公开(公告)号：US11687487B1

公开(公告)日：2023-06-27

申请号：US17199318

申请日：2021-03-11

Applicant: Splunk Inc.

Inventor： Bashar Abdul-Jawad ,  Sonal Bablani ,  Gayathri Pandyaram ,  Katlyn Parvin ,  Michael Peterson ,  Sergey Sergeev

IPC: G06F16/11 ,  G06F9/38 ,  G06F16/176 ,  G06F16/23 ,  G06F40/151 ,  G06F9/48

CPC classification number: G06F16/116 ,  G06F9/38 ,  G06F9/485 ,  G06F16/1774 ,  G06F16/2365 ,  G06F40/151

Abstract: Systems and methods are described for updating text files for a processing pipeline without restarting the processing pipeline. A processing pipeline may include a frontend thread and a backend thread. The frontend thread of the processing pipeline may generate transformed data using the text file. A backend thread of the processing pipeline may periodically determine whether an updated text file has been uploaded. The backend thread can determine that an updated text file has been uploaded and cause the frontend thread to pause generating transformed data. The backend thread can validate the updated text file by comparing the text file and the updated text file. Based on validating the updated text file, the backend thread can cause the frontend thread to resume transforming data using the updated text file.

公开(公告)号：US20220121708A1

公开(公告)日：2022-04-21

申请号：US17072964

申请日：2020-10-16

Applicant: SPLUNK INC.

Inventor： Ricky Burnett ,  Michael Peterson ,  Bashar Abdul-Jawad ,  Gayathri Pandyaram

IPC: G06F16/901 ,  G06F16/903 ,  G06F16/9038 ,  G06F16/904

Abstract: Systems and methods are described for performing dynamic data enrichment in accordance with data streaming. In this regard, dynamic data enrichment can be performed to process data later ingested into an indexing system. In performing dynamic data enrichment, a message can be obtained via a data stream. The message is analyzed to identify a data portion within the message to add to a lookup table. Thereafter, the data portion is written to the lookup table to enhance the lookup table with data from the message. The enhanced lookup table can then be used to lookup a data value to append to the message to enrich the message, and the enriched message can be output (e.g., to an indexing system).