Intent-based natural language processing system

    公开(公告)号:US11269872B1

    公开(公告)日:2022-03-08

    申请号:US16528567

    申请日:2019-07-31

    Applicant: SPLUNK INC.

    Abstract: Various embodiments of the present application set forth a computer-implemented method that includes receiving, from a device, a natural-language (NL) request. The method further includes selecting, using the NL request, an intent from a set of intents, wherein the intent is associated with a pre-defined intent template, the pre-defined intent template including a set of property fields that are associated with one or more portions of the NL request. The method also includes determining, based on the NL request, a set of property field values for the set of property fields. The method further includes generating a query to be executed on a field-searchable data source, wherein the query is based on one or more property field values included in the set of property field values. The method also includes receiving, in response to the query, a result that includes a set of event field values. In addition, the method includes causing the device to display at least a portion of the result.

    Transforming event data generated by remote capture agents using user-generated code

    公开(公告)号:US11252056B2

    公开(公告)日:2022-02-15

    申请号:US16417315

    申请日:2019-05-20

    Applicant: Splunk Inc.

    Inventor: Michael Dickey

    Abstract: The disclosed embodiments provide a method and system for processing network data. During operation, the system obtains, at a remote capture agent, configuration information for the remote capture agent from a configuration server over a network. Next, the system uses the configuration information to configure the generation of event data from network data obtained from network packets at the remote capture agent. The system then uses the configuration information to configure transformation of the event data or the network data into transformed event data at the remote capture agent.

    Aggregation of incident data for correlated incidents

    公开(公告)号:US11218357B1

    公开(公告)日:2022-01-04

    申请号:US16120010

    申请日:2018-08-31

    Applicant: Splunk Inc.

    Abstract: Described herein are systems, methods, and software to enhance incident response for an information technology (IT) environment. In one implementation, an incident service identifies an incident in the IT environment and determines a correlation between the incident and other incidents in the IT environment. Once correlated, the incident service aggregates incident data of the incident with incident data of the other incidents and generates a summary using the aggregated incident data.

    THREAT IDENTIFICATION-BASED COLLECTION OF FORENSIC DATA FROM ENDPOINT DEVICES

    公开(公告)号:US20210400088A1

    公开(公告)日:2021-12-23

    申请号:US17371977

    申请日:2021-07-09

    Applicant: Splunk Inc.

    Inventor: Brian Luger

    Abstract: Techniques and mechanisms are disclosed enabling efficient collection of forensic data from client devices, also referred to herein as endpoint devices, of a networked computer system. Embodiments described herein further enable correlating forensic data with other types of non-forensic data from other data sources. A network security application described herein further enables generating various dashboards, visualizations, and other interfaces for managing forensic data collection, and displaying information related to collected forensic data and information related to identified correlations between items of forensic data and other items of non-forensic data.

    DISPLAYING INTERACTIVE TOPOLOGY MAPS OF CLOUD COMPUTING RESOURCES

    公开(公告)号:US20210385139A1

    公开(公告)日:2021-12-09

    申请号:US17443228

    申请日:2021-07-22

    Applicant: Splunk Inc.

    Abstract: Techniques and mechanisms are disclosed that enable collection of various types of data from cloud computing services and the generation of various dashboards and visualizations to view information about collections of cloud computing resources. A user can configure collection of data from one or more cloud computing services and view visualizations using an application platform referred to herein as a cloud computing management application. A cloud computing management application further may be configured to generate and cause display of interactive topology map representations of cloud computing resources based on the collected data, where an interactive topology map enables users to view an intuitive visualization of a collection of computing resources, efficiently cause performance of actions with respect to various resources displayed in the topology map, and analyze the collection of resources in ways that are not possible using conventional cloud computing service management consoles.

Patent Agency Ranking