公开(公告)号：US10963347B1

公开(公告)日：2021-03-30

申请号：US16264527

申请日：2019-01-31

Applicant: SPLUNK INC.

Inventor： Mingyuan Chen ,  Dylan Patricia Conway ,  Simon Tam

IPC: G06F7/00 ,  G06F11/14 ,  H04B1/3827 ,  G06F12/0802 ,  H04W88/02 ,  G06F3/0484

Abstract: Various embodiments of the present application set forth a computer-implemented method that includes receiving at a mobile device from a first data source, a plurality of live data snapshots, each live data snapshot included in the plurality of live data snapshots being associated with a different point in time, generating, based on a presentation template and a first live data snapshot included in the plurality of live data snapshots, a first presentation data snapshot, receiving, at the mobile device from a wearable device, a plurality of data requests, wherein each data request included in the plurality of data requests comprises a different request for data to be presented by the wearable device and is received at a different point in time, and a first rate of receiving the plurality of data requests by the mobile device is lower than a second rate of receiving the plurality of live data snapshots by the mobile device, and in response to receiving a first data request included in the plurality of data requests, transmitting, by the mobile device, the first presentation data snapshot to the wearable device.

公开(公告)号：US10956415B2

公开(公告)日：2021-03-23

申请号：US16147165

申请日：2018-09-28

Applicant: Splunk Inc.

Inventor： Sourav Pal ,  Arindam Bhattacharjee

IPC: G06F16/00 ,  G06F16/2453 ,  G06F16/242 ,  G06F16/2458 ,  G06F16/17

Abstract: Systems and methods are disclosed for receiving, at a data intake and query system, a query that includes an indication to process data managed by a third-party data storage and processing system that supports a different query language than the data intake and query system. The data intake and query system identifies a third-party data storage and processing system that manages the data to be processed and generates a subquery for execution by the third-party data storage and processing system, generates instructions for one or more worker nodes to receive and process results of the subquery from the third-party data storage and processing system, and instructs the worker nodes to provide results of the processing to the data intake and query system.

公开(公告)号：US10956362B1

公开(公告)日：2021-03-23

申请号：US16177358

申请日：2018-10-31

Applicant: SPLUNK INC.

Inventor： Clint Sharp ,  Petter Eriksson ,  Ledion Bitincka ,  Jason Szeto ,  Elizabeth Lin ,  Nima Haddadkaveh

IPC: G06F16/00 ,  G06F16/11 ,  G06F16/22

Abstract: Raw data in distributed servers is divided into groups of data called buckets containing raw data that have timestamps that fall within a specific time range. When a bucket becomes inactive a server can archive the bucket to an external storage system. The external storage system containing archived data may be specified in a search query. Archived data from the external storage system is obtained, processed, and a search performed on the processed archived data using the search query.

公开(公告)号：US10936585B1

公开(公告)日：2021-03-02

申请号：US16177234

申请日：2018-10-31

Applicant: Splunk Inc.

Inventor： Joseph Gabriel Echeverria ,  Arthur Foelsche ,  Eric Sammer ,  Sarah Stanger

IPC: G06F17/30 ,  G06F16/2453 ,  G06F16/248 ,  G06F16/25 ,  G06F16/2455 ,  G06F16/24 ,  G06F16/14 ,  G06N3/00 ,  G06F16/178 ,  G05B13/00 ,  G06N5/00

Abstract: Systems and methods are described for unified processing of indexed and streaming data. A system enables users to query indexed data or specify processing pipelines to be applied to streaming data. In some instances, a user may specify a query intended to be run against indexed data, but may specify criteria that includes not-yet-indexed data (e.g., a future time frame). The system may convert the query into a data processing pipeline applied to not-yet-indexed data, thus increasing the efficiency of the system. Similarly, in some instances, a user may specify a data processing pipeline to be applied to a data stream, but specify criteria including data items outside the data stream. For example, a user may wish to apply the pipeline retroactively, to data items that have already exited the data stream. The system can convert the pipeline into a query against indexed data to satisfy the users processing requirements.

公开(公告)号：US20210049150A1

公开(公告)日：2021-02-18

申请号：US17084965

申请日：2020-10-30

Applicant: Splunk Inc.

