公开(公告)号：US11841827B2

公开(公告)日：2023-12-12

申请号：US17163039

申请日：2021-01-29

申请人： SPLUNK INC.

发明人： Alexandros Batsakis ,  Ankit Jain ,  Manu Jose ,  Jonah Pan ,  Hailun Yan

IPC分类号： G06F16/00 ,  G06F16/13 ,  G06F16/182

CPC分类号： G06F16/13 ,  G06F16/1824

摘要： Embodiments described herein facilitate enhancement of data model acceleration, including generating data model summaries and performing searches in an accelerated manner. In one implementation, a set of events are indexed, each of the events having a corresponding index time representing a time at which the event was indexed in an indexer. Index time parameters including an index earliest time indicating a first index time at which to begin generating a data model summary and an index latest time indicating a second index time at which to complete generating the data model summary are obtained. Thereafter, a data model summary is generated. Such a data model summary summarizes events having corresponding index times between the index earliest time and the index latest time. The data model summary is provided to a remote data store that is separate from the indexer at which at least a portion of the events were indexed.

公开(公告)号：US11157498B1

公开(公告)日：2021-10-26

申请号：US16147344

申请日：2018-09-28

申请人： Splunk Inc.

发明人： Alexander Douglas James ,  Manu Jose ,  Sourav Pal ,  Christopher Madden Pride ,  Nicholas Robert Romito ,  Igor Braylovskiy ,  Arun Ramani ,  Ankit Jain

IPC分类号： G06F17/00 ,  G06F16/2453 ,  G06F16/242 ,  G06F16/9535 ,  G06F40/205 ,  G06F9/54

摘要： Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives a first query identifying a set of data to be processed and a manner of processing the set of data. The data intake and query system parses the first query and uses a dataset association records of a metadata catalog to dynamically identify one or more datasets associated with the query and generate a second query. The data intake and query system executes the second query.

公开(公告)号：US11892976B2

公开(公告)日：2024-02-06

申请号：US17163047

申请日：2021-01-29

申请人： SPLUNK INC.

发明人： Alexandros Batsakis ,  Ankit Jain ,  Manu Jose ,  Jonah Pan ,  Hailun Yan

IPC分类号： G06F16/00 ,  G06F16/14 ,  G06F16/182 ,  G06F16/738

CPC分类号： G06F16/144 ,  G06F16/156 ,  G06F16/1824 ,  G06F16/738

摘要： Embodiments described herein facilitate enhancement of data model acceleration, including generating data model summaries and performing searches in an accelerated manner. In one implementation, obtaining a search query from a user device. A determination may be made to execute a search, in association with the search query, via an external computing service. As such, the search query, or a variant thereof, can be provided to the external computing service, wherein the external computing service executes the search using data model summaries stored in a remote data store that is separate from a set of events from which the data model summaries were generated. A set of search results are received from the external computing service, and such search results are provided to the user device.

公开(公告)号：US11093564B1

公开(公告)日：2021-08-17

申请号：US16147129

申请日：2018-09-28

申请人： Splunk Inc.

发明人： Alexander Douglas James ,  Manu Jose ,  Sourav Pal ,  Christopher Madden Pride ,  Nicholas Robert Romito ,  Igor Braylovskiy ,  Arun Ramani ,  Ankit Jain

IPC分类号： G06F16/00 ,  G06F16/9535 ,  G06F9/54 ,  G06F16/242 ,  G06F40/205

摘要： Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives a query identifying a set of data to be processed and a manner of processing the set of data. The data intake and query system parses the query and uses a metadata catalog to dynamically identify configuration parameters of datasets and/or rules associated with the query. The identified configuration parameters are communicated to a query processing component of the data intake and query system for use in executing the query.

公开(公告)号：US20210149773A1

公开(公告)日：2021-05-20

申请号：US17161480

申请日：2021-01-28

申请人： SPLUNK INC.

发明人： Ankit Jain ,  Manu Jose, JR. ,  Bharath Kishore Reddy Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC分类号： G06F11/14 ,  G06F16/21 ,  G06F11/34 ,  H04L12/26 ,  H04L12/24 ,  G06F11/30 ,  G06F16/27

摘要： Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.

