公开(公告)号：US20130311427A1

公开(公告)日：2013-11-21

申请号：US13648116

申请日：2012-10-09

Applicant: SPLUNK INC.

Inventor： Vishal Patel ,  Mitchell Neuman Blank, JR. ,  Sundar Rengarajan Vasan ,  Stephen Phillip Sorkin

IPC: G06F17/30

CPC classification number: H04L67/1097 ,  G06F11/2097 ,  G06F17/30312

Abstract: Embodiments are directed towards managing within a cluster environment having a plurality of indexers for data storage using redundancy the data being managed using a generation identifier, such that a primary indexer is designated for a given generation of data. When a master device for the cluster fails, data may continue to be stored using redundancy, and data searches performed may still be performed.

Abstract translation: 实施例旨在在具有多个索引器的集群环境内管理，用于使用生成标识符来管理数据的冗余来进行数据存储，从而为指定的生成数据指定主索引器。 当集群的主设备发生故障时，可以继续使用冗余来存储数据，并且仍然可以执行数据搜索。

公开(公告)号：US08589876B1

公开(公告)日：2013-11-19

申请号：US13910858

申请日：2013-06-05

Applicant: Splunk, Inc.

Inventor： Itay A. Neeman

IPC: G06F9/44

CPC classification number: G06F8/70 ,  G06F8/54

Abstract: A first feature (e.g., chart or table) includes a reference to a dynamic pointer. Independently, the pointer is defined to point to a second feature (e.g., a query). The first feature is automatically updated to reflect a current value of the second feature. The reference to the pointer and pointer definition are recorded in a central registry, and changes to the pointer or second feature automatically cause the first feature to be updated to reflect the change. A mapping between features can be generated using the registry and can identify interrelationships to a developer. Further, changes in the registry can be tracked, such that a developer can view changes pertaining to a particular time period and/or feature of interest (e.g., corresponding to an operation problem).

Abstract translation: 第一特征（例如，图表或表）包括对动态指针的引用。 独立地，指针被定义为指向第二特征（例如，查询）。 第一个功能会自动更新，以反映第二个功能的当前值。 对指针和指针定义的引用被记录在中央注册表中，并且对指针或第二特征的改变自动地使第一特征被更新以反映该变化。 功能之间的映射可以使用注册表生成，并且可以识别开发人员的相互关系。 此外，可以跟踪注册表中的更改，使得开发者可以查看与特定时间段和/或感兴趣的特征相关的改变（例如，对应于操作问题）。

公开(公告)号：US08566336B2

公开(公告)日：2013-10-22

申请号：US13076296

申请日：2011-03-30

Applicant: Amritpal Singh Bath ,  Mitchell Neuman Blank, Jr. ,  Vishal Patel ,  Stephen Phillip Sorkin

Inventor： Amritpal Singh Bath ,  Mitchell Neuman Blank, Jr. ,  Vishal Patel ,  Stephen Phillip Sorkin

IPC: G06F17/30

CPC classification number: G06F17/30144 ,  G06F17/3015 ,  G06F17/30286

Abstract: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

公开(公告)号：US20130247044A1

公开(公告)日：2013-09-19

申请号：US13874448

申请日：2013-04-30

Applicant: SPLUNK INC.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F3/0482 ,  G06F9/45533 ,  G06F11/327 ,  G06F2009/45591 ,  G06T11/206 ,  G06T2200/24

Abstract: Techniques promote monitoring of hypervisor systems by presenting dynamic representations of hypervisor architectures that include performance indicators. A reviewer can interact with the representation to progressively view select lower-levet performance indicators. Higher level performance indicators can be determined based on tower level state assessments. A reviewer can also view historical performance metrics and indicators, which can aid in understanding which configuration changes or system usages may have led to sub-optimal performance.

