公开(公告)号：US12086920B1

公开(公告)日：2024-09-10

申请号：US17515325

申请日：2021-10-29

Applicant: SPLUNK INC.

Inventor： Devin Bhushan ,  Caelin Thomas Jackson-King ,  Stanislav Yazhenskikh ,  Jim Jiaming Zhu

IPC: G06T15/04 ,  G06T15/08 ,  G06T17/20

CPC classification number: G06T15/04 ,  G06T15/08 ,  G06T17/205

Abstract: Various implementations set forth a computer-implemented method for scanning a three-dimensional (3D) environment. The method includes generating, in a first time interval, a first extended reality (XR) stream based on a first set of meshes representing a 3D environment, transmitting, to a remote device, the first XR stream for rendering a 3D representation of a first portion of the 3D environment in a remote XR environment, determining that the 3D environment has changed based on a second set of meshes representing the 3D environment and generated subsequent to the first time interval, generating a second XR stream based on the second set of meshes, and transmitting, to the remote device, the second XR stream for rendering a 3D representation of at least a portion of the changed 3D environment in the remote XR environment.

公开(公告)号：US12079175B2

公开(公告)日：2024-09-03

申请号：US17074426

申请日：2020-10-19

Applicant: Splunk Inc.

Inventor： Poornima Devaraj ,  Joseph Gabriel Echeverria ,  Venkata SreeKrishna Koganti ,  Shyam Mundhra ,  Hardik Shah ,  Xiangyu Wu ,  Ryan Konrad Yee

IPC: G06F16/18 ,  G06F11/30 ,  G06F11/32 ,  G06F16/17 ,  G06F16/182

CPC classification number: G06F16/1865 ,  G06F11/3034 ,  G06F11/323 ,  G06F16/1734 ,  G06F16/1824

Abstract: Systems and methods are described herein for synthesizing traces from logs of a distributed computing system. A trace represents a single transaction, such as handling of a user request, on the distributed computing system. The transaction can include multiple underlying operations on the distributed computing system, which are represented as spans within the trace and may be hierarchically arranged within the trace. In instances where a distributed computing system does not provide for tracing natively, a trace can be synthesized from log entries of the distributed computing system. A streaming data processing system can ingest a data stream including log entries, and identify within the data stream those log entries relating to a given transaction. The streaming data processing system can further identify log entries that demark the beginnings and endings of operations for that transaction, and can utilize the identified log entries to build a trace for the transaction.

公开(公告)号：US12079100B1

公开(公告)日：2024-09-03

申请号：US17589847

申请日：2022-01-31

Applicant: Splunk, Inc.

Inventor： William Deaderick ,  William Stanton ,  Thomas Camp Vieth

IPC: G06F11/00 ,  G06F11/07 ,  G06F11/30 ,  G06F11/34 ,  G06F16/2458 ,  G06F16/242

CPC classification number: G06F11/3082 ,  G06F11/0793 ,  G06F11/3409 ,  G06F16/2477 ,  G06F16/244

Abstract: A computerized method is disclosed for grouping alerts and providing remediation recommendation. The method includes receiving the alert to be assigned to an existing open issue or a newly created issue, wherein an issue is a grouping of one or more alerts, assigning the alert to either a first existing open issue or the newly created issue by determining a weighted sum of the distance between the feature vectors of the alert and each existing open issue, determining a weighted sum of the distance between the feature vectors of the alert and each closed issue, and generating a user interface that illustrates an assignment of the alert and at least one of (i) a closed issue having a shortest distance to the alert or (ii) recommended remediation efforts associated with the closed issue having the shortest distance to the alert.

公开(公告)号：US12073103B1

公开(公告)日：2024-08-27

申请号：US17877743

申请日：2022-07-29

Applicant: Splunk Inc.

Inventor： Amritpal Singh Bath ,  Samat Jain ,  Felix Jiang ,  Shanmugam Kailasam ,  Jibang Liu ,  Isabelle Park ,  Vishal Patel ,  Divya Vijayan ,  Jiahan Wang ,  Tingjin Xu

IPC: G06F16/00 ,  G06F3/06

CPC classification number: G06F3/0644 ,  G06F3/0604 ,  G06F3/0643 ,  G06F3/0683

Abstract: Multiple storage system event handling includes obtaining multiple events for storage on multiple storage systems. For each of the multiple events, field values from each event are extracted. The field values are matched to configurations of the storage systems to identify a subset of the storage system having a matching configuration. The event is transmitted to the subset. The multiple events are transmitted to heterogeneous subsets.

公开(公告)号：US12072913B1

公开(公告)日：2024-08-27

申请号：US18162639

申请日：2023-01-31

Applicant: Splunk Inc.

Inventor： Alexander D. James ,  Vinayak Bhakta ,  Venkatasubramanian Jayaraman ,  Ganesh Jothikumar ,  Andrew John Peters ,  Amy Sutedja

IPC: G06F16/28 ,  G06F16/248

CPC classification number: G06F16/285 ,  G06F16/248

Abstract: Systems and methods are described for implementing programmatic input/output (I/O) routing to datasets with user-defined partitions while providing unhandled data protection. As disclosed herein, a user may define a dataset as including one or more partitions, each partition including criteria for storing data objects written to the partitioned dataset in the individual partitions. Data objects written to the dataset can then be evaluated according to the criteria, and routed to an appropriate partition. To provide unhandled data protection, a dataset definition can include a default partition to which data objects are routed when the data object fails to satisfy the criteria of any of the set of user-defined partitions identified in the specification. Processing I/O operations according to a user-defined partitioning schema can enable data objects to be arranged according to any partitioning schema without tethering the partitioning to a particular underlying storage system.

