公开(公告)号：US20230120313A1

公开(公告)日：2023-04-20

申请号：US17721251

申请日：2022-04-14

Applicant: SPLUNK Inc.

Inventor： Nishant Agarwal ,  Houwu Bai ,  Darshan Patel ,  Rajesh Raman ,  Joseph Ari Ross

IPC: H04L43/08

Abstract: Described are systems, methods, and techniques for collecting, analyzing, processing, and storing time series data and for evaluating and dynamically estimating a resolution of one or more streams of data points and updating an output resolution. Responsive to receiving a stream of data points, a data resolution can be derived and an output resolution can be set to a first value. When a change to the data resolution is detected, the output resolution can be changed, modifying a frequency at which output data points are generated and/or transmitted. In some instances, a detector can be implemented to trigger an alert responsive to ingested data points corresponding with triggering parameters. An output resolution for the detector can be dynamically modified based on dynamically detecting a change to the data resolution of the stream of data.

公开(公告)号：US12222840B1

公开(公告)日：2025-02-11

申请号：US17974262

申请日：2022-10-26

Applicant: SPLUNK Inc.

Inventor： Steven Karis ,  Maxime Petazzoni ,  Matthew William Pound ,  Joseph Ari Ross ,  Charles Smith ,  Scott Stewart

IPC: G06F11/36 ,  G06F9/54 ,  G06F16/24 ,  G06F16/2455

Abstract: A method of generating metrics data associated with a microservices-based application comprises ingesting a plurality of spans and mapping an ingested span of the plurality of spans to a span identity, wherein the span identity comprises a tuple of information identifying a type of span associated with the span identity, wherein the tuple of information comprises user-configured dimensions. The method further comprises grouping the ingested span by the span identity, wherein the ingested span is grouped with other spans from the plurality of spans comprising a same span identity. The method also comprises computing metrics associated with the span identity and using the metrics to generate a stream of metric data associated with the span identity.

公开(公告)号：US11836526B1

公开(公告)日：2023-12-05

申请号：US17323954

申请日：2021-05-18

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross

IPC: G06F9/50 ,  G06F11/30 ,  G06F11/32 ,  G06F11/34 ,  G06F9/54 ,  G06F16/2455

CPC classification number: G06F9/5016 ,  G06F9/542 ,  G06F11/3086 ,  G06F11/323 ,  G06F11/3409 ,  G06F16/24568 ,  G06F2201/81 ,  G06F2201/835 ,  G06F2201/865

Abstract: A system receives a time series of data values from instrumented software executing on an external system. Each data value corresponds to a metric of the external system. The system stores a level value representing a current estimate of the time series and a trend value representing a trend in the time series. The level and trend values are based on data in a window having a trailing value. In response to receiving a most recent value, the system updates the level value and the trend value to add an influence of the most recent value and remove an influence of the trailing value. The system forecasts based on the updated level and trend values, and in response to determining that the forecast indicates the potential resource shortage event, takes action.

公开(公告)号：US11650908B1

公开(公告)日：2023-05-16

申请号：US17698959

申请日：2022-03-18

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross

IPC: G06F11/36 ,  G06F11/34 ,  G06F17/18 ,  G06F17/11

CPC classification number: G06F11/3644 ,  G06F11/3419 ,  G06F11/3452 ,  G06F17/11 ,  G06F17/18 ,  G06F2201/81 ,  G06F2201/865

Abstract: An analysis system receives a time series. The data values of the time series correspond to a metric describing a characteristic of the computing system that changes over time. The analysis system stores a statistic value that represents the stationarity of the time series. In response to receiving a most recent value, the analysis system assigns the most recent value as the leading value in a window before retrieving the trailing value of the window. The analysis system updates the statistic value to add an influence of the most recent value and remove an influence of the trailing value. If the statistic value is less than a threshold, the analysis system determines that the time series is stationary. In response to determining the time series is stationary, the analysis system assigns an alert to the metric. The analysis system detects an anomaly in the metric based on the assigned alert.

公开(公告)号：US12013879B2

公开(公告)日：2024-06-18

申请号：US17721248

申请日：2022-04-14

Applicant: SPLUNK Inc.

Inventor： Nishant Agarwal ,  Houwu Bai ,  Darshan Patel ,  Rajesh Raman ,  Joseph Ari Ross

IPC: G06F16/2458 ,  G06F16/2455 ,  G06F16/28 ,  H04L43/08

CPC classification number: G06F16/287 ,  G06F16/24568 ,  G06F16/2477 ,  H04L43/08

Abstract: Described are systems, methods, and techniques for collecting, analyzing, processing, and storing time series data and for evaluating and dynamically estimating a resolution of one or more streams of data points and updating an output resolution. Responsive to receiving a stream of data points, a data resolution can be derived and an output resolution can be set to a first value. When a change to the data resolution is detected, the output resolution can be changed, modifying a frequency at which output data points are generated and/or transmitted. In some instances, a detector can be implemented to trigger an alert responsive to ingested data points corresponding with triggering parameters. An output resolution for the detector can be dynamically modified based on dynamically detecting a change to the data resolution of the stream of data.

