公开(公告)号：US09185007B2

公开(公告)日：2015-11-10

申请号：US14253490

申请日：2014-04-15

Applicant: Splunk Inc.

Inventor： Tristan Fletcher ,  Cary Glen Noel

IPC: G06F9/455 ,  G06T11/20 ,  H04L12/26 ,  G06F11/32 ,  G06F11/34

CPC classification number: H04L43/045 ,  G06F9/45533 ,  G06F11/323 ,  G06F11/3409 ,  G06F2201/815 ,  H04L12/4641 ,  H04L43/065 ,  H04L43/0847 ,  H04L43/0876 ,  H04L43/106

Abstract: The disclosed embodiments relate to a system that displays performance data for a computing environment. During operation, the system first determines values for a performance metric for a plurality of entities that comprise the computing environment. Next, the system displays the computing environment as a tree comprising nodes representing the plurality of entities and edges representing parent-child relationships between the plurality of entities. While displaying the tree, the system displays the child nodes for each parent in sorted order based on values of the performance metric associated with the child nodes.

Abstract translation: 所公开的实施例涉及显示计算环境的性能数据的系统。 在操作期间，系统首先确定构成计算环境的多个实体的性能度量的值。 接下来，系统将计算环境显示为包括表示多个实体的节点的树，以及表示多个实体之间的父子关系的边。 在显示树时，系统根据与子节点相关联的性能度量的值，按排序顺序显示每个父级的子节点。

公开(公告)号：US09142049B2

公开(公告)日：2015-09-22

申请号：US14253548

申请日：2014-04-15

Applicant: Splunk Inc.

Inventor： Tristan Fletcher ,  Cary Glen Noel

IPC: G06F9/455 ,  G06T11/20

CPC classification number: G06T11/206

Abstract: The disclosed embodiments relate to a system that displays performance data for a computing environment. During operation, the system first determines values for a performance metric for a plurality of entities that comprise the computing environment. Next, the system displays the computing environment as a set of nodes representing the plurality of entities. While displaying the nodes, the system displays a chart with a line illustrating how a value of the performance metric for the selected node varies over time, wherein the line is displayed against a background illustrating how a distribution of the performance metric for a reference subset of the set of nodes varies over time.

Abstract translation: 所公开的实施例涉及显示计算环境的性能数据的系统。 在操作期间，系统首先确定构成计算环境的多个实体的性能度量的值。 接下来，系统将计算环境显示为表示多个实体的一组节点。 在显示节点的同时，系统显示具有一条线的图表，其中示出了所选节点的性能度量的值如何随时间而变化，其中该行显示为背景，其示出了如何将参考子集的参考子集的性能度量的分布 节点组随时间变化。

公开(公告)号：US08978036B2

公开(公告)日：2015-03-10

申请号：US13953568

申请日：2013-07-29

Applicant: Splunk Inc.

Inventor： Tristan Fletcher ,  Brian Bingham

IPC: G06F9/46 ,  G06F9/50

CPC classification number: H04L67/2861 ,  G06F9/4881 ,  G06F9/5005 ,  G06F9/5011 ,  G06F9/5033 ,  G06F9/505 ,  G06F9/54 ,  G06F17/30619 ,  G06F17/30675 ,  H04L63/08

Abstract: A scheduler manages execution of a plurality of data-collection jobs, assigns individual jobs to specific forwarders in a set of forwarders, and generates and transmits tokens (e.g., pairs of data-collection tasks and target sources) to assigned forwarders. The forwarder uses the tokens, along with stored information applicable across jobs, to collect data from the target source and forward it onto an indexer for processing. For example, the indexer can then break a data stream into discrete events, extract a timestamp from each event and index (e.g., store) the event based on the timestamp. The scheduler can monitor forwarders' job performance, such that it can use the performance to influence subsequent job assignments. Thus, data-collection jobs can be efficiently assigned to and executed by a group of forwarders, where the group can potentially be diverse and dynamic in size.

