公开(公告)号：US10419528B2

公开(公告)日：2019-09-17

申请号：US15799682

申请日：2017-10-31

Applicant: SPLUNK INC.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F15/177 ,  H04L29/08 ,  G06F16/00 ,  G06F11/00 ,  G06F9/46 ,  G06F11/34

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may further include determining that a dual-queue node assigned to the entity is uninstantiated on the data service. As a result, a dual-queue node associated with the entity may be instantiated on the data service. The dual-queue node may be instantiated by initializing a live data queue, of the dual-queue node, in which to place the live data for processing and a stale data queue, of the dual-queue node, in which to store a persistent backup of the live data. The method may then route the live data to the dual-queue node. The dual-queue node may then process the live data. Additional embodiments are described and/or claimed.

公开(公告)号：US09838467B2

公开(公告)日：2017-12-05

申请号：US14699984

申请日：2015-04-29

Applicant: SPLUNK INC.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F15/167 ,  H04L29/08 ,  G06F17/30 ,  G06F11/00 ,  G06F9/46

CPC classification number: H04L67/10 ,  G06F9/46 ,  G06F11/00 ,  G06F11/3409 ,  G06F11/3442 ,  G06F11/3452 ,  G06F17/30 ,  G06F2201/81 ,  G06F2201/86 ,  G06F2201/87

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may further include determining that a dual-queue node assigned to the entity is uninstantiated on the data service. As a result, a dual-queue node associated with the entity may be instantiated on the data service. The dual-queue node may be instantiated by initializing a live data queue, of the dual-queue node, in which to place the live data for processing and a stale data queue, of the dual-queue node, in which to store a persistent backup of the live data. The method may then route the live data to the dual-queue node. The dual-queue node may then process the live data. Additional embodiments are described and/or claimed.

公开(公告)号：US09838346B2

公开(公告)日：2017-12-05

申请号：US14699996

申请日：2015-04-29

Applicant: SPLUNK INC.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F15/16 ,  H04L12/58 ,  G06Q10/06 ,  G06Q10/10

CPC classification number: H04L43/062 ,  G06F11/1464 ,  G06F2201/805 ,  G06Q10/06 ,  G06Q10/10 ,  H04L49/90 ,  H04L51/18 ,  H04L51/34

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may then route the live data to a dual-queue system of the data service. The live data may be loaded into a live data queue of the dual queue system for processing. Processing may entail generating summary statistics from the live data. An alert may then be transmitted to the customer in response to detecting the occurrence of one or more alert events. In embodiments, the alert events may include events identified in the summary statistics. Additional embodiments are described and/or claimed.

公开(公告)号：US20170237683A1

公开(公告)日：2017-08-17

申请号：US15493073

申请日：2017-04-20

Applicant: Splunk Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos ,  Vassilis Karampinas ,  Maria Nasioti

IPC: H04L12/911 ,  H04L29/08 ,  G06F17/30 ,  H04L12/24

CPC classification number: H04L47/745 ,  G06F16/2477 ,  G06F16/248 ,  G06F16/9535 ,  H04L41/069 ,  H04L41/0806 ,  H04L67/02 ,  H04L67/025 ,  H04L67/36

Abstract: A system of dynamically-instantiated data server components provides access to a data repository. Different data server components are assigned to different data collections in the repository. A distribution component receives messages and, based on data collection identifiers associated with the messages, routes the messages to corresponding data server components. Based on the messages, the data server components perform data operations with respect to their corresponding data collections. Data server components may be terminated when their assigned data collections are not in use. When an incoming message is associated with a data collection for which no data server component exists, the distribution component dynamically instantiates a new data server component for the data collection. In an embodiment, data server components make working copies of their respectively assigned data collections in a high-speed memory. By terminating inactive data server components, the system makes room in the memory for active data collections.

公开(公告)号：US09660930B2

公开(公告)日：2017-05-23

申请号：US14686669

申请日：2015-04-14

Applicant: Splunk Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos ,  Vassilis Karampinas ,  Maria Nasioti

IPC: G06F15/173 ,  H04L12/911 ,  H04L12/24 ,  H04L29/08

CPC classification number: H04L47/745 ,  G06F17/30551 ,  G06F17/30554 ,  G06F17/30867 ,  H04L41/069 ,  H04L41/0806 ,  H04L67/02 ,  H04L67/025 ,  H04L67/36

Abstract: A system of dynamically-instantiated data server components provides access to a data repository. Different data server components are assigned to different data collections in the repository. A distribution component receives messages and, based on data collection identifiers associated with the messages, routes the messages to corresponding data server components. Based on the messages, the data server components perform data operations with respect to their corresponding data collections. Data server components may be terminated when their assigned data collections are not in use. When an incoming message is associated with a data collection for which no data server component exists, the distribution component dynamically instantiates a new data server component for the data collection. In an embodiment, data server components make working copies of their respectively assigned data collections in a high-speed memory. By terminating inactive data server components, the system makes room in the memory for active data collections.