专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11188550B2 Metrics store system 有权
公开(公告)号：US11188550B2
公开(公告)日：2021-11-30
申请号：US15339912
申请日：2016-10-31
申请人： Splunk Inc.
发明人： Thomas Allan Haggie , Clint Sharp , Alexander Douglas James , David Ryan Marquardt , Hailun Yan , Christopher Pride , Vishal Patel , Amrittpal Singh Bath , Pratiksha Shah , Murugan Kandaswamy , Steve Yu Zhang , Ledion Bitincka , David E. Simmen , Marc Andre Chene , Esguerra Ma Kharisma , Igor Stojanovski
IPC分类号： G06F16/248 , G06F16/22 , G06F16/25 , G06F16/28 , G06F16/901 , G06F16/951 , G06F16/242 , G06F16/2455 , G06F16/2458 , G06F16/835 , G06F16/9038 , G06F16/9535 , G06F16/903 , H04L29/08 , G06F3/0481 , G06T11/20 , H04L12/26
摘要： The disclosed embodiments include a method performed by a data intake and query system. The method includes ingesting each metric including at least one key value and a measured value taken of a computing resource, and storing each metric in an index of a metrics store, where the index defines at least one dimension populated with the at least one key value and a measure populated with the measured value. The method further includes cataloging metadata in a metrics catalog, where the metadata is related to the metrics stored in the metrics store, performing an analysis of metrics data included in the metrics store and/or the metrics catalog to obtain results, and causing display of the results or an indication of the results on a display device.

2. 发明授权

US10642909B2 Utilizing a dual mode search 有权
公开(公告)号：US10642909B2
公开(公告)日：2020-05-05
申请号：US15885629
申请日：2018-01-31
申请人： SPLUNK INC.
发明人： Ledion Bitincka , Steve Zhang , Igor Stojanovski , Stephen Sorkin
IPC分类号： G06F17/30 , G06F16/951 , G06F16/2455 , G06F16/2458 , G06F16/903
摘要： A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

3. 发明申请

US20180336215A1 PRE-FETCHING FILES FROM BUCKETS IN REMOTE STORAGE FOR A CACHE BASED ON FILE USAGE HISTORY 审中-公开
公开(公告)号：US20180336215A1
公开(公告)日：2018-11-22
申请号：US16049357
申请日：2018-07-30
申请人： Splunk, Inc.
发明人： Ledion Bitincka , Alexandros Batsakis , Paul J. Lucas , Nicholas Robert Romito
IPC分类号： G06F17/30 , G06F12/0875 , G06F3/06 , G06F12/0802 , G06F12/0862 , G06F12/0866 , G06F12/0873 , G06F12/0871 , G06F12/0868
摘要： Embodiments are disclosed for a prefetching method that may include copying, in response to a search query, a first bucket from a remote storage to a cache. The first bucket may include first data associated with the search query. The method may further include identifying a first file type associated with a first file in the first bucket. The first file may be associated with a usage status. The method may further include accessing, based on the search query, a second bucket from the remote storage. The second bucket may include second data associated with the search query. The method may further include identifying a second file in the second bucket having the first file type, and copying, in response to the usage status indicating that the first file was used in processing the search query, the second file from the remote storage to the cache.

4. 发明申请

US20180322202A1 GENERATING SEARCH QUERIES BASED ON QUERY FORMATS FOR DISPARATE DATA COLLECTIONS SYSTEMS 审中-公开
公开(公告)号：US20180322202A1
公开(公告)日：2018-11-08
申请号：US16032890
申请日：2018-07-11
申请人： SPLUNK INC.
发明人： Ledion Bitincka , Steve Zhang , Igor Stojanovski , Stephen Sorkin
IPC分类号： G06F17/30
CPC分类号： G06F17/30864 , G06F17/30477 , G06F17/30516 , G06F17/30545 , G06F17/30979
摘要： A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing realtime search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.

