公开(公告)号：US20190097902A1

公开(公告)日：2019-03-28

申请号：US15884637

申请日：2018-01-31

Applicant: Splunk Inc.

Inventor： Alan Vincent Hardin ,  Kan Wu ,  Arun Ramani ,  Nicholas Matthew Tankersley ,  Tristan Fletcher ,  Alok Bhide

IPC: H04L12/26 ,  G06F8/61 ,  G06F17/30

Abstract: One or more lower-tier system monitoring components are installed and operated prior to installing a higher-tier system monitoring component. A lower-tier system may be an individual server, network device, or local area network. A higher-tier system may include an enterprise or organization wide network or service that includes at least a part of the lower-tier system. Once the higher-tier system monitoring component is installed, the higher-tier and lower-tier system monitoring components use an interface to operate with one another to form a single larger instance of an organization wide monitoring system. The combination of the higher-tier system monitoring component and the one or more lower-tier system operating components performs monitoring aspects of the overall information technology environment based at least in part on machine data produced and made searchable to provide monitoring results.

公开(公告)号：US20190095478A1

公开(公告)日：2019-03-28

申请号：US15885632

申请日：2018-01-31

Applicant: Splunk Inc.

Inventor： Nicholas Matthew Tankersley ,  Soojin Min ,  Andrew Montanez

IPC: G06F17/30

Abstract: Operational machine components of an information technology (IT) or other microprocessor- or microcontroller-permeated environment generate disparate forms of machine data. Network connections are established between these components and processors of an automatic data intake and query system (DIQS). The DIQS conducts network transactions on a periodic and/or continuous basis with the machine components to receive the disparate data and ingest certain of the data as entries of a DIQS datastore that is searchable for DIQS query processing. The DIQS may receive search queries to process against the received and ingested data via an exposed network interface. In one example embodiment, an entity monitoring server exercises the exposed network interface to receive search results which inform AWL/other processes that produce reliability-aware entity profiles enabling new processing modes with lower computing resource burden.

公开(公告)号：US12189577B1

公开(公告)日：2025-01-07

申请号：US18095941

申请日：2023-01-11

Applicant: Splunk Inc.

Inventor： Venkata Kuruvada ,  Fang I. Hsiao ,  Nicholas Matthew Tankersley

IPC: G06F3/06 ,  G06F16/14 ,  G06F16/22 ,  G06F16/951 ,  G06Q10/063

Abstract: A network storage volume stores a first entry in a first-mode storage bucket and a second entry in a second-mode storage bucket, the first-mode storage bucket having first bucket metadata, and the second-mode storage bucket having second bucket metadata. At least one bucket to be purged from the buckets of the network storage volume are selected based at least in part on bucket metadata of the plurality of buckets, where the buckets include the first-mode storage bucket and the second-mode storage bucket. The selected bucket is caused to be purged from the network storage volume.

公开(公告)号：US11843528B2

公开(公告)日：2023-12-12

申请号：US17451940

申请日：2021-10-22

Applicant: Splunk Inc.

Inventor： Alan Vincent Hardin ,  Kan Wu ,  Arun Ramani ,  Nicholas Matthew Tankersley ,  Tristan Fletcher ,  Alok Bhide

IPC: G06F17/30 ,  H04L43/04 ,  G06F8/61 ,  H04L43/00 ,  G06F16/951 ,  H04L43/0817

CPC classification number: H04L43/04 ,  G06F8/61 ,  G06F16/951 ,  H04L43/0817 ,  H04L43/14

Abstract: One or more lower-tier system monitoring components are installed and operated prior to installing a higher-tier system monitoring component. A lower-tier system may be an individual server, network device, or local area network. A higher-tier system may include an enterprise or organization wide network or service that includes at least a part of the lower-tier system. Once the higher-tier system monitoring component is installed, the higher-tier and lower-tier system monitoring components use an interface to operate with one another to form a single larger instance of an organization wide monitoring system. The combination of the higher-tier system monitoring component and the one or more lower-tier system operating components performs monitoring aspects of the overall information technology environment based at least in part on machine data produced and made searchable to provide monitoring results.

公开(公告)号：US11159397B2

公开(公告)日：2021-10-26

申请号：US15884637

申请日：2018-01-31

Applicant: Splunk Inc.

Inventor： Alan Vincent Hardin ,  Kan Wu ,  Arun Ramani ,  Nicholas Matthew Tankersley ,  Tristan Fletcher ,  Alok Bhide

IPC: H04L12/26 ,  G06F8/61 ,  G06F16/951

Abstract: One or more lower-tier system monitoring components are installed and operated prior to installing a higher-tier system monitoring component. A lower-tier system may be an individual server, network device, or local area network. A higher-tier system may include an enterprise or organization wide network or service that includes at least a part of the lower-tier system. Once the higher-tier system monitoring component is installed, the higher-tier and lower-tier system monitoring components use an interface to operate with one another to form a single larger instance of an organization wide monitoring system. The combination of the higher-tier system monitoring component and the one or more lower-tier system operating components performs monitoring aspects of the overall information technology environment based at least in part on machine data produced and made searchable to provide monitoring results.

