Patents Assigned to Splunk Inc.
-
Patent number: 12093272Abstract: A computing device can receive a query that identifies a set of data to be processed and determine that a portion of the set of data resides in an external data system. The query system can request data identifiers associated with data objects of the set of data from the external data system and communicate the data identifiers to a data queue. The computing device can instruct one or more search nodes to retrieve the identifiers from the data queue. The search nodes can use the data identifiers to retrieve data objects from the external data system and process the data objects according to instructions received from the computing device. The search nodes can provide results of the processing to the computing device.Type: GrantFiled: April 29, 2022Date of Patent: September 17, 2024Assignee: Splunk Inc.Inventors: Alexandros Batsakis, Nitilaksha Satyaveera Halakatti, Ningxuan He, Prem Kumar Jayaraj, Manuel Gregorio Martinez, Balaji Rao, Jianming Zhang, Steve Yu Zhang
-
Patent number: 12093318Abstract: Systems and methods are disclosed for recommending query parameters to a user based on tenant information. The system can identify a token query parameter from a portion of a query entered in a user interface. The token query parameter can correspond to a system query parameter, such as a query command, a function, etc., or to a user query parameter. The system can identify a tenant of a distributed data intake and query system that is associated with the query. Based on the token query parameter, the system can identify at least one query parameter associated with the tenant. The at least one query parameter can include one or more query parameters previously entered by the user or other users of the tenant, etc. The system can cause the user interface to display one or more recommended query parameters for inclusion in the query.Type: GrantFiled: July 11, 2022Date of Patent: September 17, 2024Assignee: Splunk Inc.Inventors: Benoit Bourbie, Nikhil Mungel, Peigen Sun
-
Patent number: 12088611Abstract: A computerized method is disclosed that includes operations of obtaining historical network traffic and preparing a training set of data by: applying security rules to the historical network traffic data to obtain a first filtered subset of network transmissions representing a first set of beaconing candidates that is labeled to form a first set of labeled results, applying a clustering logic to the historical network traffic data to obtain a second filtered subset of network transmissions representing a second set of beaconing candidates that is labeled to form a second set of labeled results, applying a machine learning model to the historical network traffic data to label the historical network traffic forming a third set of labeled results, wherein the first, second and third sets of labeled results are augmented to form an augmented labeled training set, and training a machine learning model using the augmented labeled training set.Type: GrantFiled: January 11, 2022Date of Patent: September 10, 2024Assignee: Splunk Inc.Inventors: Cui Lin, Stanislav Miskovic
-
Patent number: 12086920Abstract: Various implementations set forth a computer-implemented method for scanning a three-dimensional (3D) environment. The method includes generating, in a first time interval, a first extended reality (XR) stream based on a first set of meshes representing a 3D environment, transmitting, to a remote device, the first XR stream for rendering a 3D representation of a first portion of the 3D environment in a remote XR environment, determining that the 3D environment has changed based on a second set of meshes representing the 3D environment and generated subsequent to the first time interval, generating a second XR stream based on the second set of meshes, and transmitting, to the remote device, the second XR stream for rendering a 3D representation of at least a portion of the changed 3D environment in the remote XR environment.Type: GrantFiled: October 29, 2021Date of Patent: September 10, 2024Assignee: SPLUNK INC.Inventors: Devin Bhushan, Caelin Thomas Jackson-King, Stanislav Yazhenskikh, Jim Jiaming Zhu
-
Patent number: 12086451Abstract: A process for facilitating downscaling of datastores (e.g., in a stateful system) is described herein. In embodiments, a set of metrics associated with a set of data stores of a stateful service is obtained. The set of metrics may indicate a utilization of each of the data stores of the set of data stores. Based on the set of metrics indicating underutilization associated with at least a portion of the set of data stores, a determination is made to initiate a downscaling of the set of data stores. Thereafter, a downscaler is deployed to perform downscaling operations to downscale the set of data stores. The downscaler communicates with a first data store to replicate data of the first data store onto a second data store. Based on identifying that the downscaler has completed the downscaling operations to downscale the set of data stores, the downscaler is terminated.Type: GrantFiled: April 29, 2022Date of Patent: September 10, 2024Assignee: Splunk Inc.Inventors: Maurice Stanley Barnum, Prashant Kumar, Pradeep Baliganapalli Nagaraju
