Systems and methods for updating a status indication in a system providing dynamic indexer discovery

    公开(公告)号:US12079255B1

    公开(公告)日:2024-09-03

    申请号:US17978681

    申请日:2022-11-01

    申请人: SPLUNK INC.

    IPC分类号: G06F17/00 G06F16/17 G06F16/31

    CPC分类号: G06F16/328 G06F16/1734

    摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.

    Resegmenting chunks of data for efficient load balancing across indexers

    公开(公告)号:US10545798B2

    公开(公告)日:2020-01-28

    申请号:US15420590

    申请日:2017-01-31

    申请人: Splunk Inc.

    IPC分类号: G06F9/50 G06F3/06

    摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

    SYSTEMS AND METHODS FOR PROVIDING DYNAMIC INDEXER DISCOVERY

    公开(公告)号:US20190213206A1

    公开(公告)日:2019-07-11

    申请号:US16353886

    申请日:2019-03-14

    申请人: Splunk Inc

    IPC分类号: G06F16/31 G06F16/17

    CPC分类号: G06F16/328 G06F16/1734

    摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.

    Systems and methods for load balancing in a system providing dynamic indexer discovery

    公开(公告)号:US11550829B2

    公开(公告)日:2023-01-10

    申请号:US16353886

    申请日:2019-03-14

    申请人: Splunk Inc

    IPC分类号: G06F17/00 G06F16/31 G06F16/17

    摘要: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.

    RESEGMENTING CHUNKS OF DATA BASED ON SOURCE TYPE TO FACILITATE LOAD BALANCING

    公开(公告)号:US20210279113A1

    公开(公告)日:2021-09-09

    申请号:US17237904

    申请日:2021-04-22

    申请人: SPLUNK INC.

    IPC分类号: G06F9/50 G06F3/06

    摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on a source type of the plurality of first chunks. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

    Resegmenting chunks of data for efficient load balancing across indexers

    公开(公告)号:US11016821B2

    公开(公告)日:2021-05-25

    申请号:US16703236

    申请日:2019-12-04

    申请人: SPLUNK INC.

    IPC分类号: G06F9/50 G06F3/06

    摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

    Systems and methods for providing dynamic indexer discovery

    公开(公告)号:US10268755B2

    公开(公告)日:2019-04-23

    申请号:US14700844

    申请日:2015-04-30

    申请人: Splunk Inc.

    IPC分类号: G06F17/30

    摘要: The present disclosure is directed to providing dynamic indexer discovery. An index manager, which may also be known as a cluster master, is configured to track the statuses and capabilities of indexers and provide the statuses and capabilities obtained from the indexers to data collectors, such as forwarders. The data collectors may use the statuses and capabilities associated with the indexers to load balance transmission of data to the indexers. Dynamic indexer discovery may eliminate the need to manually reconfigure data collectors when the status of an indexer changes because the information may be obtained from the index manager without the need to reinitialize the data collectors.

    RESEGMENTING CHUNKS OF DATA FOR EFFICIENT LOAD BALANCING ACROSS INDEXERS

    公开(公告)号:US20180217874A1

    公开(公告)日:2018-08-02

    申请号:US15420590

    申请日:2017-01-31

    申请人: Splunk Inc.

    IPC分类号: G06F9/50 G06F3/06

    摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on entry boundaries in at least some of the plurality of first chunks of data. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.

    Resegmenting chunks of data based on source type to facilitate load balancing

    公开(公告)号:US11599396B2

    公开(公告)日:2023-03-07

    申请号:US17237904

    申请日:2021-04-22

    申请人: SPLUNK INC.

    IPC分类号: G06F9/50 G06F3/06

    摘要: Resegmenting chunks of data for load balancing is disclosed. A plurality of first chunks of data is received. The plurality of first chunks of data includes one or more entries that include raw data produced by a component of an information technology environment and that reflects activity in the information technology environment. The plurality of first chunks of data is resegmented into a plurality of second chunks of data based on a source type of the plurality of first chunks. A first subset of the plurality of second chunks of data is distributed to a first indexer of a set of indexers. An occurrence of a trigger event is determined, and in response to the trigger event, a second subset of the plurality of second chunks of data is distributed to a second indexer of the set of indexers.