-
公开(公告)号:US11733982B1
公开(公告)日:2023-08-22
申请号:US17175330
申请日:2021-02-12
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Arijit Mukherji , Kris Grandy , Phillip Liu
IPC: G06F16/2455 , G06F11/34 , G06F11/30 , G06F9/54 , G06F8/41 , G06F16/16 , G06F11/07 , G06F9/46 , G06F11/36
CPC classification number: G06F8/443 , G06F9/466 , G06F9/542 , G06F11/07 , G06F11/3086 , G06F11/34 , G06F11/3452 , G06F11/3466 , G06F11/3604 , G06F16/164 , G06F16/24568 , G06F11/3006 , G06F11/3072 , G06F11/3409 , G06F2201/81 , G06F2201/835 , G06F2201/86 , G06F2201/88
Abstract: An instrumentation analysis system processes data streams by executing instructions specified using a data stream language program. The data stream language allows users to specify a search condition using a find block for identifying the set of data streams processed by the data stream language program. The set of identified data streams may change dynamically. The data stream language allows users to group data streams into sets of data streams based on distinct values of one or more metadata attributes associated with the input data streams. The data stream language allows users to specify a threshold block for determining whether data values of input data streams are outside boundaries specified using low/high thresholds. The elements of the set of data streams input to the threshold block can dynamically change. The low/high threshold values can be specified as data streams and can dynamically change.
-
公开(公告)号:US11709661B2
公开(公告)日:2023-07-25
申请号:US16547559
申请日:2019-08-21
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Arijit Mukherji , Kris Grandy , Phillip Liu
IPC: G06F8/41 , G06F11/36 , G06F16/16 , G06F16/2455 , G06F11/34 , G06F11/07 , G06F11/30 , G06F9/46 , G06F9/54
CPC classification number: G06F8/443 , G06F9/466 , G06F9/542 , G06F11/07 , G06F11/3086 , G06F11/34 , G06F11/3452 , G06F11/3466 , G06F11/3604 , G06F16/164 , G06F16/24568 , G06F11/3006 , G06F11/3072 , G06F11/3409 , G06F2201/81 , G06F2201/835 , G06F2201/86 , G06F2201/88
Abstract: An instrumentation analysis system processes data streams by executing instructions specified using a data stream language program. The data stream language allows users to specify a search condition using a find block for identifying the set of data streams processed by the data stream language program. The set of identified data streams may change dynamically. The data stream language allows users to group data streams into sets of data streams based on distinct values of one or more metadata attributes associated with the input data streams. The data stream language allows users to specify a threshold block for determining whether data values of input data streams are outside boundaries specified using low/high thresholds. The elements of the set of data streams input to the threshold block can dynamically change. The low/high threshold values can be specified as data streams and can dynamically change.
-
公开(公告)号:US10949180B2
公开(公告)日:2021-03-16
申请号:US15697451
申请日:2017-09-07
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Arijit Mukherji , Kris Grandy , Phillip Liu
IPC: G06F8/41 , G06F11/36 , G06F16/16 , G06F16/2455 , G06F11/34 , G06F11/07 , G06F11/30 , G06F9/46 , G06F9/54
Abstract: An instrumentation analysis system processes data streams by executing instructions specified using a data stream language program. The data stream language allows users to specify a search condition using a find block for identifying the set of data streams processed by the data stream language program. The set of identified data streams may change dynamically. The data stream language allows users to group data streams into sets of data streams based on distinct values of one or more metadata attributes associated with the input data streams. The data stream language allows users to specify a threshold block for determining whether data values of input data streams are outside boundaries specified using low/high thresholds. The elements of the set of data streams input to the threshold block can dynamically change. The low/high threshold values can be specified as data streams and can dynamically change.
-
公开(公告)号:US11797542B1
公开(公告)日:2023-10-24
申请号:US17374837
申请日:2021-07-13
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Maxime Petazzoni , Arijit Mukherji , Phillip Liu
IPC: G06F16/24 , G06F16/2455 , G06F40/279 , G06F16/2453 , G06F40/205 , G06F16/242 , G06F16/28 , G06F16/907
CPC classification number: G06F16/24568 , G06F16/244 , G06F16/24535 , G06F16/284 , G06F16/907 , G06F40/205 , G06F40/279
Abstract: A system processes data stream language expressions that combine result data streams from multiple data stream language sub-expressions. The system determines a set of fixed dimensions based on static analysis of the data stream language sub-expression. The system determines a union set representing a union of the sets of fixed dimensions. The system determines at execution time of the data stream language expression, a plurality of sets of data streams. Each set of data stream corresponds to a data stream language sub-expression from the plurality of data stream language expressions. The system correlates data streams across the plurality of sets of data streams based on the union set. The system determines result data streams for the data stream language expression by combining data values of correlated data streams.
-
公开(公告)号:US11928046B1
公开(公告)日:2024-03-12
申请号:US17515272
申请日:2021-10-29
Applicant: Splunk Inc.