5. 发明授权

US09514189B2 Processing a system search request including external data sources 有权
标题翻译：处理包括外部数据源的系统搜索请求
公开(公告)号：US09514189B2
公开(公告)日：2016-12-06
申请号：US14449144
申请日：2014-07-31
申请人： Splunk Inc.
发明人： Ledion Bitincka , Steve Zhang , Igor Stojanovski , Stephen Sorkin
IPC分类号： G06F17/30
CPC分类号： G06F17/30864 , G06F17/30477 , G06F17/30516 , G06F17/30545 , G06F17/30979
摘要： A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.
摘要翻译：通过分析所接收的搜索请求来识别在搜索支持系统的计算机处接收的搜索请求，以识别请求参数并连接到在请求参数中引用的搜索支持系统的系统索引。启动外部结果提供程序（ERP）进程，在搜索支持系统和搜索支持系统外部的数据源之间建立通信，为请求参数中引用的虚拟索引。因此，ERP过程提供了搜索支持系统和外部数据源之间的接口，如第三方。 ERP流程可以以流模式运行（以最少的处理提供实时搜索结果）和/或报告模式（提供更大的延迟和处理范围的结果），并且可以在模式之间切换。从连接的系统索引和引用的虚拟索引接收搜索请求结果。

6. 发明申请

US20150058353A1 Report Acceleration Using Intermediate Summaries 审中-公开
标题翻译：使用中级摘要报告加速
公开(公告)号：US20150058353A1
公开(公告)日：2015-02-26
申请号：US14530678
申请日：2014-10-31
申请人： Splunk Inc.
发明人： Stephen P. Sorkin , Steve Yu Zhang , Ledion Bitincka
IPC分类号： G06F17/30
CPC分类号： G06F17/30321 , G06F17/30424 , G06F17/30554 , G06F17/30584 , G06F17/30946
摘要： A method and system for managing searches of a data set that is partitioned based on a plurality of events. A structure of a search query may be analyzed to determine if logical computational actions performed on the data set is reducible. Data in each partition is analyzed to determine if at least a portion of the data in the partition is reducible. In response to a subsequent or reoccurring search request, intermediate summaries of reducible data and reducible search computations may be aggregated for each partition. Next, a search result may be generated based on at least one of the aggregated intermediate summaries, the aggregated reducible search computations, and a query of adhoc non-reducible data arranged in at least one of the plurality of partitions for the data set.
摘要翻译：一种用于管理基于多个事件划分的数据集的搜索的方法和系统。可以分析搜索查询的结构以确定对数据集执行的逻辑计算动作是否可减少。分析每个分区中的数据以确定分区中的数据的至少一部分是否可缩减。响应于随后或重复出现的搜索请求，可以针对每个分区聚合可缩减数据和可缩减搜索计算的中间摘要。接下来，可以基于聚合中间摘要，聚合可缩减搜索计算以及排列在用于数据集的多个分区中的至少一个分区中的adhoc不可还原数据的查询中的至少一个来生成搜索结果。

7. 发明授权

US08682886B2 Report acceleration using intermediate summaries of events 有权
标题翻译：使用中间事件摘要报告加速
公开(公告)号：US08682886B2
公开(公告)日：2014-03-25
申请号：US13664239
申请日：2012-10-30
申请人： Splunk Inc.
发明人： Stephen Phillip Sorkin , Steve Yu Zhang , Ledion Bitincka
IPC分类号： G06F17/30
CPC分类号： G06F17/30321 , G06F17/30424 , G06F17/30554 , G06F17/30584 , G06F17/30946
摘要： A method and system for managing searches of a data set that is partitioned based on a plurality of events. A structure of a search query may be analyzed to determine if logical computational actions performed on the data set is reducible. Data in each partition is analyzed to determine if at least a portion of the data in the partition is reducible. In response to a subsequent or reoccurring search request, intermediate summaries of reducible data and reducible search computations may be aggregated for each partition. Next, a search result may be generated based on at least one of the aggregated intermediate summaries, the aggregated reducible search computations, and a query of adhoc non-reducible data arranged in at least one of the plurality of partitions for the data set.
摘要翻译：一种用于管理基于多个事件划分的数据集的搜索的方法和系统。可以分析搜索查询的结构以确定对数据集执行的逻辑计算动作是否可减少。分析每个分区中的数据以确定分区中的数据的至少一部分是否可缩减。响应于随后或重复出现的搜索请求，可以针对每个分区聚合可缩减数据和可缩减搜索计算的中间摘要。接下来，可以基于聚合中间摘要，聚合可缩减搜索计算以及排列在用于数据集的多个分区中的至少一个分区中的adhoc不可还原数据的查询中的至少一个来生成搜索结果。

