公开(公告)号：US11526425B1

公开(公告)日：2022-12-13

申请号：US16835179

申请日：2020-03-30

Applicant: SPLUNK INC.

Inventor： Steven Karis ,  Maxime Petazzoni ,  Matthew William Pound ,  Joseph Ari Ross ,  Charles Smith ,  Scott Stewart

IPC: G06F11/36 ,  G06F9/54 ,  G06F16/2455

Abstract: A method of generating metrics data associated with a microservices-based application comprises ingesting a plurality of spans and mapping an ingested span of the plurality of spans to a span identity, wherein the span identity comprises a tuple of information identifying a type of span associated with the span identity, wherein the tuple of information comprises user-configured dimensions. The method further comprises grouping the ingested span by the span identity, wherein the ingested span is grouped with other spans from the plurality of spans comprising a same span identity. The method also comprises computing metrics associated with the span identity and using the metrics to generate a stream of metric data associated with the span identity.

公开(公告)号：US12271423B1

公开(公告)日：2025-04-08

申请号：US17876412

申请日：2022-07-28

Applicant: Splunk, Inc.

Inventor： Julien Didier Jean Veron Vialard ,  Subhabrata Majumdar ,  Joseph Ari Ross

IPC: G06F17/00 ,  G06F7/00 ,  G06F16/22 ,  G06F16/901 ,  G06N3/08

Abstract: A computerized method is disclosed that includes operations of receiving incoming data including event data, extracting entities from the event data based on a graph ontology, generating a graph-based dense representation of each graph entity according to the graph ontology, wherein the graph-dense representations are stored in a vector database, computing relatedness scores between each of the entities, generating a listing of events related to a selected event, wherein the listing of events is ordered by corresponding relatedness scores, generating a graphical user interface illustrating the listing of events related to the selected event, and causing rendering of the graphical user interface on a display screen of a network device. Generating the graph-based dense representations may include training a graph neural network model on a corpus of metapaths to produce node embeddings.

公开(公告)号：US20240346049A1

公开(公告)日：2024-10-17

申请号：US18666603

申请日：2024-05-16

Applicant: SPLUNK Inc.

Inventor： Nishant Agarwal ,  Houwu Bai ,  Darshan Patel ,  Rajesh Raman ,  Joseph Ari Ross

IPC: G06F16/28 ,  G06F16/2455 ,  G06F16/2458 ,  H04L43/08

CPC classification number: G06F16/287 ,  G06F16/24568 ,  G06F16/2477 ,  H04L43/08

Abstract: Described are systems, methods, and techniques for collecting, analyzing, processing, and storing time series data and for evaluating and dynamically estimating a resolution of one or more streams of data points and updating an output resolution. Responsive to receiving a stream of data points, a data resolution can be derived and an output resolution can be set to a first value. When a change to the data resolution is detected, the output resolution can be changed, modifying a frequency at which output data points are generated and/or transmitted. In some instances, a detector can be implemented to trigger an alert responsive to ingested data points corresponding with triggering parameters. An output resolution for the detector can be dynamically modified based on dynamically detecting a change to the data resolution of the stream of data.

公开(公告)号：US11838372B2

公开(公告)日：2023-12-05

申请号：US18093980

申请日：2023-01-06

Applicant: SPLUNK Inc.

Inventor： Gergely Danyi ,  Joseph Ari Ross

IPC: G06F15/173 ,  H04L67/146 ,  G06F16/906 ,  G06F16/955

CPC classification number: H04L67/146 ,  G06F16/906 ,  G06F16/9566

Abstract: A method of normalizing URLs associated with a real user session comprises extracting uniform resource locators (URLs) from ingested spans where at least a portion of the URLs comprise unique URL strings. The method also comprises decomposing each of the URLs into a sequence of tokens and grouping together subsets of related URLs. Also, the method comprises representing each subset of related URLs with a normalized URL string.

公开(公告)号：US11789943B1

公开(公告)日：2023-10-17

申请号：US17829141

申请日：2022-05-31

Applicant: Splunk Inc.

Inventor： Gergely Danyi ,  Steven Flanders ,  Joseph Ari Ross ,  Justin Smith ,  Eric Wohlstadter ,  Chengyu Yang

IPC: G06F16/245 ,  G06F11/34 ,  G06F11/30

CPC classification number: G06F16/245 ,  G06F11/302 ,  G06F11/3495

Abstract: A computer-implemented method for analyzing spans and traces associated with a microservices-based application executing in a distributed computing environment comprises aggregating a plurality of ingested spans associated with one or more applications executing in the distributed computing environment into a plurality of traces, wherein each of the plurality of ingested spans is associated with a plurality of tags. The method further comprises comparing durations of a set of related traces of the plurality of traces to determine patterns for the plurality of tags and generating a histogram that represents a distribution of the durations of the set of related traces. The method also comprises providing alerts for one or more tags from the plurality of tags associated with traces having a duration above a threshold based on the distribution of the durations.