Abstract translation: 调度器管理多个数据收集作业的执行，向一组转发器中的特定转发器分配各个作业，并且生成并发送令牌（例如，数据收集任务对和目标源对）到分配的转发器。 转发器使用令牌，以及适用于作业的存储信息，从目标源收集数据，并将其转发到索引器进行处理。 例如，索引器然后可以将数据流中断为离散事件，从每个事件中提取时间戳并基于时间戳索引（例如，存储）事件。 调度程序可以监视转发器的作业性能，使其可以使用性能来影响后续的作业分配。 因此，数据收集作业可以被有效地分配给一组转发器并且由一组转发器执行，其中该组可以在大小上潜在地多样化和动态化。

公开(公告)号：US20140320502A1

公开(公告)日：2014-10-30

申请号：US14253548

申请日：2014-04-15

Applicant: SPLUNK INC.

Inventor： Tristan Fletcher ,  Cary Glen Noel

IPC: G06T11/20

CPC classification number: G06T11/206

Abstract: The disclosed embodiments relate to a system that displays performance data for a computing environment. During operation, the system first determines values for a performance metric for a plurality of entities that comprise the computing environment. Next, the system displays the computing environment as a set of nodes representing the plurality of entities. While displaying the nodes, the system displays a chart with a line illustrating how a value of the performance metric for the selected node varies over time, wherein the line is displayed against a background illustrating how a distribution of the performance metric for a reference subset of the set of nodes varies over time.

Abstract translation: 所公开的实施例涉及显示计算环境的性能数据的系统。 在操作期间，系统首先确定构成计算环境的多个实体的性能度量的值。 接下来，系统将计算环境显示为表示多个实体的一组节点。 在显示节点的同时，系统显示具有一条线的图表，其中示出了所选节点的性能度量的值如何随时间而变化，其中该行显示为背景，其示出了如何将参考子集的参考子集的性能度量的分布 节点组随时间变化。

公开(公告)号：US11886455B1

公开(公告)日：2024-01-30

申请号：US18146256

申请日：2022-12-23

Applicant: Splunk Inc.

Inventor： Subramaniam Baskaran ,  Marc Chene ,  Tristan Fletcher ,  Sakib Mehasanewala ,  Omprakaash Thoppai

IPC: G06F16/248 ,  G06F16/951

CPC classification number: G06F16/248 ,  G06F16/951

Abstract: Systems and methods ingest machine data including logs, metadata, and cost and usage information from multiple heterogeneous cloud services. The machine data is saved as events. An application retrieves the metadata, events, metrics, and logs and causes an easy to understand visual representation of costs, resource usage, and non-compliance for each of a client's cloud services. Further, the data across the client's multiple heterogeneous cloud services is normalized to provide visual representations that compare the costs, resource usage, and non-compliance across the client's multiple heterogeneous cloud services. Further, machine learning aspects of the application can provide recommendations and trend analysis for cloud service asset usage.

公开(公告)号：US11843528B2

公开(公告)日：2023-12-12

申请号：US17451940

申请日：2021-10-22

Applicant: Splunk Inc.

Inventor： Alan Vincent Hardin ,  Kan Wu ,  Arun Ramani ,  Nicholas Matthew Tankersley ,  Tristan Fletcher ,  Alok Bhide

IPC: G06F17/30 ,  H04L43/04 ,  G06F8/61 ,  H04L43/00 ,  G06F16/951 ,  H04L43/0817

CPC classification number: H04L43/04 ,  G06F8/61 ,  G06F16/951 ,  H04L43/0817 ,  H04L43/14

Abstract: One or more lower-tier system monitoring components are installed and operated prior to installing a higher-tier system monitoring component. A lower-tier system may be an individual server, network device, or local area network. A higher-tier system may include an enterprise or organization wide network or service that includes at least a part of the lower-tier system. Once the higher-tier system monitoring component is installed, the higher-tier and lower-tier system monitoring components use an interface to operate with one another to form a single larger instance of an organization wide monitoring system. The combination of the higher-tier system monitoring component and the one or more lower-tier system operating components performs monitoring aspects of the overall information technology environment based at least in part on machine data produced and made searchable to provide monitoring results.

