Utilizing a dual mode search
    24.
    发明授权

    公开(公告)号:US10726080B2

    公开(公告)日:2020-07-28

    申请号:US15885629

    申请日:2018-01-31

    Applicant: SPLUNK INC.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    Optimizing index file sizes based on indexed data storage conditions

    公开(公告)号:US10235431B2

    公开(公告)日:2019-03-19

    申请号:US15011473

    申请日:2016-01-29

    Applicant: Splunk Inc.

    Abstract: Techniques and mechanisms are disclosed to optimize the size of index files to improve use of storage space available to indexers and other components of a data intake and query system. Index files of a data intake and query system may include, among other data, a keyword portion containing mappings between keywords and location references to event data containing the keywords. Optimizing an amount of storage space used by index files may include removing, modifying and/or recreating various components of index files in response to detecting one or more storage conditions related to the event data indexed by the index files. The optimization of index files generally may attempt to manage a tradeoff between an efficiency with which search requests can be processed using the index files and an amount of storage space occupied by the index files.

    Searching Raw Data From An External Data System Using A Dual Mode Search System

    公开(公告)号:US20180157755A1

    公开(公告)日:2018-06-07

    申请号:US15885629

    申请日:2018-01-31

    Applicant: SPLUNK INC.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    Searching raw data from an external data system using a dual mode search system

    公开(公告)号:US09916385B2

    公开(公告)日:2018-03-13

    申请号:US15339951

    申请日:2016-11-01

    Applicant: Splunk Inc.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    PROCESSING A SYSTEM SEARCH REQUEST INCLUDING EXTERNAL DATA SOURCES
    28.
    发明申请
    PROCESSING A SYSTEM SEARCH REQUEST INCLUDING EXTERNAL DATA SOURCES 有权
    处理包括外部数据源的系统搜索请求

    公开(公告)号:US20140344256A1

    公开(公告)日:2014-11-20

    申请号:US14449144

    申请日:2014-07-31

    Applicant: Splunk Inc.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    Abstract translation: 通过分析所接收的搜索请求来识别在搜索支持系统的计算机处接收的搜索请求,以识别请求参数并连接到在请求参数中引用的搜索支持系统的系统索引。 启动外部结果提供程序(ERP)进程,在搜索支持系统和搜索支持系统外部的数据源之间建立通信,为请求参数中引用的虚拟索引。 因此,ERP过程提供了搜索支持系统和外部数据源之间的接口,如第三方。 ERP流程可以以流模式运行(以最少的处理提供实时搜索结果)和/或报告模式(提供更大的延迟和处理范围的结果),并且可以在模式之间切换。 从连接的系统索引和引用的虚拟索引接收搜索请求结果。

    PROCESSING A SYSTEM SEARCH REQUEST ACROSS DISPARATE DATA COLLECTION SYSTEMS
    29.
    发明申请
    PROCESSING A SYSTEM SEARCH REQUEST ACROSS DISPARATE DATA COLLECTION SYSTEMS 审中-公开
    处理不同数据收集系统的系统搜索请求

    公开(公告)号:US20140330815A1

    公开(公告)日:2014-11-06

    申请号:US14266832

    申请日:2014-05-01

    Applicant: Splunk Inc.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    Abstract translation: 通过分析所接收的搜索请求来识别在搜索支持系统的计算机处接收的搜索请求,以识别请求参数并连接到在请求参数中引用的搜索支持系统的系统索引。 启动外部结果提供程序(ERP)进程,在搜索支持系统和搜索支持系统外部的数据源之间建立通信,为请求参数中引用的虚拟索引。 因此,ERP过程提供了搜索支持系统和外部数据源之间的接口,如第三方。 ERP流程可以以流模式运行(以最少的处理提供实时搜索结果)和/或报告模式(提供更大的延迟和处理范围的结果),并且可以在模式之间切换。 从连接的系统索引和引用的虚拟索引接收搜索请求结果。

    Processing a system search request by retrieving results from both a native index and a virtual index
    30.
    发明授权
    Processing a system search request by retrieving results from both a native index and a virtual index 有权
    通过从本机索引和虚拟索引检索结果来处理系统搜索请求

    公开(公告)号:US08738587B1

    公开(公告)日:2014-05-27

    申请号:US13951273

    申请日:2013-07-25

    Applicant: Splunk Inc.

    Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

    Abstract translation: 通过分析所接收的搜索请求来识别在搜索支持系统的计算机处接收的搜索请求,以识别请求参数并连接到在请求参数中引用的搜索支持系统的系统索引。 启动外部结果提供程序(ERP)进程,在搜索支持系统和搜索支持系统外部的数据源之间建立通信,为请求参数中引用的虚拟索引。 因此,ERP过程提供了搜索支持系统和外部数据源之间的接口,如第三方。 ERP流程可以以流模式运行(以最少的处理提供实时搜索结果)和/或报告模式(提供更大的延迟和处理范围的结果),并且可以在模式之间切换。 从连接的系统索引和引用的虚拟索引接收搜索请求结果。

Patent Agency Ranking