公开(公告)号：US20170139961A1

公开(公告)日：2017-05-18

申请号：US15420938

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： MICHAEL JOSEPH BAUM ,  R. DAVID CARASSO ,  ROBIN KUMAR DAS ,  RORY GREENE ,  BRADLEY HALL ,  NICHOLAS CHRISTIAN MEALY ,  BRIAN PHILIP MURPHY ,  STEPHEN PHILLIP SORKIN ,  ANDRE DAVID STECHERT ,  ERIK M. SWAN

IPC: G06F17/30

CPC classification number: G06F17/30336 ,  G06F17/30321 ,  G06F17/30342 ,  G06F17/30353 ,  G06F17/30516 ,  G06F17/30528 ,  G06F17/3053 ,  G06F17/30551 ,  G06F17/30554 ,  G06F17/30864

Abstract: Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.