中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

60 records (took 0.049 seconds)

    Query handling using summarization tables
    11.
    发明授权
    Query handling using summarization tables 有权

    公开(公告)号：US10685001B2

    公开(公告)日：2020-06-16

    申请号：US15967400

    申请日：2018-04-30

    Applicant: SPLUNK, INC.

    Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

    IPC: G06F16/00 ,  G06F16/22 ,  G06F16/248 ,  G06F16/28 ,  G06F16/951 ,  G06F16/2455 ,  G06F16/2453

    Abstract: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    Partially typed semantics optimization
    13.
    发明授权
    Partially typed semantics optimization 有权

    公开(公告)号：US10509784B2

    公开(公告)日：2019-12-17

    申请号：US15582519

    申请日：2017-04-28

    Applicant: Splunk, Inc.

    Inventor： Alexander Douglas James ,  David Ryan Marquardt ,  Karthikeyan Sabhanatarajan

    IPC: G06F16/2453

    Abstract: A method includes receiving an initial pipeline including a sequence of commands for execution on a computing system, and obtaining, for each command in the sequence of commands, semantic information. The sequence of commands includes a command with incomplete semantic information. The method further includes generating an abstract semantic tree (AST) with the semantic information and a placeholder for the incomplete semantic information, and manipulating the AST to generate a revised AST. The revised AST corresponds to a revised pipeline that reduces an execution time on the computing system. The method further includes executing the revised pipeline.

    LEVERAGING REFERENCES VALUES IN INVERTED INDEXES TO RETRIEVE ASSOCIATED EVENT RECORDS COMPRISING RAW MACHINE DATA
    14.
    发明申请
    LEVERAGING REFERENCES VALUES IN INVERTED INDEXES TO RETRIEVE ASSOCIATED EVENT RECORDS COMPRISING RAW MACHINE DATA 审中-公开

    公开(公告)号：US20190354559A1

    公开(公告)日：2019-11-21

    申请号：US16527854

    申请日：2019-07-31

    Applicant: Splunk Inc.

    Inventor： Karthikeyan Sabhanatarajan ,  David Ryan Marquardt ,  Steve Zhang ,  Nicholas Romito

    IPC: G06F16/903 ,  G06F16/901

    Abstract: Embodiments of the present disclosure provide techniques for performing searches of event records by leveraging reference values in an inverted index. A method of searching comprises accessing a query associated with a first set of event records in a field searchable data store, each event record comprising a time-stamped portion of raw machine data. The method further comprises evaluating the query and generating results for the query by accessing an inverted index, wherein each entry in the inverted index comprises at least one field, a corresponding at least one field value and a reference value that identifies a location in the field searchable data store where an associated event record is stored. The method further comprises performing a search to filter out a second set of event records and retrieving the second set of event records from the field searchable data store using reference values in the inverted index.

    GENERATING AND STORING SUMMARIZATION TABLES FOR SEARCHABLE EVENTS
    18.
    发明申请
    GENERATING AND STORING SUMMARIZATION TABLES FOR SEARCHABLE EVENTS 审中-公开

    公开(公告)号：US20180004785A1

    公开(公告)日：2018-01-04

    申请号：US15705875

    申请日：2017-09-15

    Applicant: SPLUNK INC.

    Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

    IPC: G06F17/30

    CPC classification number: G06F16/2228 ,  G06F16/00 ,  G06F16/24539 ,  G06F16/2455 ,  G06F16/248 ,  G06F16/284 ,  G06F16/951

    Abstract: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    Flexible schema column store
    19.
    发明授权
    Flexible schema column store 有权

    公开(公告)号：US09753974B2

    公开(公告)日：2017-09-05

    申请号：US13662984

    申请日：2012-10-29

    Applicant: SPLUNK INC.

    Inventor： David Ryan Marquardt ,  Mitchell Neuman Blank, Jr. ,  Stephen Phillip Sorkin

    IPC: G06F17/30

    CPC classification number: G06F17/30442 ,  G06F17/30315 ,  G06F17/30321 ,  G06F17/30353 ,  G06F17/30401 ,  G06F17/30551 ,  G06F17/30554 ,  G06F17/30589 ,  G06F17/30622 ,  G06F17/30634 ,  G06F17/30696

    Abstract: Embodiments are directed towards receiving and processing search queries directed towards relatively large sets of data. The data is stored in a record based datastore. From the stored data, field names, corresponding field values, and posting values may be determined. Posting values may be employed to locate records in the datastore that include the field names and field values. The field names, field values, and posting values may be employed to generate a lexicon. If queries are received, a lexicon query processor may employ the lexicon separate from the datastore to generate responses to the received queries. Queries may include clauses that may be processed using the lexicon separate from the datastore, such as, where clause expressions, group-by clause expressions, aggregation functions, or the like. A time values array may be used to enable queries to process group-by-time expressions that may return results grouped into sub-sets based on time ranges.

    Distributed high performance analytics store
    20.
    发明授权
    Distributed high performance analytics store 有权
    分布式高性能分析商店

    公开(公告)号：US08682925B1

    公开(公告)日：2014-03-25

    申请号：US13756147

    申请日：2013-01-31

    Applicant: Splunk Inc.

    Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

    IPC: G06F17/30

    CPC classification number: G06F17/30321 ,  G06F17/30 ,  G06F17/30457 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/30595 ,  G06F17/30864

    Abstract: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    Abstract translation: 实施例针对事件的透明总结。 可以在搜索头收到针对事件记录的总结和报告的查询。 搜索头可能与一个包含事件记录的索引器相关联。 搜索头可以将查询转发给索引器，可以解析用于并发执行的查询。 如果查询是集合查询，则索引器可以基于位于索引器上的事件记录生成摘要信息。 包含在汇总信息中的事件记录字段可以基于收集查询中包含的项来确定。 如果查询是统计查询，则每个索引器可以从先前生成的摘要信息生成部分结果集，将部分结果集返回到搜索头。 收集查询可以保存并计划运行，并定期更新摘要信息。

Patent Agency Ranking