，包括指定数据源和期望的一个或多个子集类型，包括最新记录，最早记录，不同记录，离群记录和/或随机记录中的一个或多个。 可以通过从从较大数据集获得的记录的初始选择生成聚类来获得不同的和/或离群子集类型。 执行迭代分析以确定是否已经生成了超过至少一个阈值的足够数量的集群和/或集群类型，并且当不超过时，对附加记录执行附加集群。 从所得到的集群和/或其他子类型结果中，获得记录的子集作为代表性抽样子集。
-
公开(公告)号：US20150227613A1
公开(公告)日：2015-08-13
申请号：US14691163
申请日：2015-04-20
Applicant: Splunk Inc.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Bradley Hall , Brian Philip Murphy , Stephen Philip Sorkin , Andre David Stechert , Erik M. Swan , Rory Greene , Nocholas Christian Mealy , Christina Frances Regina Noren
IPC: G06F17/30
CPC classification number: G06F17/30604 , G06F11/3476 , G06F17/2785 , G06F17/30368 , G06F17/30477 , G06F17/30507 , G06F17/30525 , G06F17/30551 , G06F17/30598 , G06F17/30619 , G06F17/30657 , G06F17/30705 , G06K9/6217 , H04L63/1425 , H04L63/20
Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Abstract translation: 与本发明一致的方法和设备提供组织和构建由各种信息处理环境生成的机器数据的理解的能力。 机器数据是信息处理系统（例如，活动日志，配置文件，消息，数据库记录）的产物，并且表示已经发生并以原始数据格式记录的特定事件的证据。 在一个实施例中，机器数据通过将机器数据组织到事件中并将事件链接在一起而变成机器数据网。
-
140.发明申请IDENTIFICATION OF SYSTEMS WITH ANOMALOUS BEHAVIOUR USING EVENTS DERIVED FROM MACHINE DATA PRODUCED BY THOSE SYSTEMS 审中-公开使用由这些系统生成的机器数据导出的事件识别具有异常行为的系统公开(公告)号：US20150143522A1
公开(公告)日：2015-05-21
申请号：US14611189
申请日：2015-01-31
Applicant: Splunk Inc.
Inventor： Michael Joseph Baum , R. David Carasso , Robin Kumar Das , Bradley Hall , Brian Phillip Murphy , Stephen Phillip Sorkin , Andre David Stechert , Erik M. Swan , Rory Greene , Nicholas Christian Mealy , Christina Frances Regina Noren
IPC: H04L29/06
CPC classification number: G06F17/30598 , G06F11/3476 , G06F17/2785 , G06F17/30368 , G06F17/30477 , G06F17/30507 , G06F17/30525 , G06F17/30551 , G06F17/30604 , G06F17/30619 , G06F17/30657 , G06F17/30705 , G06K9/6217 , H04L63/1425 , H04L63/20
Abstract: Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Abstract translation: 与本发明一致的方法和设备提供组织和构建由各种信息处理环境生成的机器数据的理解的能力。 机器数据是信息处理系统（例如，活动日志，配置文件，消息，数据库记录）的产物，并且表示已经发生并以原始数据格式记录的特定事件的证据。 在一个实施例中，机器数据通过将机器数据组织到事件中并将事件链接在一起而变成机器数据网。
-
-
-
-
-
-
-
-
-
Search Results
143
records
(took 0.029 seconds)
