-
1.
公开(公告)号:US12079255B1
公开(公告)日:2024-09-03
申请号:US17978681
申请日:2022-11-01
申请人: SPLUNK INC.
发明人: Vishal Patel , Jagannath Kerai , Hasan Alayli
CPC分类号: G06F16/328 , G06F16/1734
摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.
-
公开(公告)号:US10545798B2
公开(公告)日:2020-01-28
申请号:US15420590
申请日:2017-01-31
申请人: Splunk Inc.
摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.
-
公开(公告)号:US20190213206A1
公开(公告)日:2019-07-11
申请号:US16353886
申请日:2019-03-14
申请人: Splunk Inc
发明人: Vishal Patel , Jagannath Kerai , Hasan Alayli
CPC分类号: G06F16/328 , G06F16/1734
摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.
-
公开(公告)号:US11562023B1
公开(公告)日:2023-01-24
申请号:US15967585
申请日:2018-04-30
申请人: Splunk Inc.
发明人: Alexandros Batsakis , Sourav Pal , Sai Krishna Sajja , Hasan Alayli , Vishal Patel , Igor Stojanovski , Eric Woo , Steve Wong , Tameem Anwar
IPC分类号: G06F16/901 , G06F3/06 , G06F16/23 , G06F16/27
摘要: Systems and methods are disclosed for processing and executing queries in a data intake and query system. An indexing system of the data intake and query system receives data and stores at least a portion of it in buckets, which are then stored in a shared storage system. The indexing system merges multiple buckets to generate merged buckets and uploads the merged buckets to the shared storage system.
-
公开(公告)号:US11550829B2
公开(公告)日:2023-01-10
申请号:US16353886
申请日:2019-03-14
申请人: Splunk Inc
发明人: Vishal Patel , Jagannath Kerai , Hasan Alayli
摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.
-
公开(公告)号:US20210279113A1
公开(公告)日:2021-09-09
申请号:US17237904
申请日:2021-04-22
申请人: SPLUNK INC.
摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on a source type of the plurality of first chunks. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.
-
公开(公告)号:US11016821B2
公开(公告)日:2021-05-25
申请号:US16703236
申请日:2019-12-04
申请人: SPLUNK INC.
摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.
-
公开(公告)号:US10268755B2
公开(公告)日:2019-04-23
申请号:US14700844
申请日:2015-04-30
申请人: Splunk Inc.
发明人: Vishal Patel , Jagannath Kerai , Hasan Alayli
IPC分类号: G06F17/30
摘要: The present disclosure is directed to providing dynamic indexer discovery. An index manager, which may also be known as a cluster master, is configured to track the statuses and capabilities of indexers and provide the statuses and capabilities obtained from the indexers to data collectors, such as forwarders. The data collectors may use the statuses and capabilities associated with the indexers to load balance transmission of data to the indexers. Dynamic indexer discovery may eliminate the need to manually reconfigure data collectors when the status of an indexer changes because the information may be obtained from the index manager without the need to reinitialize the data collectors.
-
公开(公告)号:US20180217874A1
公开(公告)日:2018-08-02
申请号:US15420590
申请日:2017-01-31
申请人: Splunk Inc.
摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.
-
公开(公告)号:US11599396B2
公开(公告)日:2023-03-07
申请号:US17237904
申请日:2021-04-22
申请人: SPLUNK INC.
摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on a source type of the plurality of first chunks. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.
-
-
-
-
-
-
-
-
-