公开(公告)号：US10353957B2

公开(公告)日：2019-07-16

申请号：US15421370

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： Brian Bingham ,  Tristan Fletcher ,  Alok Anant Bhide

IPC: G06F16/9038 ,  G06F16/26 ,  G06F11/32 ,  G06F11/34 ,  G06F9/455 ,  G06F16/901 ,  G06F16/903 ,  G06F3/0482 ,  G06F3/0488 ,  G06F16/9032

Abstract: The disclosed system and method acquire and store performance measurements relating to performance of a component in an information technology (IT) environment and log data produced by the IT environment, in association with corresponding time stamps. The disclosed system and method correlate at least one of the performance measurements with at least one of the portions of log data.

公开(公告)号：US10225136B2

公开(公告)日：2019-03-05

申请号：US15421353

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： Brian Bingham ,  Tristan Fletcher ,  Alok Anant Bhide

IPC: G06F11/32 ,  G06F11/34 ,  G06F9/455 ,  H04L12/24

Abstract: The disclosed system and method acquire and store performance measurements relating to performance of a component in an information technology (IT) environment and log data produced by the IT environment, in association with corresponding time stamps. The disclosed system and method correlate at least one of the performance measurements with at least one of the portions of log data.

公开(公告)号：US09807192B1

公开(公告)日：2017-10-31

申请号：US15582542

申请日：2017-04-28

Applicant: Splunk Inc.

Inventor： Tristan Fletcher ,  Brian Bingham

IPC: H04L29/08 ,  G06F9/48 ,  G06F9/50 ,  G06F17/30 ,  H04L29/06

CPC classification number: H04L67/2861 ,  G06F9/4881 ,  G06F9/5005 ,  G06F9/5011 ,  G06F9/5033 ,  G06F9/505 ,  G06F9/54 ,  G06F17/30619 ,  G06F17/30675 ,  H04L63/08

Abstract: A scheduler manages execution of a plurality of data-collection jobs, assigns individual jobs to specific forwarders in a set of forwarders, and generates and transmits tokens (e.g., pairs of data-collection tasks and target sources) to assigned forwarders. The forwarder uses the tokens, along with stored information applicable across jobs, to collect data from the target source and forward it onto an indexer for processing. For example, the indexer can then break a data stream into discrete events, extract a timestamp from each event and index (e.g., store) the event based on the timestamp. The scheduler can monitor forwarders' job performance, such that it can use the performance to influence subsequent job assignments. Thus, data-collection jobs can be efficiently assigned to and executed by a group of forwarders, where the group can potentially be diverse and dynamic in size.

公开(公告)号：US09495187B2

公开(公告)日：2016-11-15

申请号：US13874448

申请日：2013-04-30

Applicant: Splunk Inc.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455 ,  G06F3/048 ,  G06F11/32

CPC classification number: G06F9/45558 ,  G06F3/0482 ,  G06F9/45533 ,  G06F11/327 ,  G06F2009/45591 ,  G06T11/206 ,  G06T2200/24

Abstract: Techniques promote monitoring of hypervisor systems by presenting dynamic representations of hypervisor architectures that include performance indicators. A reviewer can interact with the representation to progressively view select lower-level performance indicators. Higher level performance indicators can be determined based on tower level state assessments. A reviewer can also view historical performance metrics and indicators, which can aid in understanding which configuration changes or system usages may have led to sub-optimal performance.

Abstract translation: 技术通过呈现包含性能指标的虚拟机监控程序架构的动态表示来促进对管理程序系统的监视。 评论者可以与表示进行交互，以逐步查看选择的较低级别的绩效指标。 可以根据塔级状态评估来确定更高层次的绩效指标。 审阅者还可以查看历史绩效指标和指标，这有助于了解哪些配置更改或系统使用可能导致次优性能。

公开(公告)号：US20160216855A1

公开(公告)日：2016-07-28

申请号：US15014017

申请日：2016-02-03

Applicant: Splunk Inc.