Inventor: Phillip Liu , Arijit Mukherji , Rajesh Raman
IPC: G06F11/36 , G06F11/30 , G06F11/32 , G06F16/2455
CPC classification number: G06F11/3644 , G06F11/3006 , G06F11/3082 , G06F16/24568 , G06F11/323
Abstract: An analysis system receives data streams generated by instances of instrumented software executing on external systems. The analysis system evaluates an expression using data values of the data streams over a plurality of time intervals. For example, the analysis system may aggregate data values of data streams for each time interval. The analysis system determines whether or not a data stream is considered for a time interval based on when the data value arrives during the time interval. The analysis system determines a maximum expected delay value for each data stream being processed. The analysis system evaluates the expression using data values that arrive before their maximum expected delay values. The analysis system also determines a failure threshold value for a data stream. If a data value of a data stream fails to arrive before the failure threshold value, the analysis system marks the data stream as dead.
-
公开(公告)号:US11010278B2
公开(公告)日:2021-05-18
申请号:US16542318
申请日:2019-08-16
Applicant: Splunk Inc.
Inventor: Phillip Liu , Arijit Mukherji , Rajesh Raman , Kris Grandy , Jack Lindamood
Abstract: A data analysis system processes data generated by instrumented software. The data analysis system receives data streams generated by instances of instrumented software executing on systems. The data analysis system also receives metadata describing data streams. The data analysis system receives an expression based on the metadata. The data analysis system receives data of data streams for each time interval and computes the result of the expression based on the received data values. The data analysis system repeats these steps for each time interval. The data analysis system may quantize data values of data streams for each time interval by generating an aggregate value for the time interval based on data received for each data stream for that time interval. The data analysis system evaluates the expression using the quantized data for the time interval.
-
公开(公告)号:US12039307B1
公开(公告)日:2024-07-16
申请号:US18331571
申请日:2023-06-08
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Arijit Mukherji , Kris Grandy , Phillip Liu
IPC: G06F8/41 , G06F9/46 , G06F9/54 , G06F11/07 , G06F11/30 , G06F11/34 , G06F11/36 , G06F16/16 , G06F16/2455
CPC classification number: G06F8/443 , G06F9/466 , G06F9/542 , G06F11/07 , G06F11/3086 , G06F11/34 , G06F11/3452 , G06F11/3466 , G06F11/3604 , G06F16/164 , G06F16/24568 , G06F11/3006 , G06F11/3072 , G06F11/3409 , G06F2201/81 , G06F2201/835 , G06F2201/86 , G06F2201/88
Abstract: An instrumentation analysis system processes data streams by executing instructions specified using a data stream language program. The data stream language allows users to specify a search condition using a find block for identifying the set of data streams processed by the data stream language program. The set of identified data streams may change dynamically. The data stream language allows users to group data streams into sets of data streams based on distinct values of one or more metadata attributes associated with the input data streams. The data stream language allows users to specify a threshold block for determining whether data values of input data streams are outside boundaries specified using low/high thresholds. The elements of the set of data streams input to the threshold block can dynamically change. The low/high threshold values can be specified as data streams and can dynamically change.
-
公开(公告)号:US11194697B2
公开(公告)日:2021-12-07
申请号:US16546860
申请日:2019-08-21
Applicant: Splunk Inc.
Inventor: Phillip Liu , Arijit Mukherji , Rajesh Raman
IPC: G06F11/36 , G06F16/2455 , G06F11/30 , G06F11/32
Abstract: An analysis system receives data streams generated by instances of instrumented software executing on external systems. The analysis system evaluates an expression using data values of the data streams over a plurality of time intervals. For example, the analysis system may aggregate data values of data streams for each time interval. The analysis system determines whether or not a data stream is considered for a time interval based on when the data value arrives during the time interval. The analysis system determines a maximum expected delay value for each data stream being processed. The analysis system evaluates the expression using data values that arrive before their maximum expected delay values. The analysis system also determines a failure threshold value for a data stream. If a data value of a data stream fails to arrive before the failure threshold value, the analysis system marks the data stream as dead.
-
公开(公告)号:US11093506B1
公开(公告)日:2021-08-17
申请号:US16427024
申请日:2019-05-30
Applicant: Splunk Inc.
Inventor: Rajesh Raman , Maxime Petazzoni , Arijit Mukherji , Phillip Liu
IPC: G06F16/24 , G06F16/2455 , G06F16/242 , G06F16/2453 , G06F16/907 , G06F16/28 , G06F40/205 , G06F40/279
Abstract: A system processes data stream language expressions that combine result data streams from multiple data stream language sub-expressions. The system determines a set of fixed dimensions based on static analysis of the data stream language sub-expression. The system determines a union set representing a union of the sets of fixed dimensions. The system determines at execution time of the data stream language expression, a plurality of sets of data streams. Each set of data stream corresponds to a data stream language sub-expression from the plurality of data stream language expressions. The system correlates data streams across the plurality of sets of data streams based on the union set. The system determines result data streams for the data stream language expression by combining data values of correlated data streams.
-
-
-
-
-
-
-
-