Inventor： Amritpal Singh Bath ,  Yuan Xu, Jr. ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US10922892B1

公开(公告)日：2021-02-16

申请号：US16399984

申请日：2019-04-30

Applicant: SPLUNK INC.

Inventor： Devin Bhushan ,  Jesse Chor ,  Glen Wong ,  Jim Jiaming Zhu

IPC: G06T19/00 ,  G06F3/0484 ,  G06F3/0482 ,  G06F3/0486 ,  G06F3/0488

Abstract: A mobile device is fitted with a camera and an extended reality (XR) software application program executing on a processor within an XR system. Via the XR software application program, techniques are performed for manipulating virtual objects in an XR environment. In one technique, the XR software application program facilitates the movement of a virtual object from a first location to a second location, within a plane parallel to a touchscreen of a mobile device, responsive to a displacement determined based on user input detected via the touchscreen.

公开(公告)号：US20210042658A1

公开(公告)日：2021-02-11

申请号：US16904866

申请日：2020-06-18

Applicant: SPLUNK Inc.

Inventor： Manish Sainani ,  Nghi Huu Nguyen ,  Zidong Yang

IPC: G06N20/00 ,  G06F16/242 ,  G06F16/22 ,  G06F16/2458 ,  G06F16/248

Abstract: Embodiments of the present invention are directed to facilitating concurrent forecasting associating with multiple time series data sets. In accordance with aspects of the present disclosure, a request to perform a predictive analysis in association with multiple time series data sets is received. Thereafter, the request is parsed to identify each of the time series data sets to use in predictive analysis. For each time series data set, an object is initiated to perform the predictive analysis for the corresponding time series data set. Generally, the predictive analysis predicts expected outcomes based on the corresponding time series data set. Each object is concurrently executed to generate expected outcomes associated with the corresponding time series data set, and the expected outcomes associated with each of the corresponding time series data sets are provided for display.

公开(公告)号：US20210042369A1

公开(公告)日：2021-02-11

申请号：US17080032

申请日：2020-10-26

Applicant: SPLUNK Inc.

Inventor： Ledion Bitincka ,  Steve Zhang ,  Igor Stojanovski ,  Stephen Sorkin

IPC: G06F16/951 ,  G06F16/2455 ,  G06F16/2458 ,  G06F16/903

Abstract: A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing realtime search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

公开(公告)号：US20210042306A1

公开(公告)日：2021-02-11

申请号：US17080067

申请日：2020-10-26

Applicant: SPLUNK Inc.

Inventor： Elizabeth Lin ,  Nils Petter Eriksson ,  Ledion Bitincka

IPC: G06F16/2458

Abstract: In embodiments, a computer-implemented method may entail receiving a search request. A first data store and a second data store, that contains data archived from the first data store, may be identified. Data from the first data store may remain available in the first data store for a limited period of time once archived to the second data store. The first data store storing data in a first format and the second data store storing data in a second format, the first format and the second format being different from one another. Determining that a subset of data that has been archived into the second data store and is to be searched as part of the search request is still available from the first data store, and executing the search request on the subset of data utilizing the first data store. Additional embodiments are described and/or claimed.

公开(公告)号：US20210042170A9

公开(公告)日：2021-02-11

申请号：US16389650

申请日：2019-04-19

Applicant: SPLUNK INC.

Inventor： Itay A. Neeman

IPC: G06F9/54 ,  G06F16/2455 ,  G06F8/65 ,  G06F8/71 ,  G06F9/445

Abstract: A first feature (e.g., chart or table) includes a reference to a dynamic pointer. Independently, the pointer is defined to point to a second feature (e.g., a query). The first feature is automatically updated to reflect a current value of the second feature. The reference to the pointer and pointer definition are recorded in a central registry, and changes to the pointer or second feature automatically cause the first feature to be updated to reflect the change. A mapping between features can be generated using the registry and can identify interrelationships to a developer. Further, changes in the registry can be tracked, such that a developer can view changes pertaining to a particular time period and/or feature of interest (e.g., corresponding to an operation problem).