Inventor： Hemendra Singh Choudhary ,  Tristan Antonio Fletcher ,  Brian Bingham ,  Fang I. Hsiao ,  Brian C. Reyes

IPC: G06F3/0482 ,  G06F3/0484

CPC classification number: H04L43/16 ,  G06F3/0481 ,  G06F3/04817 ,  G06F3/0482 ,  G06F3/0484 ,  G06F3/04842 ,  G06F3/04847 ,  G06F9/542 ,  G06F11/321 ,  G06F11/34 ,  G06F17/30424 ,  G06F17/30463 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/3056 ,  G06F17/30572 ,  G06F17/30675 ,  G06F17/30864 ,  G06F17/30867 ,  G06F17/30958 ,  G06F17/30964 ,  G06F17/30979 ,  G06F17/30991 ,  G06Q10/06393 ,  G06T11/206 ,  G06T2200/24 ,  H04L29/08072 ,  H04L41/0213 ,  H04L41/0806 ,  H04L41/22 ,  H04L41/5009 ,  H04L41/5032 ,  H04L41/5035 ,  H04L41/5038 ,  H04L43/04 ,  H04L43/045 ,  H04L67/10 ,  H04L67/16 ,  Y04S10/54

Abstract: A service monitoring system executing on one or more processors may have operations that are determined by control information. Control over the operation of the service monitoring system can be exerted through the use of a graphical interface. The graphical interface may present the control information of a new or existing correlation search definition for user interaction. The service monitoring system may maintain a data store of key performance indicator (KPI) data, where a KPI value in the data store is produced by a KPI-defining search query that derives the value from machine data associated with one or more entities that perform a monitored service. A correlation search definition of the service monitoring system determines how a search of the KPI data is conducted, how its data is evaluated to determine whether a triggering condition has been met, and, if so, determines what triggered action is to be initiated.

Abstract translation: 在一个或多个处理器上执行的服务监视系统可以具有由控制信息确定的操作。 可以通过使用图形界面来实现对服务监视系统的操作的控制。 图形界面可以呈现用于用户交互的新的或现有的相关搜索定义的控制信息。 服务监视系统可以维护关键性能指标（KPI）数据的数据存储，其中数据存储器中的KPI值由KPI限定搜索查询产生，该搜索查询从与执行的一个或多个实体相关联的机器数据获得值 受监控的服务。 服务监控系统的相关搜索定义确定如何进行KPI数据的搜索，如何对其数据进行评估以确定触发条件是否已被满足，如果是，则确定触发的动作将被启动。

公开(公告)号：US20160105330A1

公开(公告)日：2016-04-14

申请号：US14611200

申请日：2015-01-31

Applicant: Splunk Inc.

Inventor： Hemendra Singh Choudhary ,  Tristan Antonio Fletcher ,  Brian Bingham ,  Fang I. Hsiao ,  Brian C. Reyes

IPC: H04L12/24 ,  G06F3/0484 ,  G06F3/0482 ,  H04L12/26 ,  G06F17/30

CPC classification number: H04L43/16 ,  G06F3/0481 ,  G06F3/04817 ,  G06F3/0482 ,  G06F3/0484 ,  G06F3/04842 ,  G06F3/04847 ,  G06F9/542 ,  G06F17/30424 ,  G06F17/30463 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/3056 ,  G06F17/30572 ,  G06F17/30675 ,  G06F17/30864 ,  G06F17/30867 ,  G06F17/30958 ,  G06F17/30964 ,  G06F17/30979 ,  G06F17/30991 ,  G06Q10/06393 ,  G06T11/206 ,  G06T2200/24 ,  H04L29/08072 ,  H04L41/0213 ,  H04L41/0806 ,  H04L41/22 ,  H04L41/5009 ,  H04L41/5032 ,  H04L41/5035 ,  H04L41/5038 ,  H04L43/04 ,  H04L43/045 ,  H04L67/10 ,  H04L67/16

