Efficient updating of journey instances detected within unstructured event data

    公开(公告)号:US11726990B2

    公开(公告)日:2023-08-15

    申请号:US17451300

    申请日:2021-10-18

    Applicant: Splunk Inc.

    Abstract: Systems and methods are disclosed for efficiently storing information identifying journey instances within unstructured event data of a data intake and processing system. Each journey instance is illustratively associated with a series of events within the unstructured event data occurring over a journey duration. Because the unstructured event data may be constantly updated, any given inspection of the event data may yield both complete and incomplete instances. Storage of instance data over time can require updating of prior incomplete journey instances with complete versions of such instance detected at a later point in time. However, a data store of the unstructured event data may be unsuited for such updating, as the store may maintain version information for deleted data to reduce possibility of data loss. To address this issue, a separate structured data store, such as a columnar time series data store, is provided to efficiently store instance information.

    Visualizing outliers from timestamped event data using machine learning-based models

    公开(公告)号:US11720824B1

    公开(公告)日:2023-08-08

    申请号:US17969538

    申请日:2022-10-19

    Applicant: Splunk Inc.

    CPC classification number: G06N20/00 G06F16/9038 G06F17/18

    Abstract: Techniques are described for providing a machine learning (ML) data analytics application including guided ML workflows that facilitate the end-to-end training and use of various types of ML models, where such guided workflows may also be referred to as ML “experiments.” One such model is an outlier detection model to assist in the monitoring of computer network traffic and computer performance. For example, the ML data analytics application may generate an outlier detection model using user-identified data from a data source and parameter information. The generates outlier detection model can include distribution functions of distribution types selected from a plurality of distribution types by a distribution fitting algorithm.

    Virtual metrics
    544.
    发明授权

    公开(公告)号:US11720591B1

    公开(公告)日:2023-08-08

    申请号:US17390767

    申请日:2021-07-30

    Applicant: Splunk Inc.

    CPC classification number: G06F16/26 G06F16/245 G06F16/248

    Abstract: Various aspects of the subject technology relate to systems, methods, and machine-readable media for visualizing performance data of infrastructure components. The method includes receiving a query through an application for a metric for an infrastructure component, the metric comprising metric time series (MTS) data. The method also includes identifying sources for the metric. The method also includes querying the identified sources for the metric. The method also includes selecting from the identified sources best available data for the metric based on a selection algorithm. The method also includes enriching the best available data comprising linking dimensions and properties from the identified sources to the best available data. The method also includes causing display of the enriched best available data through a user interface of the application.

    Information technology and security application automation architecture

    公开(公告)号:US11714683B1

    公开(公告)日:2023-08-01

    申请号:US17163320

    申请日:2021-01-29

    Applicant: Splunk Inc.

    Abstract: A playbook execution architecture used to efficiently execute playbooks by distributing the execution of playbook function blocks to multiple independent “worker” sub-processes is described. Each worker process hosts an independent execution environment used to execute playbook function blocks independently from other worker processes, where each worker process can host an execution environment that is the same as or different from execution environments hosted by other work processes, enabling the playbook execution engine to support function blocks written in multiple different programming language versions or programming languages entirely. The described playbook execution architecture enables an IT and security operations application to vertically scale the computing resources used to execute playbooks, provides users with more control over an amount of computing resources devoted to the execution of playbooks, and enables more expressiveness in the types of actions and efficiency of playbooks by providing support for multiple programming languages and programming language versions.

Patent Agency Ranking