公开(公告)号：US12066995B2

公开(公告)日：2024-08-20

申请号：US17482781

申请日：2021-09-23

Applicant: SPLUNK INC.

Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

IPC: G06F7/00 ,  G06F16/00 ,  G06F16/22 ,  G06F16/2453 ,  G06F16/2455 ,  G06F16/248 ,  G06F16/28 ,  G06F16/951

CPC classification number: G06F16/2228 ,  G06F16/00 ,  G06F16/24539 ,  G06F16/2455 ,  G06F16/248 ,  G06F16/284 ,  G06F16/951

Abstract: Embodiments are directed are towards a method for generating a query response, which comprises creating two or more partitions of event records from raw data stored in a data store, wherein each event record in the two or more partitions of event records includes a portion of the raw data and is associated with a time stamp derived from the raw data. The method also comprises generating a summarization table for each partition of the two or more partitions that: (a) identifies a field value comprising a value that corresponds to an associated field extracted from a respective event record; and (b) for the field value, includes a posting value to the respective event record within a respective partition. The method further comprises generating partial results for a received query using summarization tables in the partitions and generating a response to the query by combining the partial results.

公开(公告)号：US12047407B2

公开(公告)日：2024-07-23

申请号：US18228982

申请日：2023-08-01

Applicant: Splunk Inc.

Inventor： Sourabh Satish ,  Oliver Friedrichs ,  Atif Mahadik ,  Govind Salinas

IPC: H04L9/40 ,  G06F16/28 ,  G06F21/55 ,  H04L47/2425

CPC classification number: H04L63/1441 ,  G06F16/285 ,  G06F21/554 ,  H04L63/0236 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/1433 ,  H04L63/20 ,  H04L47/2425

Abstract: Systems, methods, and software described herein provide security actions based on the current state of a security threat. In one example, a method of operating an advisement system in a computing environment with a plurality of computing assets includes identifying a security threat within the computing environment. The method further includes, in response to identifying the security threat, obtaining state information for the security threat within the computing environment, and determining a current state for the security threat within the computing environment. The method also provides obtaining enrichment information for the security threat and determining one or more security actions for the security threat based on the enrichment information and the current state for the security threat.

公开(公告)号：US20240244126A1

公开(公告)日：2024-07-18

申请号：US18621019

申请日：2024-03-28

Applicant: Splunk Inc.

Inventor： Fang I. Hsiao ,  Clayton S. CHING ,  Michael R. DICKEY ,  Vladimir A. SHCHERBAKOV ,  Clint SHARP

IPC: H04L69/22 ,  H04L43/028 ,  H04L43/0876

CPC classification number: H04L69/22 ,  H04L43/028 ,  H04L43/0876

Abstract: In the disclosed embodiments, a remote capture agent monitors network packets traversing a network interface of a computing device in an information technology environment. Network data is obtained from the network packets. The network data is modified based on configuration information obtained by the remote capture agent from a configuration server to obtain modified network data. Timestamped events are generated based on the modified network data, and the timestamped events are sent to another component on the network for subsequent processing.

公开(公告)号：US12039310B1

公开(公告)日：2024-07-16

申请号：US17445683

申请日：2021-08-23

Applicant: Splunk Inc.

Inventor： Fang I. Hsiao ,  Ai-chi Lu ,  Nicholas Matthew Tankersley

IPC: G06F7/00 ,  G06F8/61 ,  G06F16/00 ,  G06F16/26 ,  G06F16/951 ,  G06F3/0483 ,  G06F3/04847

CPC classification number: G06F8/61 ,  G06F16/26 ,  G06F16/951 ,  G06F3/0483 ,  G06F3/04847

Abstract: Data intake and query system (DIQS) instances supporting applications including lower-tier, focused, work group oriented applications may be tailored to meet the specific needs of the users. Rather than offer pre-configured options, the DIQS-based application offers the user the ability to customize data collection before deploying the collectors for specified host entities within an IT environment. Once the user selects the metrics and/or log sources for data collection at a custom interface, the lower-tier DIQS generates custom script operable to establish collection of the source data having the selected metrics and events associated with selected log sources from the specified host entities. The user can display and analyze the collected data.

公开(公告)号：US12038993B1

公开(公告)日：2024-07-16

申请号：US18104218

申请日：2023-01-31

Applicant: SPLUNK Inc.

Inventor： Umang Agarwal ,  Gergely Danyi ,  Khawar Deen ,  Joshua Johnson ,  Anusha Konatala ,  Rashmi Kalyani Vasudevan ,  John Bennett Wundes

IPC: G06F15/173 ,  G06F11/34 ,  G06F16/955 ,  G06F16/958

CPC classification number: G06F16/9566 ,  G06F11/3409 ,  G06F16/958

Abstract: A performance monitoring system (PMS 102) displays a list of example URLs that matched a URL grouping rule used to group URLs. For a rule configured for a customer of the PMS, the example matched URLs are selected by the PMS from a candidate set of URLs identified from data associated with that customer. The PMS receives information identifying a Uniform Resource Locator (URL) grouping rule displayed in a graphical user interface (GUI). The PMS identified a list of candidate URLs occurring in the stored data. The PMS then identifies, from the list of candidate URLs, a set of matched URLs, the set of matched URLs including one or more URLs from the list of candidate URLs that matched the URL grouping rule. The PMS then causes at least one URL from the set of matched URLs to be displayed on the GUI.