公开(公告)号：US10528607B2

公开(公告)日：2020-01-07

申请号：US15223598

申请日：2016-07-29

Applicant: SPLUNK INC.

Inventor： Jindrich Dinga ,  Yuan Xie ,  Katherine Kyle Feeney ,  Jesse Miller

IPC: G06F9/44 ,  G06F16/33 ,  G06F8/33 ,  G06F11/30

Abstract: Various approaches for automating code completion are described herein. More particularly, approaches are provided that automatically generate coded commands of a coding language (i.e., code) that function and operate as intended by the user. As the user codes the commands, such approaches assist a user in various ways. For example, such automated assistance provides the user an understanding of various coding options available in the coding language. The assistance also enforces the proper employment of the available coding options, as well as provides an understanding of the functionality of the generated code. Automating code completion provides various benefits to the user, such as decreasing the time the user spends generating code, increasing the likelihood that the generated code functions and operates on a system as intended, and reducing the number of code versions required to be executed or compiled by the system.

公开(公告)号：US20200007561A1

公开(公告)日：2020-01-02

申请号：US16568106

申请日：2019-09-11

Applicant: Splunk Inc.

Inventor： Sudhakar Muddu ,  Christos Tryfonas

IPC: H04L29/06 ,  G06N20/00 ,  G06F16/25 ,  G06F16/28 ,  G06F16/44 ,  G06F16/901 ,  G06F16/2457 ,  H04L12/26 ,  G06N7/00 ,  G06F3/0482 ,  G06K9/20 ,  G06F3/0484 ,  H04L12/24 ,  G06F17/22 ,  G06N5/04 ,  G06N5/02

Abstract: A security platform employs a variety techniques and mechanisms to detect security related anomalies and threats in a computer network environment. The security platform is “big data” driven and employs machine learning to perform security analytics. The security platform performs user/entity behavioral analytics (UEBA) to detect the security related anomalies and threats, regardless of whether such anomalies/threats were previously known. The security platform can include both real-time and batch paths/modes for detecting anomalies and threats. By visually presenting analytical results scored with risk ratings and supporting evidence, the security platform enables network security administrators to respond to a detected anomaly or threat, and to take action promptly.

公开(公告)号：US20200004794A1

公开(公告)日：2020-01-02

申请号：US16570545

申请日：2019-09-13

Applicant: Splunk Inc.

Inventor： Sourav Pal ,  Christopher Madden Pride ,  Arindam Bhattacharjee ,  Xiaowei Wang ,  James Alasdair Robert Hodge ,  Mustafa Ahamed

IPC: G06F16/951 ,  G06F16/21 ,  G06F16/25 ,  G06F16/904 ,  G06F16/901 ,  G06F16/9038 ,  G06F16/903 ,  G06F16/248 ,  G06F16/2458 ,  G06F16/27 ,  G06F16/2455

Abstract: Disclosed is a technique that can be performed in a distributed computer network. The technique can include a data index and query system that receives a search query, defines a search scheme for applying the search query on distributed data storage systems including an internal data storage system of the data index and query system and an external data storage system. The internal data storage system stores data as time-indexed events including respective segments of raw machine data. The data index and query system can transfer a portion of the search scheme to a search service, which can return search results obtained by application of the search scheme to the distributed data storage systems including the internal data storage system and the external data storage system. Lastly, the search results or data indicative of the search results can be output on a display device to the user.

公开(公告)号：US20190391990A1

公开(公告)日：2019-12-26

申请号：US16560001

申请日：2019-09-04

Applicant: SPLUNK INC.

Inventor： Geoffrey R. Hendrey

IPC: G06F16/29 ,  G09G5/00 ,  G09G5/02

Abstract: A system that displays geographic data is disclosed. The system obtains polygons that define a set of geographic regions. Then, the system projects rays from endpoints of the line segments that define the polygons onto a reference line to form intersection points. For each interval between pairs of consecutive intersection points on the reference line, the system keeps track of open line segments that project onto the interval. For each data point in a set of data points, the system identifies a relevant interval on the reference line that the data point projects onto, and performs a crossing number operation to identify polygons that the data point falls into, and the system increments a count for each polygon that the data point falls into. Finally, the system displays the set of geographic regions in a manner that indicates a number of data points that fall into each geographic region.

公开(公告)号：US10515096B1

公开(公告)日：2019-12-24

申请号：US15582689

申请日：2017-04-29

Applicant: Splunk Inc.