公开(公告)号：US20230156093A1

公开(公告)日：2023-05-18

申请号：US18093980

申请日：2023-01-06

Applicant: SPLUNK Inc.

Inventor： Gergely Danyi ,  Joseph Ari Ross

IPC: H04L67/146 ,  G06F16/906 ,  G06F16/955

CPC classification number: H04L67/146 ,  G06F16/906 ,  G06F16/9566

Abstract: A method of normalizing URLs associated with a real user session comprises extracting uniform resource locators (URLs) from ingested spans where at least a portion of the URLs comprise unique URL strings. The method also comprises decomposing each of the URLs into a sequence of tokens and grouping together subsets of related URLs. Also, the method comprises representing each subset of related URLs with a normalized URL string.

公开(公告)号：US11381492B1

公开(公告)日：2022-07-05

申请号：US16990923

申请日：2020-08-11

Applicant: Splunk Inc.

Inventor： Ozan Turgut ,  Joseph Ari Ross ,  Eyal Ophir ,  Calvin Chan

IPC: H04L43/00 ,  G06F11/30 ,  H04L43/16 ,  G06F11/34 ,  G06F11/36 ,  H04L43/0817 ,  H04L41/0686 ,  H04L43/0876

Abstract: An instrumentation analysis system processes data streams received from servers executing instrumented software. The system determines a set of servers that satisfy a given criteria, for example, a set of servers with high resource utilization. The set of servers may be determined by the system based on triggers or specified by a user. The system analyzes properties of servers to determine a property that characterizes the set of servers. The property characterizing the servers is provided to users via a user interface or alerts for further analysis, for example, to analyze the cause of high resource utilization.

公开(公告)号：US11023280B2

公开(公告)日：2021-06-01

申请号：US16129494

申请日：2018-09-12

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross

IPC: G06F9/50 ,  G06F11/30 ,  G06F11/32 ,  G06F11/34 ,  G06F9/54 ,  G06F16/2455

Abstract: A system receives a time series of data values from instrumented software executing on an external system. Each data value corresponds to a metric of the external system. The system stores a level value representing a current estimate of the time series and a trend value representing a trend in the time series. The level and trend values are based on data in a window having a trailing value. In response to receiving a most recent value, the system updates the level value and the trend value to add an influence of the most recent value and remove an influence of the trailing value. The system forecasts based on the updated level and trend values, and in response to determining that the forecast indicates the potential resource shortage event, takes action.

公开(公告)号：US20200372007A1

公开(公告)日：2020-11-26

申请号：US16757354

申请日：2019-10-28

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross ,  Matthew William Pound

IPC: G06F16/23

Abstract: Embodiments of the present disclosure provide for trace and span sampling and analysis for instrumented software. Each span may be annotated with one or more tags that provide context about an executed task, such as a user instrumenting the software, a document involved in a request, an infrastructure element used in servicing a request, etc. A sampler may perform tail-based sampling of traces comprising spans. The sampler may select a portion of the traces having selected features and send them to an analyzer. The analyzer may receive the selected traces and determine whether the selected traces are indicative of configuration problems for the instrumented software. An alert may be generated based on identified configuration problems.

公开(公告)号：US12013880B2

公开(公告)日：2024-06-18

申请号：US17721251

申请日：2022-04-14

Applicant: SPLUNK Inc.

Inventor： Nishant Agarwal ,  Houwu Bai ,  Darshan Patel ,  Rajesh Raman ,  Joseph Ari Ross

IPC: G06F16/28 ,  G06F16/2455 ,  G06F16/2458 ,  H04L43/08

CPC classification number: G06F16/287 ,  G06F16/24568 ,  G06F16/2477 ,  H04L43/08

Abstract: Described are systems, methods, and techniques for collecting, analyzing, processing, and storing time series data and for evaluating and dynamically estimating a resolution of one or more streams of data points and updating an output resolution. Responsive to receiving a stream of data points, a data resolution can be derived and an output resolution can be set to a first value. When a change to the data resolution is detected, the output resolution can be changed, modifying a frequency at which output data points are generated and/or transmitted. In some instances, a detector can be implemented to trigger an alert responsive to ingested data points corresponding with triggering parameters. An output resolution for the detector can be dynamically modified based on dynamically detecting a change to the data resolution of the stream of data.