公开(公告)号：US11558270B2

公开(公告)日：2023-01-17

申请号：US17589734

申请日：2022-01-31

Applicant: Splunk Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F15/173 ,  H04L43/062 ,  H04L51/18 ,  G06Q10/06 ,  G06Q10/10 ,  G06F11/14 ,  H04L49/90 ,  H04L51/234

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may then route the live data to a dual-queue system of the data service. The live data may be loaded into a live data queue of the dual queue system for processing. Processing may entail generating summary statistics from the live data. An alert may then be transmitted to the customer in response to detecting the occurrence of one or more alert events. In embodiments, the alert events may include events identified in the summary statistics. Additional embodiments are described and/or claimed.

公开(公告)号：US20210152489A1

公开(公告)日：2021-05-20

申请号：US17158435

申请日：2021-01-26

Applicant: SPLUNK Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos ,  Vassilis Karampinas ,  Maria Nasioti

IPC: H04L12/911 ,  G06F16/248 ,  G06F16/2458 ,  G06F16/9535 ,  H04L12/24 ,  H04L29/08

Abstract: A system of terminating data server nodes based on insufficient processing of messages. In embodiments, a plurality of time-stamped, searchable events from machine data are created. A plurality of data server nodes that service messages across one or more portions of the plurality of time-stamped, searchable events, are executed in parallel. For each message received, the message is sent to a data server node, of the plurality of data server nodes, to cause the receiving data server node to perform a data operation associated with the received message. A determination can then be made that a particular data server node insufficiently processes messages sent to the particular data server node. Thereafter, termination of the particular data server node is initiated to terminate processes or threads executed by the particular data server node.

公开(公告)号：US20200169620A1

公开(公告)日：2020-05-28

申请号：US16775700

申请日：2020-01-29

Applicant: SPLUNK INC.

Inventor： Ioannis Vlachogiannis ,  Nikolaos Maroulis ,  Panagiotis Papadomitsos

IPC: H04L29/06 ,  H04L29/08 ,  G06F8/60 ,  H04L12/24

Abstract: In various implementations, a computer-implemented method for remotely managing settings of applications includes receiving a network communication from a managed device, the received network communication including a client-side hash value. The method further includes identifying settings for an application on the managed device in response to the receiving of the network communication, where the identified settings include configuration instructions for the application. Based on a comparison between the received client-side hash value and a server-side hash value that corresponds to the identified settings, at least some of the identified settings are transmitted to the managed device. The transmitting of the at least some of the identified settings can be based on the comparison indicating a mismatch between the received client-side hash value and the server-side hash value. The method may also include completing processing of the received network communication after the transmitting of the at least some of the identified settings.

公开(公告)号：US10545838B2

公开(公告)日：2020-01-28

申请号：US16038683

申请日：2018-07-18

Applicant: SPLUNK INC.

Inventor： Panagiotis Papadomitsos ,  Ioannis Vlachogiannis

IPC: G06F11/14 ,  H04L1/16 ,  H04L12/853

Abstract: In accordance with implementations of the present disclosure, a backup of live data received by a data forwarder is generated at the data forwarder while the live data is provided to a real-time data pipeline for forwarding from the data forwarder. A first portion of the live data is recovered from the backup to a stale data pipeline of the data forwarder. A request to forward the live data to a destination node is received by the data forwarder. In response to the request data is forwarded to the destination node, where the first portion of the live data from the stale data pipeline is added to a second portion of the live data from the real-time data pipeline in the response based on determining headroom remains to reach an amount of the data identified to include in the response.

公开(公告)号：US11882054B2

公开(公告)日：2024-01-23

申请号：US17158435

申请日：2021-01-26

Applicant: SPLUNK Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos ,  Vassilis Karampinas ,  Maria Nasioti

IPC: H04L67/02 ,  H04L47/74 ,  G06F16/248 ,  G06F16/2458 ,  G06F16/9535 ,  H04L41/0806 ,  H04L41/069 ,  H04L67/75 ,  H04L67/025

CPC classification number: H04L47/745 ,  G06F16/248 ,  G06F16/2477 ,  G06F16/9535 ,  H04L41/069 ,  H04L41/0806 ,  H04L67/025 ,  H04L67/75 ,  H04L67/02

Abstract: A system of terminating data server nodes based on insufficient processing of messages. In embodiments, a plurality of time-stamped, searchable events from machine data are created. A plurality of data server nodes that service messages across one or more portions of the plurality of time-stamped, searchable events, are executed in parallel. For each message received, the message is sent to a data server node, of the plurality of data server nodes, to cause the receiving data server node to perform a data operation associated with the received message. A determination can then be made that a particular data server node insufficiently processes messages sent to the particular data server node. Thereafter, termination of the particular data server node is initiated to terminate processes or threads executed by the particular data server node.