Inventor： Hemendra Singh Choudhary ,  Tristan Antonio Fletcher ,  Ross Andrew Lazerowitz ,  Vineetha Bettaiah

IPC: G06F16/28 ,  G06F3/0482 ,  G06F17/24 ,  G06F16/2457

Abstract: The operation of an automatic service monitoring system (SMS) is directed by stored control information. Methods and mechanisms are provided to create control information that directs operations of the SMS regarding the grouping together of related notable events for unified display and processing. The methods and mechanisms include interfacing with a user for selection of similarity scoring regimes for association with a particular field that are engaged for event grouping. The control information directs grouping operations that automatically correlate the events without requiring, for example, a set of declarative grouping rules.

公开(公告)号：US20190387007A1

公开(公告)日：2019-12-19

申请号：US16547235

申请日：2019-08-21

Applicant: Splunk Inc.

Inventor： Sudhakar Muddu ,  Christos Tryfonas ,  Ravi Prasad Bulusu

IPC: H04L29/06 ,  G06N20/00 ,  G06F16/25 ,  G06F16/28 ,  G06F16/44 ,  G06F16/901 ,  G06F16/2457 ,  H04L12/26 ,  G06N7/00 ,  G06F3/0482 ,  G06K9/20 ,  G06F3/0484 ,  H04L12/24 ,  G06F17/22 ,  G06N5/04 ,  G06N5/02

Abstract: A security platform employs a variety techniques and mechanisms to detect security related anomalies and threats in a computer network environment. The security platform is “big data” driven and employs machine learning to perform security analytics. The security platform performs user/entity behavioral analytics (UEBA) to detect the security related anomalies and threats, regardless of whether such anomalies/threats were previously known. The security platform can include both real-time and batch paths/modes for detecting anomalies and threats. By visually presenting analytical results scored with risk ratings and supporting evidence, the security platform enables network security administrators to respond to a detected anomaly or threat, and to take action promptly.

公开(公告)号：US20190356676A1

公开(公告)日：2019-11-21

申请号：US16528397

申请日：2019-07-31

Applicant: Splunk Inc.

Inventor： Brian Luger

IPC: H04L29/06

Abstract: Techniques and mechanisms are disclosed enabling efficient collection of forensic data from client devices, also referred to herein as endpoint devices, of a networked computer system. Embodiments described herein further enable correlating forensic data with other types of non-forensic data from other data sources. A network security application described herein further enables generating various dashboards, visualizations, and other interfaces for managing forensic data collection, and displaying information related to collected forensic data and information related to identified correlations between items of forensic data and other items of non-forensic data.

公开(公告)号：US10482493B2

公开(公告)日：2019-11-19

申请号：US16126294

申请日：2018-09-10

Applicant: Splunk, Inc.

Inventor： Brian Gabriel Nash ,  Andrew Hoy Stein

IPC: H04W4/02 ,  G06Q30/02 ,  G01S5/02 ,  G06Q20/32 ,  H04L29/08

Abstract: Embodiments are disclosed for a method that may include accessing events in a field-searchable data store. The events may include raw machine data associated with a timestamp. The raw machine data may represent interactions between a mobile device and one or more network devices at a locale. The method may further include determining, based on the interactions, one or more geographic positions of the mobile device, and calculating a metric for the locale using the geographic positions.

公开(公告)号：US10467263B2

公开(公告)日：2019-11-05

申请号：US15665247

申请日：2017-07-31

Applicant: SPLUNK, Inc.

Inventor： Geoffrey R. Hendrey

IPC: G06F16/29 ,  G09G5/00 ,  G09G5/02

Abstract: A system that displays geographic data is disclosed. The system obtains polygons that define a set of geographic regions. Then, the system projects rays from endpoints of the line segments that define the polygons onto a reference line to form intersection points. For each interval between pairs of consecutive intersection points on the reference line, the system keeps track of open line segments that project onto the interval. For each data point in a set of data points, the system identifies a relevant interval on the reference line that the data point projects onto, and performs a crossing number operation to identify polygons that the data point falls into, and the system increments a count for each polygon that the data point falls into. Finally, the system displays the set of geographic regions in a manner that indicates a number of data points that fall into each geographic region.

公开(公告)号：US20190334764A1

公开(公告)日：2019-10-31

申请号：US16049730

申请日：2018-07-30

Applicant: Splunk Inc.

Inventor： Jesse Chor

IPC: H04L12/24

Abstract: Machine data reflecting operation of a monitored system is ingested and made available for search by a data intake and query system (DIQS). A monitoring function may search the data ingested by the DIQS to determine instances of notable events in regards to the monitored system and may further determine a defined invokable action message (IAM) associated with a notable event instance. Processing ensues to send an IAM to a communications device used by support personnel. The IAM includes information about an action invocation message (AIM) suitable to cause the performance of an action that possibly remedies or improves an operational condition represented by the notable event. Support personnel engages a user interface representation corresponding to the AIM and the AIM is sent to a remedial node where performance of the action is invoked.