公开(公告)号：US11755371B1

公开(公告)日：2023-09-12

申请号：US18055789

申请日：2022-11-15

Applicant: Splunk Inc.

Inventor： Tristan Fletcher ,  Brian Bingham

IPC: G06F9/50

CPC classification number: G06F9/5005 ,  G06F9/5011 ,  G06F9/5033 ,  G06F9/505

Abstract: A scheduler manages execution of a plurality of data-collection jobs, assigns individual jobs to specific forwarders in a set of forwarders, and generates and transmits tokens (e.g., pairs of data-collection tasks and target sources) to assigned forwarders. The forwarder uses the tokens, along with stored information applicable across jobs, to collect data from the target source and forward it onto an indexer for processing. For example, the indexer can then break a data stream into discrete events, extract a timestamp from each event and index (e.g., store) the event based on the timestamp. The scheduler can monitor forwarders' job performance, such that it can use the performance to influence subsequent job assignments. Thus, data-collection jobs can be efficiently assigned to and executed by a group of forwarders, where the group can potentially be diverse and dynamic in size.

公开(公告)号：US11250068B2

公开(公告)日：2022-02-15

申请号：US16460423

申请日：2019-07-02

Applicant: SPLUNK INC.

Inventor： Brian Bingham ,  Tristan Fletcher ,  Alok Anant Bhide

IPC: G06F16/9038 ,  G06F16/901 ,  G06F16/9032 ,  G06F16/903 ,  G06F16/2458 ,  G06F16/26 ,  G06F3/0488 ,  G06F3/0482 ,  G06F9/455 ,  G06F11/32 ,  G06F11/34

Abstract: The disclosed system and method acquire and store performance measurements relating to performance of a component in an information technology (IT) environment and log data produced by the IT environment, in association with corresponding time stamps. The disclosed system and method correlate at least one of the performance measurements with at least one of the portions of log data.

公开(公告)号：US11159397B2

公开(公告)日：2021-10-26

申请号：US15884637

申请日：2018-01-31

Applicant: Splunk Inc.

Inventor： Alan Vincent Hardin ,  Kan Wu ,  Arun Ramani ,  Nicholas Matthew Tankersley ,  Tristan Fletcher ,  Alok Bhide

IPC: H04L12/26 ,  G06F8/61 ,  G06F16/951

Abstract: One or more lower-tier system monitoring components are installed and operated prior to installing a higher-tier system monitoring component. A lower-tier system may be an individual server, network device, or local area network. A higher-tier system may include an enterprise or organization wide network or service that includes at least a part of the lower-tier system. Once the higher-tier system monitoring component is installed, the higher-tier and lower-tier system monitoring components use an interface to operate with one another to form a single larger instance of an organization wide monitoring system. The combination of the higher-tier system monitoring component and the one or more lower-tier system operating components performs monitoring aspects of the overall information technology environment based at least in part on machine data produced and made searchable to provide monitoring results.

公开(公告)号：US10929163B2

公开(公告)日：2021-02-23

申请号：US16174261

申请日：2018-10-29

Applicant: SPLUNK INC.

Inventor： Brian Bingham ,  Tristan Fletcher

IPC: G06F9/455 ,  G06F11/32 ,  G06F11/34

Abstract: The disclosed embodiments relate to a system for monitoring a virtual-machine environment. During operation, the system identifies a parent and a set of two or more child components that are related to the parent component in the virtual-machine environment. Next, the system determines a performance metric for each child component in the set of two or more child components. The system then determines a child-component performance state for each child component in the set of two or more child components based on the performance metric for the child component and a child-component state criterion. Finally, the system determines a parent state for the parent component based on the child-component performance state for each child component in the set of two or more child components and a parent-component state criterion, wherein the parent-component state criterion includes a threshold percentage or number of child components that have a specified state.