8. 发明申请

US20130311509A1 TRANSPARENT INDEX SUMMARIZATION 有权
标题翻译：透明指数总结
公开(公告)号：US20130311509A1
公开(公告)日：2013-11-21
申请号：US13664239
申请日：2012-10-30
申请人： SPLUNK INC.
发明人： Stephen Phillip Sorkin , Steve Yu Zhang , Ledion Bitincka
IPC分类号： G06F17/30
CPC分类号： G06F17/30321 , G06F17/30424 , G06F17/30554 , G06F17/30584 , G06F17/30946
摘要： A method and system for managing searches of a data set that is partitioned based on a plurality of events. A structure of a search query may be analyzed to determine if logical computational actions performed on the data set is reducible. Data in each partition is analyzed to determine if at least a portion of the data in the partition is reducible. In response to a subsequent or reoccurring search request, intermediate summaries of reducible data and reducible search computations may be aggregated for each partition. Next, a search result may be generated based on at least one of the aggregated intermediate summaries, the aggregated reducible search computations, and a query of adhoc non-reducible data arranged in at least one of the plurality of partitions for the data set.
摘要翻译：一种用于管理基于多个事件划分的数据集的搜索的方法和系统。可以分析搜索查询的结构以确定对数据集执行的逻辑计算动作是否可减少。分析每个分区中的数据以确定分区中的数据的至少一部分是否可缩减。响应于随后或重复出现的搜索请求，可以针对每个分区聚合可缩减数据和可缩减搜索计算的中间摘要。接下来，可以基于聚合中间摘要，聚合可缩减搜索计算以及排列在用于数据集的多个分区中的至少一个分区中的adhoc不可还原数据的查询中的至少一个来生成搜索结果。

9. 发明授权

US11620336B1 Managing and storing buckets to a remote shared storage system based on a collective bucket size 有权
公开(公告)号：US11620336B1
公开(公告)日：2023-04-04
申请号：US15967582
申请日：2018-04-30
申请人： Splunk Inc.
发明人： Alexandros Batsakis , Sourav Pal , Sai Krishna Sajja , Igor Stojanovski , Ledion Bitincka , John Nguyen
IPC分类号： G06F16/901 , G06F3/06 , G06F16/27 , G06F16/903
摘要： Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives raw machine data at an indexing system, and stores at least a portion of the raw machine data in buckets. Based on a determination that the size of multiple buckets satisfies a threshold size, the data intake and query system converts the buckets to non-editable buckets and stores the data in a remote shared storage system.

10. 发明授权

US11416505B2 Querying an archive for a data store 有权
公开(公告)号：US11416505B2
公开(公告)日：2022-08-16
申请号：US17080067
申请日：2020-10-26
申请人： SPLUNK Inc.
发明人： Elizabeth Lin , Nils Petter Eriksson , Ledion Bitincka
IPC分类号： G06F16/30 , G06F16/2458
摘要： In embodiments, a computer-implemented method may entail receiving a search request. A first data store and a second data store, that contains data archived from the first data store, may be identified. Data from the first data store may remain available in the first data store for a limited period of time once archived to the second data store. The first data store storing data in a first format and the second data store storing data in a second format, the first format and the second format being different from one another. Determining that a subset of data that has been archived into the second data store and is to be searched as part of the search request is still available from the first data store, and executing the search request on the subset of data utilizing the first data store. Additional embodiments are described and/or claimed.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式