Dynamically assigning a search head and search nodes for a query

    公开(公告)号:US11157497B1

    公开(公告)日:2021-10-26

    申请号:US16513555

    申请日:2019-07-16

    申请人: Splunk Inc.

    IPC分类号: G06F16/00 G06F16/2453

    摘要: Systems and methods are disclosed for dynamically assigning a search head or search nodes in a data intake and query system for a query received by the data intake and query system. Existing search heads and search nodes can periodically report their status to the data intake and query system, which can use that information to help determine the need to provision additional search heads and search nodes. The data intake and query system can receive a query identifying a set of data to be processed and a manner of processing the set of data. The data intake and query system can use the status information for existing search heads and search nodes to dynamically assign a search head and search nodes for the query. Dynamically assigning the search head and search nodes in this manner may provide many benefits, including improved load balancing and resource utilization.