Using indexers from multiple systems

    公开(公告)号:US11748394B1

    公开(公告)日:2023-09-05

    申请号:US17812216

    申请日:2022-07-13

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/35 G06F16/328

    Abstract: In embodiments, at a first cluster, information identifying a plurality of indexers of the first cluster is determined based on a master node of the first cluster identifying active indexers within the first cluster. The information is transmitted from the first cluster to a second cluster. Such information can include a list of active indexers, and an indication of how to communicate with the plurality of indexers that is used by the second cluster in distributing a distributed search query. The distributed search query is received at the plurality of indexers of the first cluster. The distributed search query is distributed across the plurality of indexers based on the information identifying the plurality of indexers. A response is provided from at least one of the plurality of indexers, wherein each response from a respective indexer is generated based on an evaluation of the distributed search query.

    Multi-site cluster-based data intake and query systems

    公开(公告)号:US11436268B2

    公开(公告)日:2022-09-06

    申请号:US15967478

    申请日:2018-04-30

    Applicant: SPLUNK INC.

    Abstract: The various embodiments describe multi-site cluster-based data intake and query systems, including cloud-based data intake and query systems. Using a hybrid search system that includes cloud-based data intake and query systems working in concert with so-called “on-premises” data intake and query systems can promote the scalability of search functionality. In addition, the hybrid search system can enable data isolation in a manner in which sensitive data is maintained “on premises” and information or data that is not sensitive can be moved to the cloud-based system. Further, the cloud-based system can enable efficient leveraging of data that may already exist in the cloud. In addition, various embodiments enable configuration data associated with search functionality to be shared amongst clusters in a manner that promotes cluster security. Specifically, a shared data store can be utilized to store configuration information such that when a particular cluster wishes to use the configuration information, it simply retrieves the configuration information from the shared data store, thus avoiding direct communication with other clusters. Although the invention has been described in language specific to structural features and/or methodological acts, it is to be understood that the invention defined in the appended claims is not necessarily limited to the specific features or acts described. Rather, the specific features and acts are disclosed as example forms of implementing the claimed invention.

    Sharing Configuration Information for Searches in Data Intake and Query Systems
    37.
    发明申请
    Sharing Configuration Information for Searches in Data Intake and Query Systems 审中-公开
    共享配置信息,用于数据访问和查询系统中的搜索

    公开(公告)号:US20160092570A1

    公开(公告)日:2016-03-31

    申请号:US14526500

    申请日:2014-10-28

    Applicant: Splunk Inc.

    CPC classification number: G06F17/30864 H04L67/10 H04W4/60

    Abstract: Various embodiments describe multi-site cluster-based data intake and query systems, including cloud-based data intake and query systems. Using a hybrid search system that includes cloud-based data intake and query systems working in concert with so-called “on-premises” data intake and query systems can promote the scalability of search functionality. In addition, the hybrid search system can enable data isolation in a manner in which sensitive data is maintained “on premises” and information or data that is not sensitive can be moved to the cloud-based system. Further, the cloud-based system can enable efficient leveraging of data that may already exist in the cloud.

    Abstract translation: 各种实施例描述了基于多站点集群的数据采集和查询系统,包括基于云的数据采集和查询系统。 使用混合搜索系统,包括基于云的数据采集和与所谓的“本地”数据采集和查询系统协同工作的查询系统,可以提高搜索功能的可扩展性。 此外,混合搜索系统可以以敏感数据维护“在场所”的方式启用数据隔离,并且不敏感的信息或数据可以移动到基于云的系统。 此外,基于云的系统可以有效利用云中可能存在的数据。

Patent Agency Ranking