Abstract translation: 技术通过呈现包含性能指标的虚拟机监控程序架构的动态表示来促进对管理程序系统的监视。 评论者可以与表示进行交互，以逐步查看选择的低级性能指标。 可以根据塔级状态评估来确定更高层次的绩效指标。 审阅者还可以查看历史绩效指标和指标，这有助于了解哪些配置更改或系统使用可能导致次优性能。

公开(公告)号：US20130060937A1

公开(公告)日：2013-03-07

申请号：US13662315

申请日：2012-10-26

Applicant: SPLUNK INC.

Inventor： Amritpal Singh Bath ,  Mitchell Neuman Blank, JR. ,  Vishal Patel ,  Stephen Phillip Sorkin

IPC: G06F11/30

CPC classification number: G06F16/21 ,  G06F16/1734

Abstract: Embodiments are directed towards a dynamic change evaluation mechanism, whereby items having a detected possible change are scheduled for re-evaluation for possible changes at a higher frequency than items detected to not have previously changed, while those items detected as not to have changed are dynamically scheduled for re-evaluation based on an evaluation backlog that may be in turn based, in part, on a time from when an item is assigned an expiration time to when the item is evaluated. In one embodiment, a possibly changed item may be assigned a new expiration time independent of the evaluation backlog. In another embodiment, if no change is detected, then the item may be assigned a new expiration time as a function of a previous expiration time and on the evaluation backlog.

Abstract translation: 实施例针对动态变化评估机制，由此调度具有检测到的可能变化的项目，以便以比检测到的未被改变的项目更高的频率重新评估可能的改变，而被检测为未改变的那些项目是动态的 计划根据评估积压进行重新评估，该评估积压部分可以部分地基于从物品被分配到期时间到评估物品的时间。 在一个实施例中，可以为可能改变的项目分配与评估积压无关的新的期满时间。 在另一个实施例中，如果没有检测到改变，则可以将该项目分配为作为先前的到期时间的函数的新的期满时间，以及评估积压。

公开(公告)号：US20130054660A1

公开(公告)日：2013-02-28

申请号：US13660874

申请日：2012-10-25

Applicant: Splunk Inc.

Inventor： Steve Yu Zhang

IPC: G06F17/18

CPC classification number: G06F17/18 ,  G06F7/22 ,  G06F7/483 ,  G06F7/544 ,  G06F17/30536 ,  G06K9/6222

Abstract: A method, system, and processor-readable storage medium are directed towards calculating approximate order statistics on a collection of real numbers. In one embodiment, the collection of real numbers is processed to create a digest comprising hierarchy of buckets. Each bucket is assigned a real number N having P digits of precision and ordinality O. The hierarchy is defined by grouping buckets into levels, where each level contains all buckets of a given ordinality. Each individual bucket in the hierarchy defines a range of numbers—all numbers that, after being truncated to that bucket's P digits of precision, are equal to that bucket's N. Each bucket additionally maintains a count of how many numbers have fallen within that bucket's range. Approximate order statistics may then be calculated by traversing the hierarchy and performing an operation on some or all of the ranges and counts associated with each bucket.

Abstract translation: 方法，系统和处理器可读存储介质被引导以计算关​​于实数集合的近似顺序统计。 在一个实施例中，处理实数的集合以创建包括桶的层次结构的摘要。 每个桶被分配一个具有精确度和序数O的P位数的实数N.层次结构通过将桶分组为级别来定义，其中每个级别包含给定序数的所有桶。 层次结构中的每个单独的桶定义了一个数字范围 - 所有数字在被截断到该桶的P位精度之后都等于该桶的N。每个桶还保留有多少数量落在该桶的范围内的数量 。 然后可以通过遍历层级并对与每个桶相关联的一些或全部范围和计数执行操作来计算近似订单统计。

公开(公告)号：US20120254207A1

公开(公告)日：2012-10-04

申请号：US13076296

申请日：2011-03-30

Applicant: Amritpal Singh Bath ,  Mitchell Neuman Blank, JR. ,  Vishal Patel ,  Stephen Phillip Sorkin

Inventor： Amritpal Singh Bath ,  Mitchell Neuman Blank, JR. ,  Vishal Patel ,  Stephen Phillip Sorkin

