公开(公告)号：US20150347523A1

公开(公告)日：2015-12-03

申请号：US14815974

申请日：2015-08-01

Applicant: Splunk Inc.

Inventor： VISHAL PATEL ,  MITCHELL NEUMAN BLANK, JR. ,  SUNDAR RENEGARAJAN VASAN ,  STEPHEN PHILLIP SORKIN

IPC: G06F17/30

CPC classification number: G06F17/30528 ,  G06F3/0617 ,  G06F3/065 ,  G06F3/067 ,  G06F11/20 ,  G06F11/2094 ,  G06F17/30241 ,  G06F17/30336 ,  G06F17/30575 ,  G06F17/30581 ,  G06F17/30867 ,  G06F17/3087 ,  H04L67/1097

Abstract: Embodiments are directed towards managing within a cluster environment having a plurality of indexers for data storage using redundancy the data being managed using a generation identifier, such that a primary indexer is designated for a given generation of data. When a master device for the cluster fails, data may continue to be stored using redundancy, and data searches performed may still be performed.

Abstract translation: 实施例旨在在具有多个索引器的集群环境内管理，用于使用生成标识符来管理数据的冗余来进行数据存储，从而为指定的生成数据指定主索引器。 当集群的主设备发生故障时，可以继续使用冗余来存储数据，并且仍然可以执行数据搜索。

公开(公告)号：US20170139983A1

公开(公告)日：2017-05-18

申请号：US15421415

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： ALICE EMILY NEELS ,  ARCHANA SULOCHANA GANAPATHI ,  MARC VINCENT ROBICHAUD ,  STEPHEN PHILLIP SORKIN ,  STEVE YU ZHANG

IPC: G06F17/30 ,  G06F3/0482

CPC classification number: G06F17/30395 ,  G06F3/0482 ,  G06F17/248 ,  G06F17/30283 ,  G06F17/30424 ,  G06F17/30528 ,  G06F17/30554 ,  G06F17/30867

Abstract: Embodiments include generating data models that may give semantic meaning for unstructured or structured data that may include data generated and/or received by search engines, including a time series engine. A method includes generating a data model for data stored in a repository. Generating the data model includes generating an initial query string, executing the initial query string on the data, generating an initial result set based on the initial query string being executed on the data, determining one or more candidate fields from one or results of the initial result set, generating a candidate data model based on the one or more candidate fields, iteratively modifying the candidate data model until the candidate data model models the data, and using the candidate data model as the data model.

公开(公告)号：US20190095062A1

公开(公告)日：2019-03-28

申请号：US16204989

申请日：2018-11-29

Applicant: SPLUNK INC.

Inventor： ALICE EMILY NEELS ,  ARCHANA SULOCHANA GANAPATHI ,  MARC VINCENT ROBICHAUD ,  STEPHEN PHILLIP SORKIN ,  STEVE YU ZHANG

IPC: G06F3/0482 ,  G06F17/24

Abstract: Embodiments include generating data models that may give semantic meaning for unstructured or structured data that may include data generated and/or received by search engines, including a time series engine. A method includes generating a data model for data stored in a repository. Generating the data model includes generating an initial query string, executing the initial query string on the data, generating an initial result set based on the initial query string being executed on the data, determining one or more candidate fields from one or results of the initial result set, generating a candidate data model based on the one or more candidate fields, iteratively modifying the candidate data model until the candidate data model models the data, and using the candidate data model as the data model.

公开(公告)号：US20170139961A1

公开(公告)日：2017-05-18

申请号：US15420938

申请日：2017-01-31

Applicant: Splunk Inc.

Inventor： MICHAEL JOSEPH BAUM ,  R. DAVID CARASSO ,  ROBIN KUMAR DAS ,  RORY GREENE ,  BRADLEY HALL ,  NICHOLAS CHRISTIAN MEALY ,  BRIAN PHILIP MURPHY ,  STEPHEN PHILLIP SORKIN ,  ANDRE DAVID STECHERT ,  ERIK M. SWAN

IPC: G06F17/30

CPC classification number: G06F17/30336 ,  G06F17/30321 ,  G06F17/30342 ,  G06F17/30353 ,  G06F17/30516 ,  G06F17/30528 ,  G06F17/3053 ,  G06F17/30551 ,  G06F17/30554 ,  G06F17/30864

Abstract: Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.