Abstract: One or more processing devices cause display of a graphical user interface (GUI) that includes a correlation search portion that enables a user to specify information for a key performance indicator (KPI) correlation search definition. The KPI correlation search definition includes search information and trigger determination information. The search information identifies KPI values, indicative of the KPI states, in a data store. The trigger determination information includes trigger criteria. The trigger determination evaluates the identified KPI values using the trigger criteria to determine whether to cause a defined action. A contribution threshold for a particular KPI definition is received via the GUI. The contribution threshold corresponds to a particular KPI state. The contribution threshold is stored as trigger criteria information. Each of the KPI values is derived from machine data pertaining to entities identified in a service definition using a search query specified by a KPI definition for the service.

Abstract translation: 一个或多个处理设备引起显示图形用户界面（GUI），该图形用户界面（GUI）包括能够使用户指定关键性能指标（KPI）相关搜索定义的信息的相关搜索部分。 KPI相关搜索定义包括搜索信息和触发确定信息。 搜索信息在数据存储中标识表示KPI状态的KPI值。 触发判定信息包括触发准则。 触发确定使用触发条件来评估所识别的KPI值，以确定是否导致定义的动作。 通过GUI接收特定KPI定义的贡献阈值。 贡献阈值对应于特定的KPI状态。 贡献阈值被存储为触发条件信息。 每个KPI值都是从使用由服务的KPI定义指定的搜索查询在服务定义中标识的实体的机器数据中导出的。

公开(公告)号：US20160103878A1

公开(公告)日：2016-04-14

申请号：US14815888

申请日：2015-07-31

Applicant: Splunk, Inc.

Inventor： Brent Boe ,  Brian Bingham ,  John Robert Coates ,  Tristan Antonio Fletcher

IPC: G06F17/30 ,  G06F9/54

CPC classification number: H04L43/16 ,  G06F3/0481 ,  G06F3/04817 ,  G06F3/0482 ,  G06F3/0484 ,  G06F3/04842 ,  G06F3/04847 ,  G06F9/542 ,  G06F17/30424 ,  G06F17/30463 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/3056 ,  G06F17/30572 ,  G06F17/30675 ,  G06F17/30864 ,  G06F17/30867 ,  G06F17/30958 ,  G06F17/30964 ,  G06F17/30979 ,  G06F17/30991 ,  G06Q10/06393 ,  G06T11/206 ,  G06T2200/24 ,  H04L29/08072 ,  H04L41/0213 ,  H04L41/0806 ,  H04L41/22 ,  H04L41/5009 ,  H04L41/5032 ,  H04L41/5035 ,  H04L41/5038 ,  H04L43/04 ,  H04L43/045 ,  H04L67/10 ,  H04L67/16

Abstract: One or more processing devices create one or more entity definitions that each associate an entity with machine data pertaining to that entity and create a service definition for a service provided by one or more entities. The service definition includes an entity definition for each of the one or more entities. The one or more processing devices create one or more key performance indicators (KPIs). Each KPI is defined by a search query that produces a value derived from the machine data identified in one or more of the entity definitions included in the service definition. Each value is indicative of how the service is performing at a point in time or during a period of time.

Abstract translation: 一个或多个处理设备创建一个或多个实体定义，每个实体定义使实体与与该实体有关的机器数据关联，并为由一个或多个实体提供的服务创建服务定义。 服务定义包括一个或多个实体中的每一个的实体定义。 一个或多个处理设备创建一个或多个关键性能指标（KPI）。 每个KPI由搜索查询定义，该搜索查询产生从在服务定义中包括的一个或多个实体定义中标识的机器数据导出的值。 每个值都表示服务在某个时间点或某段时间内的表现。

公开(公告)号：US20150089503A1

公开(公告)日：2015-03-26

申请号：US14529019

申请日：2014-10-30

Applicant: Splunk Inc.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455 ,  G06F11/34 ,  G06F11/32

