公开(公告)号：US10997190B2

公开(公告)日：2021-05-04

申请号：US15012757

申请日：2016-02-01

Applicant: Splunk Inc.

Inventor： Michael Porath ,  Simon Foster Fishel ,  Adam Jamison Oliner ,  Clark Eugene Mullen ,  Siegfried Puchbauer-Schnabel ,  Marshall Chalmers Agnew

IPC: G06F16/24 ,  G06F16/248 ,  G06F9/54 ,  G06F9/451

Abstract: A modular visualization framework registers definitions for a variety of visualization types. The definitions are tagged with visualization characteristics. During a working session, likely interactive, a user identifies a search query used to produce data to be visualized. The working context, including the search query and data produced by its execution, is tagged for its visualization characteristics. Information about the working context, including its visualization characteristics, is then used to produce a customized list of candidates suited for the working context from which the user may select a visualization type.

公开(公告)号：US20210037036A1

公开(公告)日：2021-02-04

申请号：US16944127

申请日：2020-07-30

Applicant: Splunk Inc.

Inventor： Nicholas J. Filippi ,  Siegfried Puchbauer-Schnabel ,  Carl S. Yestrau ,  Vivian Shen ,  J. Mathew Elting

IPC: H04L29/06 ,  G06F9/54 ,  G06F16/21 ,  G06F16/33 ,  G06F16/903 ,  H04L29/08 ,  H04L12/24 ,  H04L12/58

Abstract: The disclosed embodiments relate to a system that generates an alert based on information extracted from search results generated by a query. During operation, the system executes the query to generate the search results. The system also obtains configuration information for the alert, wherein the configuration information identifies information associated with the search results, and also specifies a trigger condition for the alert. Next, when the trigger condition for the alert is met, the system uses the configuration information to generate a payload containing the identified information associated with the search results. The system then invokes alert-generating functionality and provides the payload as input to the alert-generating functionality. This enables the alert-generating functionality to use the information from the search results while performing one or more alert actions association with the alert.

公开(公告)号：US10671262B2

公开(公告)日：2020-06-02

申请号：US15886804

申请日：2018-02-01

Applicant: Splunk Inc.

Inventor： Nicholas Filippi ,  Siegfried Puchbauer-Schnabel ,  Cary Noel

IPC: G06F3/0484

Abstract: Provided are systems and methods for determining and displaying automatically binned information via a graphical user interface. A graphical user interface (GUI) may include a first graphical element representing a first metric value for a first time window and a second graphical element representing a second metric value for a second time window. An indication of a selection of the first time window may be received via the GUI. An updated GUI comprising a third graphical element representing a third metric value for the third time window and a fourth graphical element representing the fourth metric value for the fourth time window may be displayed, wherein the third time window and the fourth time window may be sub-ranges of the first time window.

公开(公告)号：US10585560B2

公开(公告)日：2020-03-10

申请号：US15339849

申请日：2016-10-31

Applicant: SPLUNK INC.

Inventor： Nicholas Filippi ,  Siegfried Puchbauer-Schnabel

IPC: G06F11/30 ,  G06F3/0482 ,  G06F17/22 ,  G06T11/20

Abstract: In various implementations, a display of a display device is registered based on receiving a request from the display device. User input is received from a display management device indicating a display configuration setting for the display. User input is received indicating an assignment of a data visualization of analytics data to the registered display based on the display configuration setting. In response to the receiving of the user input indicating the assignment, data is sent that causes the data visualization to be presented on the registered display.

公开(公告)号：US10164994B2

公开(公告)日：2018-12-25

申请号：US15499852

申请日：2017-04-27

Applicant: Splunk Inc.

Inventor： Nicholas J. Filippi ,  Siegfried Puchbauer-Schnabel ,  Carl S. Yestrau ,  Vivian Shen ,  J. Matthew Elting

IPC: H04L29/06 ,  G06F9/54 ,  H04L29/08 ,  G06F17/30 ,  H04L12/24 ,  H04L12/58

Abstract: The disclosed embodiments relate to a system that generates an alert based on information extracted from search results generated by a query. During operation, the system executes the query to generate the search results. The system also obtains configuration information for the alert, wherein the configuration information identifies information associated with the search results, and also specifies a trigger condition for the alert. Next, when the trigger condition for the alert is met, the system uses the configuration information to generate a payload containing the identified information associated with the search results. The system then invokes alert-generating functionality and provides the payload as input to the alert-generating functionality. This enables the alert-generating functionality to use the information from the search results while performing one or more alert actions association with the alert.

公开(公告)号：US20160314605A1

公开(公告)日：2016-10-27

申请号：US14697283

申请日：2015-04-27

Applicant: Splunk Inc.

Inventor： Nicholas Filippi ,  Simon Fishel ,  Siegfried Puchbauer-Schnabel ,  Mathew Elting ,  Carl Yestrau

IPC: G06T11/20 ,  G06F3/0484 ,  G06F17/30 ,  G06F3/0482

CPC classification number: G06T11/206 ,  G06F17/30991 ,  G06T2200/24

Abstract: Embodiments of the disclosure are systems and methods for providing third party visualizations. In one embodiment, a method is provided that includes receiving, via an API, computer-executable instructions configured to render a visualization using events and a variable field; rendering the visualization using the events; causing displaying of a graphical user interface (GUI) comprising a visualization panel and a variable element; receiving, via the variable element of the GUI, an indication of a first change in the value of the variable field to a first value; re-rendering the visualization using the events and the first value; and causing display of the GUI with an updated visualization panel and the variable element.