公开(公告)号：US11711432B1

公开(公告)日：2023-07-25

申请号：US17574925

申请日：2022-01-13

Applicant: SPLUNK Inc.

Inventor： Ioannis Vlachogiannis ,  Nikolaos Maroulis ,  Panagiotis Papadomitsos

IPC: H04L67/133 ,  H04L41/5009 ,  H04L41/0873 ,  G06F8/60 ,  H04L67/00

CPC classification number: H04L67/133 ,  G06F8/60 ,  H04L41/0873 ,  H04L41/5012 ,  H04L67/34

Abstract: In various implementations, a computer-implemented method for remotely managing settings of applications includes receiving a network communication from a managed device, the received network communication including a client-side hash value. The method further includes identifying settings for an application on the managed device in response to the receiving of the network communication, where the identified settings include configuration instructions for the application. Based on a comparison between the received client-side hash value and a server-side hash value that corresponds to the identified settings, at least some of the identified settings are transmitted to the managed device. The transmitting of at least some of the identified settings can be based on the comparison indicating a mismatch between the received client-side hash value and the server-side hash value. The method may also include completing processing of the received network communication after the transmitting of the at least some of the identified settings.

公开(公告)号：US10425300B2

公开(公告)日：2019-09-24

申请号：US15799720

申请日：2017-10-31

Applicant: SPLUNK, Inc.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F15/173 ,  H04L12/26 ,  H04L12/58 ,  G06Q10/06 ,  G06Q10/10 ,  G06F11/14 ,  H04L12/861

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may then route the live data to a dual-queue system of the data service. The live data may be loaded into a live data queue of the dual queue system for processing. Processing may entail generating summary statistics from the live data. An alert may then be transmitted to the customer in response to detecting the occurrence of one or more alert events. In embodiments, the alert events may include events identified in the summary statistics. Additional embodiments are described and/or claimed.

公开(公告)号：US09836358B2

公开(公告)日：2017-12-05

申请号：US14699992

申请日：2015-04-29

Applicant: SPLUNK INC.

Inventor： Ioannis Vlachogiannis ,  Panagiotis Papadomitsos

IPC: G06F7/00 ,  G06F17/00 ,  G06F11/14 ,  G06F17/30

CPC classification number: G06F11/1466 ,  G06F17/30221

Abstract: A computer-implemented method, system, and computer-readable media are disclosed herein. In embodiments, the computer-implemented method may entail receiving, by a data service, live data associated with an entity. The entity may be, for example, a customer of the data service. The method may then route the live data to a dual-queue system. The live data may then be loaded into a live data queue for processing of the live data. In addition, the live data may be stored as a persistent backup of the live data in a stale data queue. A remote data store may periodically establish a connection with the dual-queue system, after which, at least a portion of the stale data may be transmitted to the remote data store. Additional embodiments are described and/or claimed.

公开(公告)号：US11640341B1

公开(公告)日：2023-05-02

申请号：US17573964

申请日：2022-01-12

Applicant: Splunk Inc.

Inventor： Panagiotis Papadomitsos ,  Ioannis Vlachogiannis

IPC: G06F11/14 ,  H04L1/16 ,  H04L47/2416

Abstract: In accordance with implementations of the present disclosure, a backup of live data received by a data forwarder is generated at the data forwarder while the live data is provided to a real-time data pipeline for forwarding from the data forwarder. A first portion of the live data is recovered from the backup to a stale data pipeline of the data forwarder. A request to forward the live data to a destination node is received by the data forwarder. In response to the request data is forwarded to the destination node, where the first portion of the live data from the stale data pipeline is added to a second portion of the live data from the real-time data pipeline in the response based on determining headroom remains to reach an amount of the data identified to include in the response.

公开(公告)号：US11237922B2

公开(公告)日：2022-02-01

申请号：US16752878

申请日：2020-01-27

Applicant: SPLUNK INC.

Inventor： Panagiotis Papadomitsos ,  Ioannis Vlachogiannis

IPC: G06F11/14 ,  H04L1/16 ,  H04L12/853

Abstract: In accordance with implementations of the present disclosure, a backup of live data received by a data forwarder is generated at the data forwarder while the live data is provided to a real-time data pipeline for forwarding from the data forwarder. A first portion of the live data is recovered from the backup to a stale data pipeline of the data forwarder. A request to forward the live data to a destination node is received by the data forwarder. In response to the request data is forwarded to the destination node, where the first portion of the live data from the stale data pipeline is added to a second portion of the live data from the real-time data pipeline in the response based on determining headroom remains to reach an amount of the data identified to include in the response.