公开(公告)号：US11822433B2

公开(公告)日：2023-11-21

申请号：US17161480

申请日：2021-01-28

申请人： SPLUNK INC.

发明人： Ankit Jain ,  Manu Jose, Jr. ,  Bharath Kishore Reddy Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC分类号： G06F16/00 ,  G06F11/14 ,  G06F16/21 ,  G06F11/34 ,  H04L43/106 ,  H04L41/069 ,  G06F11/30 ,  G06F16/27

CPC分类号： G06F11/1464 ,  G06F11/142 ,  G06F11/302 ,  G06F11/3089 ,  G06F11/3419 ,  G06F11/3495 ,  G06F16/211 ,  G06F16/27 ,  H04L41/069 ,  H04L43/106

摘要： Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.

公开(公告)号：US20220245091A1

公开(公告)日：2022-08-04

申请号：US17163039

申请日：2021-01-29

申请人： SPLUNK INC.

发明人： Alexandros Batsakis ,  Ankit Jain ,  Manu Jose ,  Jonah Pan ,  Hailun Yan

IPC分类号： G06F16/13 ,  G06F16/182

摘要： Embodiments described herein facilitate enhancement of data model acceleration, including generating data model summaries and performing searches in an accelerated manner. In one implementation, a set of events are indexed, each of the events having a corresponding index time representing a time at which the event was indexed in an indexer. Index time parameters including an index earliest time indicating a first index time at which to begin generating a data model summary and an index latest time indicating a second index time at which to complete generating the data model summary are obtained. Thereafter, a data model summary is generated. Such a data model summary summarizes events having corresponding index times between the index earliest time and the index latest time. The data model summary is provided to a remote data store that is separate from the indexer at which at least a portion of the events were indexed.

公开(公告)号：US20210357470A1

公开(公告)日：2021-11-18

申请号：US17443811

申请日：2021-07-27

申请人： Splunk Inc.

发明人： Alexander Douglas James ,  Manu Jose ,  Sourav Pal ,  Christopher Madden Pride ,  Nicholas Robert Romito ,  Igor Braylovskiy ,  Arun Ramani ,  Ankit Jain

IPC分类号： G06F16/9535 ,  G06F9/54 ,  G06F16/242 ,  G06F40/205

摘要： Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives a query identifying a set of data to be processed and a manner of processing the set of data. The data intake and query system parses the query and uses a metadata catalog to dynamically identify configuration parameters of datasets and/or rules associated with the query. The identified configuration parameters are communicated to a query processing component of the data intake and query system for use in executing the query.

公开(公告)号：US10956278B2

公开(公告)日：2021-03-23

申请号：US15582441

申请日：2017-04-28

申请人： SPLUNK INC.

发明人： Ankit Jain ,  Manu Jose, Jr. ,  Bharath Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC分类号： G06F16/00 ,  G06F11/14 ,  G06F16/21 ,  G06F11/34 ,  H04L12/26 ,  H04L12/24 ,  G06F11/30 ,  G06F16/27

摘要： Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.

公开(公告)号：US20180314601A1

公开(公告)日：2018-11-01

申请号：US15582441

申请日：2017-04-28

申请人： SPLUNK INC.

发明人： Ankit Jain ,  Manu Jose, JR. ,  Bharath Aleti ,  Amritpal Singh Bath ,  Yuan Xu

IPC分类号： G06F11/14 ,  G06F17/30

摘要： Embodiments of the present disclosure provide solutions for determining an elected search head captain is unqualified for the position, identifying a more qualified search head, and transferring the captain position to the more qualified search head. A method is provided that includes referencing qualification parameters in an elected search head captain, determining whether the newly elected search head captain is qualified for the position based on the parameters, identifying a more qualified search head to be the search head captain if the newly elected search head captain is determined to be unqualified for the position, and transferring the position of captain to the more qualified search head. The qualification parameters may include, for example, a pre-determined static flag set by an administrator of the search environment, and configuration replication status that corresponds to the most recent configuration state of the search head as recorded by the previous search head captain.