公开(公告)号：US11956137B1

公开(公告)日：2024-04-09

申请号：US17833519

申请日：2022-06-06

Applicant: Splunk Inc.

Inventor： Ozan Turgut ,  Joseph Ari Ross ,  Eyal Ophir ,  Calvin Chan

IPC: H04L43/00 ,  G06F11/30 ,  G06F11/34 ,  G06F11/36 ,  H04L41/0686 ,  H04L43/0817 ,  H04L43/0876 ,  H04L43/16

CPC classification number: H04L43/14 ,  G06F11/3006 ,  G06F11/302 ,  G06F11/3404 ,  G06F11/3409 ,  G06F11/3612 ,  G06F11/3644 ,  H04L41/0686 ,  H04L43/0817 ,  H04L43/16 ,  G06F11/3452 ,  G06F2201/81 ,  H04L43/0876

Abstract: An instrumentation analysis system processes data streams received from servers executing instrumented software. The system determines a set of servers that satisfy a given criteria, for example, a set of servers with high resource utilization. The set of servers may be determined by the system based on triggers or specified by a user. The system analyzes properties of servers to determine a property that characterizes the set of servers. The property characterizing the servers is provided to users via a user interface or alerts for further analysis, for example, to analyze the cause of high resource utilization.

公开(公告)号：US11797366B1

公开(公告)日：2023-10-24

申请号：US17863268

申请日：2022-07-12

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross

IPC: G06F11/07 ,  H04L41/0631

CPC classification number: G06F11/0709 ,  G06F11/079 ,  G06F11/0748 ,  H04L41/0631

Abstract: A process for analyzing an incident includes setting up an alert for a high error rate on a particular endpoint. Once the alert is triggered, a set of traces for transactions exhibiting errors on the offending endpoint is queried. All traces for other services/operations that include errors on the offending endpoint are also enumerated. A set of baseline transactions that involve the offending endpoint, but do not result in error may be utilized to determine whether the errors are always present, or are distinctive for certain offending transactions. All traces are ranked based on a statistic. Once the traces have been ranked, they may be traced down to a deepest/most terminal error. A set of transactions that correlate to the terminal error may also be analyzed to determine infrastructure causes.

公开(公告)号：US20230118988A1

公开(公告)日：2023-04-20

申请号：US17721248

申请日：2022-04-14

Applicant: SPLUNK Inc.

Inventor： Nishant Agarwal ,  Houwu Bai ,  Darshan Patel ,  Rajesh Raman ,  Joseph Ari Ross

IPC: G06F16/28 ,  G06F16/2455 ,  G06F16/2458

Abstract: Described are systems, methods, and techniques for collecting, analyzing, processing, and storing time series data and for evaluating and dynamically estimating a resolution of one or more streams of data points and updating an output resolution. Responsive to receiving a stream of data points, a data resolution can be derived and an output resolution can be set to a first value. When a change to the data resolution is detected, the output resolution can be changed, modifying a frequency at which output data points are generated and/or transmitted. In some instances, a detector can be implemented to trigger an alert responsive to ingested data points corresponding with triggering parameters. An output resolution for the detector can be dynamically modified based on dynamically detecting a change to the data resolution of the stream of data.

公开(公告)号：US11582316B1

公开(公告)日：2023-02-14

申请号：US17245786

申请日：2021-04-30

Applicant: Splunk Inc.

Inventor： Gergely Danyi ,  Joseph Ari Ross

IPC: G06F15/16 ,  H04L67/146 ,  G06F16/906 ,  G06F16/955

Abstract: A method of normalizing URLs associated with a real user session comprises extracting uniform resource locators (URLs) from ingested spans where at least a portion of the URLs comprise unique URL strings. The method also comprises decomposing each of the URLs into a sequence of tokens and grouping together subsets of related URLs. Also, the method comprises representing each subset of related URLs with a normalized URL string.

公开(公告)号：US11526425B1

公开(公告)日：2022-12-13

申请号：US16835179

申请日：2020-03-30

Applicant: SPLUNK INC.

Inventor： Steven Karis ,  Maxime Petazzoni ,  Matthew William Pound ,  Joseph Ari Ross ,  Charles Smith ,  Scott Stewart

IPC: G06F11/36 ,  G06F9/54 ,  G06F16/2455

Abstract: A method of generating metrics data associated with a microservices-based application comprises ingesting a plurality of spans and mapping an ingested span of the plurality of spans to a span identity, wherein the span identity comprises a tuple of information identifying a type of span associated with the span identity, wherein the tuple of information comprises user-configured dimensions. The method further comprises grouping the ingested span by the span identity, wherein the ingested span is grouped with other spans from the plurality of spans comprising a same span identity. The method also comprises computing metrics associated with the span identity and using the metrics to generate a stream of metric data associated with the span identity.