公开(公告)号：US11263229B1

公开(公告)日：2022-03-01

申请号：US16657987

申请日：2019-10-18

Applicant: Splunk Inc.

Inventor： Chandrashekar Basavaiah ,  Jindrich Dinga ,  Elizabeth Li ,  Cary Glen Noel ,  Isabelle Park ,  Eric Tschetter ,  Joshua Walters ,  Mei Chun Yeh

IPC: G06F16/00 ,  G06F16/25 ,  G06F16/245 ,  G06F16/22

Abstract: Systems and methods are disclosed for efficiently detecting alert states within unstructured event data. Alert states are illustratively defined as occurring when a threshold number of journey instances are present within the unstructured event data, each journey instance representing a series of events within the event data representing steps within a pre-defined journey. Detecting journey instances within unstructured event data can require significant computational resources, and thus attempting to detect alert states directly from unstructured event data can lead to inefficiencies. Embodiments of this disclosure enable a structured data set of journey instances to be generated from unstructured event data, and for the structured data set to be evaluated based on criteria of multiple alert states. By utilizing a single structured data set to support evaluation based on multiple alert states, detecting alert states from unstructured event data is rendered more efficient.

公开(公告)号：US11194564B1

公开(公告)日：2021-12-07

申请号：US16398128

申请日：2019-04-29

Applicant: Splunk Inc.

Inventor： Akash Dwivedi ,  Simon Foster Fishel ,  Eric Tschetter ,  Joshua Walters

IPC: G06F9/44 ,  G06F8/65 ,  G06F8/71 ,  H04L29/08 ,  G06F16/245

Abstract: Systems and methods are disclosed for providing a multi-component application, including a first and second component. Functionality of the application may be modified by modification of the first component, potentially without requiring modification of the second component. However, some functionalities added to application may require modifications to both the first and second component. To maintain compatibility between components, the first component can be configured to detect versioning information of a second component, and adjust its functionality to disable functions unavailable due to lack of compatibility with a current version of the second component. The first component can notify an end user of any such lack of compatibility, and potentially instruct the end user in updating the second component.

公开(公告)号：US10719332B1

公开(公告)日：2020-07-21

申请号：US16398125

申请日：2019-04-29

Applicant: Splunk Inc.

Inventor： Akash Dwivedi ,  Simon Foster Fishel ,  Eric Tschetter ,  Joshua Walters

IPC: G06F9/445 ,  G06F8/60 ,  G06F8/65 ,  H04L29/08 ,  G06F16/245 ,  G06F16/248 ,  H04L29/06

Abstract: Systems and methods are disclosed for providing a multi-component application, including a first and second component. A client device may be provisioned with the application in a manner that, from the point of view of an end user, is similar to access a single component application. A user may use a client device to attempt to access a second component to provide the application. The second component can instruct the client device to first obtain a first component from a different network location. The client device can obtain the first component and execute the first component to use the second component, thereby providing the multi-component application. Other than submission of an initial request to access the application, provisioning of the multi-component application may be programmatic and potentially invisible to an end user, thereby providing an experience similar to accessing a single component application.

公开(公告)号：US20190294718A1

公开(公告)日：2019-09-26

申请号：US15936372

申请日：2018-03-26

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park ,  Joshua Walters ,  Eric Tschetter ,  Simon Fishel ,  Horst Werner

IPC: G06F17/30

Abstract: Systems and methods are disclosed for analyzing multiple groups of ordered events having raw machine data associated with a timestamp. The events in a particular group of ordered events can be related based on a common field value for a particular field associated with a pivot identifier. Further, the events in a particular group of ordered events can be categorized based on one or more field values for field associated with a step identifier. One or more visualizations can be generated based on one or more of the groups of ordered events.