公开(公告)号：US11663172B2

公开(公告)日：2023-05-30

申请号：US17948037

申请日：2022-09-19

Applicant: Splunk Inc.

Inventor： Aditya Dhoke ,  Shalabh Goyal ,  Megha Lakshminarayan ,  Anish Shrigondekar ,  Ruochen Zhang

IPC: G06F16/182 ,  H04L67/1095 ,  H04L67/1087 ,  G06F9/50 ,  G06F16/901 ,  G06F11/20

CPC classification number: G06F16/1844 ,  G06F9/5077 ,  G06F11/2082 ,  G06F16/9027 ,  H04L67/1089 ,  H04L67/1095

Abstract: Cascading payload replication to target compute nodes is disclosed. Cascading payload replication can be accomplished using a two-stage operation for a replication operation. In the first stage, a plan is generated and distributed for the replication operation. The plan includes an assignment of compute nodes to tree nodes in a tree hierarchy. In the second phase, the payload is distributed according to the plan. The plan is different for at least two replication operations. Thus, the cascading payload replication is adaptable to changing target compute nodes and provides for load balancing.

公开(公告)号：US20230014346A1

公开(公告)日：2023-01-19

申请号：US17933455

申请日：2022-09-19

Applicant: Splunk Inc.

Inventor： Shalabh Goyal ,  Anish Shrigondekar ,  Bhavin Thaker ,  Zhenghui Xie ,  Ruochen Zhang

IPC: G06F9/54 ,  G06F11/34 ,  G06F11/30

Abstract: As an indexer indexes and groups events, it can generate data slices that include events. Based on a slice rollover policy, the indexer can add a particular slice to an aggregate slice. Based on an aggregate slice backup policy, the indexer can store a copy of the aggregate slice to a shared storage system. The aggregate slice can be used for restore purposes in the event the indexer fails or becomes unresponsive.

公开(公告)号：US20210279113A1

公开(公告)日：2021-09-09

申请号：US17237904

申请日：2021-04-22

Applicant: SPLUNK INC.

Inventor： Jag Kerai ,  Anish Shrigondekar ,  Mitchell Blank, JR. ,  Hasan Alayli

IPC: G06F9/50 ,  G06F3/06

Abstract: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on a source type of the plurality of first chunks. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

公开(公告)号：US11016821B2

公开(公告)日：2021-05-25

申请号：US16703236

申请日：2019-12-04

Applicant: SPLUNK INC.

Inventor： Jag Kerai ,  Anish Shrigondekar ,  Mitchell Blank, Jr. ,  Hasan Alayli

IPC: G06F9/50 ,  G06F3/06

Abstract: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

公开(公告)号：US10985970B1

公开(公告)日：2021-04-20

申请号：US16657684

申请日：2019-10-18

Applicant: Splunk Inc.

Inventor： Shalabh Goyal ,  Anish Shrigondekar ,  Bhavin Thaker ,  Zhenghui Xie ,  Ruochen Zhang

IPC: H04L12/24 ,  G06F16/2458 ,  G06F9/451

Abstract: An operational event processor receives information describing operational events arising in relation to a server cluster of a data intake and query system. Responsive actions are identified for the events that are actionable, and those responsive actions are automatically dispatched. Dispatching may include automatically causing the performance of the actions based on remembered preauthorizations, or automatically causing the performance of the actions based on obtaining real time user authorizations. The operational event processor may employ mechanisms to provide extensibility and a high degree of interoperability with other system components.

公开(公告)号：US10942774B1

公开(公告)日：2021-03-09

申请号：US16147262

申请日：2018-09-28

Applicant: Splunk Inc.

Inventor： Bharath Kishore Reddy Aleti ,  Alexandras Batsakis ,  Mitchell Neuman Blank ,  Rama Gopalan ,  Hongxun Liu ,  Anish Shrigondekar

IPC: G06F16/00 ,  G06F9/50 ,  G06F16/22

Abstract: Dynamic reassignment of search processes into workload pools includes receiving a search query to search at least one data store, assigning the search query to a first workload pool, and executing the search query using a first hardware resource in the first workload pool, the first hardware resource corresponding to a first portion of a hardware device. Dynamic reassignment further includes receiving, while executing the search query, an update command to move the search query to a second workload pool, moving, while executing the search query, the search query to the second workload pool; and continuing execution of the search query using a second hardware resource in the second workload pool. The second hardware resource corresponds to a second portion of the hardware device.

公开(公告)号：US20180217874A1

公开(公告)日：2018-08-02

申请号：US15420590

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： Jag Kerai ,  Anish Shrigondekar ,  Mitchell Blank, JR. ,  Hasan Alayli

IPC: G06F9/50 ,  G06F3/06

Abstract: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.