Facilitating existing item determinations

    公开(公告)号:US11914552B1

    公开(公告)日:2024-02-27

    申请号:US18160123

    申请日:2023-01-26

    申请人: Splunk Inc.

    摘要: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

    Monitoring changes to data items using associated metadata

    公开(公告)号:US11580071B2

    公开(公告)日:2023-02-14

    申请号:US17080416

    申请日:2020-10-26

    申请人: SPLUNK INC.

    摘要: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

    MONITORING CHANGES TO DATA ITEMS USING ASSOCIATED METADATA

    公开(公告)号:US20210042269A1

    公开(公告)日:2021-02-11

    申请号:US17080416

    申请日:2020-10-26

    申请人: SPLUNK INC.

    摘要: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

    Systems and methods for providing dynamic indexer discovery

    公开(公告)号:US10268755B2

    公开(公告)日:2019-04-23

    申请号:US14700844

    申请日:2015-04-30

    申请人: Splunk Inc.

    IPC分类号: G06F17/30

    摘要: The present disclosure is directed to providing dynamic indexer discovery. An index manager, which may also be known as a cluster master, is configured to track the statuses and capabilities of indexers and provide the statuses and capabilities obtained from the indexers to data collectors, such as forwarders. The data collectors may use the statuses and capabilities associated with the indexers to load balance transmission of data to the indexers. Dynamic indexer discovery may eliminate the need to manually reconfigure data collectors when the status of an indexer changes because the information may be obtained from the index manager without the need to reinitialize the data collectors.

    CENTRAL REPOSITORY FOR STORING CONFIGURATION FILES OF A DISTRIBUTED COMPUTER SYSTEM

    公开(公告)号:US20190098071A1

    公开(公告)日:2019-03-28

    申请号:US16202990

    申请日:2018-11-28

    申请人: Splunk Inc.

    IPC分类号: H04L29/08 H04L12/24

    摘要: In a computer-implemented method for configuring a distributed computer system comprising a plurality of nodes of a plurality of node classes, configuration files for a plurality of nodes of each of the plurality of node classes are stored in a central repository. The configuration files include information representing a desired system state of the distributed computer system, and the distributed computer system operates to keep an actual system state of the distributed computer system consistent with the desired system state. The plurality of node classes includes forwarder nodes for receiving data from an input source, indexer nodes for indexing the data, and search head nodes for searching the data. Responsive to receiving changes to the configuration files, the changes are propagated to nodes of the plurality of nodes impacted by the changes based on a node class of the nodes impacted by the changes.

    Adaptive monitoring and processing of new data files and changes to existing data files

    公开(公告)号:US10083190B2

    公开(公告)日:2018-09-25

    申请号:US14014059

    申请日:2013-08-29

    申请人: Splunk Inc.

    IPC分类号: G06F17/30

    CPC分类号: G06F16/21 G06F16/1734

    摘要: Embodiments are directed towards a dynamic change evaluation mechanism, whereby items having a detected possible change are scheduled for re-evaluation for possible changes at a higher frequency than items detected to not have previously changed, while those items detected as not to have changed are dynamically scheduled for re-evaluation based on an evaluation backlog that may be in turn based, in part, on a time from when an item is assigned an expiration time to when the item is evaluated. In one embodiment, a possibly changed item may be assigned a new expiration time independent of the evaluation backlog. In another embodiment, if no change is detected, then the item may be assigned a new expiration time as a function of a previous expiration time and on the evaluation backlog.

    File update detection and processing

    公开(公告)号:US09767112B2

    公开(公告)日:2017-09-19

    申请号:US15224649

    申请日:2016-07-31

    申请人: Splunk Inc.

    IPC分类号: G06F17/30

    摘要: Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.