Abstract translation: 本公开的实施例是用于提供第三方可视化的系统和方法。 在一个实施例中，提供了一种方法，其包括经由API接收被配置为使用事件和可变字段呈现可视化的计算机可执行指令; 使用事件渲染可视化; 导致显示包括可视化面板和可变元素的图形用户界面（GUI）; 经由所述GUI的所述可变元素接收所述可变字段的值的第一变化的指示为第一值; 使用事件和第一个值重新渲染可视化; 并且使得具有更新的可视化面板和可变元素的GUI的显示。

公开(公告)号：US11995094B2

公开(公告)日：2024-05-28

申请号：US17063444

申请日：2020-10-05

Applicant: SPLUNK INC.

Inventor： Nicholas J. Filippi ,  Siegfried Puchbauer-Schnabel ,  Carl S. Yestrau ,  Vivian Shen ,  J. Mathew Elting

IPC: G06F16/248 ,  G06F3/04842 ,  G06F3/04847 ,  G06F16/245 ,  G06F16/2455 ,  G06F16/2458 ,  G06F16/25 ,  G06F16/11 ,  G06F16/16 ,  G06F16/9535

CPC classification number: G06F16/248 ,  G06F3/04842 ,  G06F3/04847 ,  G06F16/245 ,  G06F16/2455 ,  G06F16/2477 ,  G06F16/254 ,  G06F16/125 ,  G06F16/162 ,  G06F16/9535

Abstract: A system that enables a user to configure alert actions based on search results generated by a query is disclosed. During operation, the system presents an alert user interface (UI) to a user, wherein the alert UI enables the user to configure one or more alert actions to be performed based on the search results. Next, the system receives alert configuration information from the user through the alert UI, wherein the alert configuration information includes tokens representing parameters associated with the query and the search results. Then, while generating an alert associated with the search results, the system performs a token substitution operation that substitutes tokens in the alert configuration information with corresponding parameters from the search results to generate a payload that is communicated to alert-generating functionality. This token substitution allows the parameters to be used by the alert-generating functionality while performing the one or more alert actions.

公开(公告)号：US11238033B1

公开(公告)日：2022-02-01

申请号：US16455592

申请日：2019-06-27

Applicant: Splunk Inc.

Inventor： Michael Porath ,  Siegfried Puchbauer-Schnabel

IPC: G06F16/242 ,  G06F16/951 ,  G06F16/2457 ,  G06F3/0484 ,  G06F16/29 ,  G06F16/248

Abstract: A data intake and query system may store raw machine data that includes location information. A client system may include a user interface for searching the data intake and query system. The user interface allows a user to define a field search query and to define one or more ad-hoc boundary regions on a map. A combined query is transmitted to the data intake and query system, the combined query including both the field search query and location search information that is based on the ad-hoc boundary regions. The data intake and query system runs the combined query and returns responsive results, which are displayed at the client user interface.

公开(公告)号：US10977316B2

公开(公告)日：2021-04-13

申请号：US15339842

申请日：2016-10-31

Applicant: SPLUNK INC.

Inventor： Nicholas Filippi ,  Siegfried Puchbauer-Schnabel

IPC: G06F16/00 ,  G06F16/9038 ,  G06T11/20 ,  G06F3/0484

Abstract: In various implementations, search results corresponding to a search query are obtained. A data visualization is generated from the search results. The generated data visualization is pushed to a registered display of a display device, where the pushing causes presentation of the generated data visualization on the registered display. An alert configuration interface may be caused to be presented on a display management device. From the displayed alert configuration interface, user input indicating an assignment of a set of trigger conditions to a display alert may be received. The display alert can be pushed to the registered display based on determining the set of trigger conditions is satisfied. The pushed display alert may be presented over the data visualization on the registered display.

公开(公告)号：US20210056739A1

公开(公告)日：2021-02-25

申请号：US17013115

申请日：2020-09-04

Applicant: Splunk Inc

Inventor： Nicholas Filippi ,  Simon Fishel ,  Siegfried Puchbauer-Schnabel ,  Mathew Elting ,  Carl Yestrau

IPC: G06T11/20 ,  G06F16/9038

Abstract: Embodiments of the disclosure are systems and methods for updating third party visualizations in response to a query. In one embodiment, a method is provided that includes receiving input data comprising events, where the events comprise time-stamped machine-generated data. The method also comprises receiving a modular visualization that includes a variable field associated with a visualization and instructions for rendering the visualization using the input data and the variable field. Further, the method comprises rendering the visualization based on the input data and a value associated with the variable field. Additionally, the method comprises updating the value of the variable field and obtaining updated input data using a search query that is generated using the updated value. The visualization is re-rendered based on the updated input data and the updated value.