公开(公告)号：US11157446B1

公开(公告)日：2021-10-26

申请号：US16732323

申请日：2020-01-01

Applicant: Splunk Inc.

Inventor： Venkata Kuruvada ,  Fang I. Hsiao ,  Nicholas Matthew Tankersley

IPC: G06F3/06 ,  G06F16/14 ,  G06F16/22 ,  G06F16/951 ,  G06Q10/06

Abstract: A server group of a data intake and query system (DIQS) establishes connections with multiple source data network nodes. Data from the multiple sources comports with a variety of different data modes and may be received via the established network connections on a periodic or continuous basis for ongoing capture as modal entries of modal buckets of a common networked storage volume. Rates of data reception across the network connections influences a process to maintain a measured utilization of storage volume capacity at, near, or below a targeted level.

公开(公告)号：US11106442B1

公开(公告)日：2021-08-31

申请号：US16049495

申请日：2018-07-30

Applicant: Splunk Inc.

Inventor： Fang I. Hsiao ,  Ai-chi Lu ,  Nicholas Matthew Tankersley

IPC: G06F7/00 ,  G06F16/00 ,  G06F8/61 ,  G06F16/26 ,  G06F16/951 ,  G06F3/0483 ,  G06F3/0484

Abstract: Data intake and query system (DIQS) instances supporting applications including lower-tier, focused, work group oriented applications may be tailored to meet the specific needs of the users. Rather than offer pre-configured options, the DIQS-based application offers the user the ability to customize data collection before deploying the collectors for specified host entities within an IT environment. Once the user selects the metrics and/or log sources for data collection at a custom interface, the lower-tier DIQS generates custom script operable to establish collection of the source data having the selected metrics and events associated with selected log sources from the specified host entities. The user can display and analyze the collected data.

公开(公告)号：US10929415B1

公开(公告)日：2021-02-23

申请号：US16148918

申请日：2018-10-01

Applicant: Splunk Inc.

Inventor： Vladimir A. Shcherbakov ,  Stewart Smith ,  Nicholas Matthew Tankersley ,  Junyu Wang ,  Peter Wu

IPC: G06F16/00 ,  G06F16/248 ,  G06F16/26 ,  G06F3/0482 ,  G06F3/0481

Abstract: Systems and methods are described to determine relationships between one or more components of an isolated execution environment system based on data obtained from a data intake and query system. Based on the determined relationships, an interactive visualization is generated that indicates the hierarchical relationship of the components. In some cases, to illustrate the relationship between components of the isolated execution environment system, the visualization can include one or more display objects displayed in a subordinate or superior relationship to other display objects. In certain cases, based on an interaction with a display object, the system can generate a query and/or display additional information and/or visualizations based on the results of the query.

公开(公告)号：US10417225B2

公开(公告)日：2019-09-17

申请号：US15088075

申请日：2016-03-31

Applicant: Splunk Inc.

Inventor： Nicholas Matthew Tankersley ,  Fang I Hsiao ,  Arun Ramani

IPC: G06F16/2452 ,  G06F3/0484 ,  G06T11/20 ,  G06F16/2457 ,  G06F11/30 ,  G06Q10/06 ,  G06Q10/10

Abstract: An automatic service monitor in an information-technology environment performs regular search queries against generated machine data to derive performance measurements. The information technology environment is defined in terms of services provided by entities, and the performance measurements are defined as key performance indicators (KPIs) of the services. Generated machine data used by the search queries pertain to the entities performing the service. Definitional information for the services, entities, and KPIs is administered by a user to control the operation of the service monitor. Various aspects of such definitional information as well as related performance measurement information may be presented in a unified console display tailored to, and organized around, a particular entity. The console display may serve as a central launch point by supporting user interaction to navigate to other specialized monitoring interfaces.

公开(公告)号：US12254019B2

公开(公告)日：2025-03-18

申请号：US18160972

申请日：2023-01-27

Applicant: Splunk Inc.

Inventor： Vladimir A. Shcherbakov ,  Stewart Smith ,  Nicholas Matthew Tankersley ,  Junyu Wang ,  Peter Wu

IPC: G06F16/30 ,  G06F16/248 ,  G06F16/26 ,  G06F3/04817 ,  G06F3/0482

Abstract: Systems and methods are described to determine relationships between one or more components of an isolated execution environment system based on data obtained from a data intake and query system. Based on the determined relationships, an interactive visualization is generated that indicates the hierarchical relationship of the components. In some cases, to illustrate the relationship between components of the isolated execution environment system, the visualization can include one or more display objects displayed in a subordinate or superior relationship to other display objects. In certain cases, based on an interaction with a display object, the system can generate a query and/or display additional information and/or visualizations based on the results of the query.