IPC: G06F17/30

CPC classification number: G06F17/30144 ,  G06F17/3015 ,  G06F17/30286

Abstract: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

Abstract translation: 实施例涉及管理和跟踪多个项目的项目识别以确定项目是否是新的或现有的项目，其中已经预先处理了现有项目。 在一些实施例中，可以生成两个或多个项目标识符。 在一个实施例中，生成两个或多个项目标识符可以包括使用小项目尺寸特征，压缩项目或标识符冲突来分析项目。 可以使用两个或更多个项目标识符来确定该项目是新的还是现有的项目。 在一个实施例中，两个或多个项目标识符可以与关于现有项目的记录进行比较，以确定该项目是新项目还是现有项目。 如果项目是现有项目，则可以进一步处理该项目以确定现有项目是否已经实际改变。

公开(公告)号：US12271428B1

公开(公告)日：2025-04-08

申请号：US17816337

申请日：2022-07-29

Applicant: Splunk Inc.

Inventor： Christopher Bolognese ,  Finlay Cannon ,  Eli Clein ,  Umesh Dinkar ,  Thomas Haggie ,  Barbara Janczer ,  Elizabeth Li ,  Clark Eugene Mullen ,  Viet Quoc Nguyen ,  Faya Peng ,  Ioan Popa ,  Abid Salahi ,  Keng-Ming Sheu ,  Tulika Thakur ,  Justin Lew ,  Jonathan Ng ,  Jacob Sebastian Stark

IPC: G06F16/904 ,  G06F3/04845 ,  G06F16/903

Abstract: A system generates a user interface that enables a user to interact with an interactive chart associated with a statement of a data processing package. Via one or more user interactions with the user interface, the system may receive one or more chart parameters for the chart. Using a statement from the data processing package and the one or more chart parameters, the system may generate an additional statement and append the generated statement to the data processing package to form an enriched data processing package. The system may communicate the enriched data processing package to a search service for execution. The system may display the results in the chart.

公开(公告)号：US12265525B2

公开(公告)日：2025-04-01

申请号：US18428428

申请日：2024-01-31

Applicant: Splunk Inc.

Inventor： Brent Davis ,  David Johns DeWitt ,  Derek Feriancek ,  Venkatasubramanian Jayaraman ,  Vinay Manivel ,  Christopher Ogle ,  Balaji Rao

IPC: G06F16/22 ,  G06F16/24 ,  G06F16/242 ,  G06F16/245 ,  G06F16/2453 ,  G06F16/2458

Abstract: A query coordinator can receive a query and identify a first portion of the query to be processed by a first data processing system and a second portion of the query to be processed by a second data processing system. The query coordinator can obtain a modified query based on identifying the first portion and the second portion of the query. The query coordinator can define a query processing scheme according to the modified query and provide the query processing scheme to the second data processing system. Based on providing the query processing scheme, the query coordinator can obtain an output of the second data processing system. The query coordinator can identify a second query based on the output and provide the second query to a component of the first data processing system.

公开(公告)号：US12254019B2

公开(公告)日：2025-03-18

申请号：US18160972

申请日：2023-01-27

Applicant: Splunk Inc.

Inventor： Vladimir A. Shcherbakov ,  Stewart Smith ,  Nicholas Matthew Tankersley ,  Junyu Wang ,  Peter Wu

IPC: G06F16/30 ,  G06F16/248 ,  G06F16/26 ,  G06F3/04817 ,  G06F3/0482

Abstract: Systems and methods are described to determine relationships between one or more components of an isolated execution environment system based on data obtained from a data intake and query system. Based on the determined relationships, an interactive visualization is generated that indicates the hierarchical relationship of the components. In some cases, to illustrate the relationship between components of the isolated execution environment system, the visualization can include one or more display objects displayed in a subordinate or superior relationship to other display objects. In certain cases, based on an interaction with a display object, the system can generate a query and/or display additional information and/or visualizations based on the results of the query.