CPC classification number: G06F9/45533 ,  G06F11/323 ,  G06F11/328 ,  G06F11/3409 ,  G06F2009/45591 ,  G06F2201/815

Abstract: The disclosed embodiments relate to a system for monitoring a virtual-machine environment. During operation, the system identifies a parent and a set of two or more child components that are related to the parent component in the virtual-machine environment. Next, the system determines a performance metric for each child component in the set of two or more child components. The system then determines a child-component performance state for each child component in the set of two or more child components based on the performance metric for the child component and a child-component state criterion. Finally, the system determines a parent state for the parent component based on the child-component performance state for each child component in the set of two or more child components and a parent-component state criterion, wherein the parent-component state criterion includes a threshold percentage or number of child components that have a specified state.

Abstract translation: 所公开的实施例涉及用于监视虚拟机环境的系统。 在操作期间，系统识别与虚拟机环境中的父组件相关联的父级和一组两个或多个子组件。 接下来，系统确定两个或多个子组件集合中每个子组件的性能度量。 然后，系统基于子组件的性能度量和子组件状态标准，确定两组或多组子组件中每个子组件的子组件性能状态。 最后，系统基于两组或多组子组件中的每个子组件的子组件性能状态和父组件状态标准来确定父组件的父状态，其中父组件状态标准包括 阈值百分比或具有指定状态的子组件的数量。

公开(公告)号：US08904389B2

公开(公告)日：2014-12-02

申请号：US13874423

申请日：2013-04-30

Applicant: Splunk Inc.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455 ,  G06F9/46 ,  G06F15/173 ,  G09G5/22 ,  G06F15/177 ,  G06F11/32 ,  G06F11/34

CPC classification number: G06F9/45533 ,  G06F11/323 ,  G06F11/328 ,  G06F11/3409 ,  G06F2009/45591 ,  G06F2201/815

Abstract: Techniques promote monitoring of hypervisor systems by presenting dynamic representations of hypervisor architectures that include performance indicators. A reviewer can interact with the representation to progressively view select lower-level performance indicators. Higher level performance indicators can be determined based on tower level state assessments. A reviewer can also view historical performance metrics and indicators, which can aid in understanding which configuration changes or system usages may have led to sub-optimal performance.

Abstract translation: 技术通过呈现包含性能指标的虚拟机监控程序架构的动态表示来促进对管理程序系统的监视。 评论者可以与表示进行交互，以逐步查看选择的较低级别的绩效指标。 可以根据塔级状态评估来确定更高层次的绩效指标。 审阅者还可以查看历史绩效指标和指标，这有助于了解哪些配置更改或系统使用可能导致次优性能。

公开(公告)号：US20130247044A1

公开(公告)日：2013-09-19

申请号：US13874448

申请日：2013-04-30

Applicant: SPLUNK INC.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455

CPC classification number: G06F9/45558 ,  G06F3/0482 ,  G06F9/45533 ,  G06F11/327 ,  G06F2009/45591 ,  G06T11/206 ,  G06T2200/24

Abstract: Techniques promote monitoring of hypervisor systems by presenting dynamic representations of hypervisor architectures that include performance indicators. A reviewer can interact with the representation to progressively view select lower-levet performance indicators. Higher level performance indicators can be determined based on tower level state assessments. A reviewer can also view historical performance metrics and indicators, which can aid in understanding which configuration changes or system usages may have led to sub-optimal performance.

Abstract translation: 技术通过呈现包含性能指标的虚拟机监控程序架构的动态表示来促进对管理程序系统的监视。 评论者可以与表示进行交互，以逐步查看选择的低级性能指标。 可以根据塔级状态评估来确定更高层次的绩效指标。 审阅者还可以查看历史绩效指标和指标，这有助于了解哪些配置更改或系统使用可能导致次优性能。