公开(公告)号：US12164522B1

公开(公告)日：2024-12-10

申请号：US17476323

申请日：2021-09-15

Applicant: Splunk Inc.

Inventor： Lin Ma ,  Frank Ye

IPC: G06F16/2455 ,  G06F11/34 ,  G06F16/23 ,  G06N20/00

Abstract: An interface and improved data intake and query system is described herein that allows users to define metrics and that aggregates metric values regardless of the level at which a metric is defined and/or the level at which metric values are available. The improved data intake and query system can initialize a sketch in response to a user providing one or more metric definitions. The initialized sketch includes one or more instances, where each instance produces an output and collects metric value(s), appends the metric value(s) to the output, and forwards the appended data to a process function downstream in a data processing pipeline. The process function separates the output and the metric value(s), sending the output further downstream in the data processing pipeline and sending the metric value(s) to a parallel process function that sits outside the data processing pipeline. The parallel process function can persist the metric value(s).