-
Patent number: 12086045Abstract: A computerized method is disclosed for grouping alerts through machine learning. The method including receiving an alert to be assigned to any of a plurality of existing issues or to a newly created issue, wherein an issue is a grouping of alerts, determining a temporal distance between the alert and each of the existing issues, determining either of (i) a numerical distance between the alert and each of the existing issues for a particular numerical field, or (ii) a categorical distance between the alert and each of the existing issues for a particular categorical field, determining an overall distance between the alert and each of the existing issues, and assigning the alert to either (i) an existing issue having a shortest overall distance to the alert that satisfies one or more time constraints, or (ii) the newly created issue.Type: GrantFiled: January 31, 2022Date of Patent: September 10, 2024Assignee: Splunk Inc.Inventors: William Deaderick, William Stanton, Thomas Camp Vieth
-
Patent number: 12086150Abstract: Systems and methods are disclosed for generating one or more files to visualize query results. The systems and methods can include parsing one or more files that include one or more queries and computer-executable instructions for displaying results of the one or more queries. The one or more queries can identify a set of data to be processed and a manner of processing the set of data. The systems and methods can further include generating one or more files that include the results of the queries and computer-executable instructions for displaying one or more visualizations of the results.Type: GrantFiled: January 27, 2023Date of Patent: September 10, 2024Assignee: Splunk Inc.Inventors: Nicholas J. Filippi, Siegfried Puchbauer, Ruyuan Ge
-
Systems and methods for updating a status indication in a system providing dynamic indexer discovery
Patent number: 12079255Abstract: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.Type: GrantFiled: November 1, 2022Date of Patent: September 3, 2024Assignee: SPLUNK INC.Inventors: Vishal Patel, Jagannath Kerai, Hasan Alayli -
Patent number: 12079233Abstract: Embodiments described herein are directed to facilitating performing online data decomposition to identify multiple seasonal components. In accordance with aspects of the present disclosure, a first iterative process is performed to determine a first seasonal component associated with an incoming data point based on a set of previous data points of a time series data set and corresponding data components. In addition, a second iterative process is performed to determine a second seasonal component associated with the incoming data point based on previous data points of the time series data set and corresponding data components. The first seasonal component and the second seasonal component can then be provided for analysis of the incoming data point (e.g., for presentation, for use in determining trend and residual components, etc.).Type: GrantFiled: April 30, 2021Date of Patent: September 3, 2024Assignee: Splunk Inc.Inventors: Abhinav Mishra, Ram Sriharsha, Sichen Zhong
-
Patent number: 12079100Abstract: A computerized method is disclosed for grouping alerts and providing remediation recommendation. The method includes receiving the alert to be assigned to an existing open issue or a newly created issue, wherein an issue is a grouping of one or more alerts, assigning the alert to either a first existing open issue or the newly created issue by determining a weighted sum of the distance between the feature vectors of the alert and each existing open issue, determining a weighted sum of the distance between the feature vectors of the alert and each closed issue, and generating a user interface that illustrates an assignment of the alert and at least one of (i) a closed issue having a shortest distance to the alert or (ii) recommended remediation efforts associated with the closed issue having the shortest distance to the alert.Type: GrantFiled: January 31, 2022Date of Patent: September 3, 2024Assignee: Splunk Inc.Inventors: William Deaderick, William Stanton, Thomas Camp Vieth
-
Patent number: 12079304Abstract: Embodiments of the present disclosure are directed to facilitating performing online data forecasting. In operation, data decomposition of an incoming data point is performed to determine a trend component associated with the incoming data point. Such a trend component, and previous trend components, can be used to determine a trend component expected for a data point subsequent to the incoming data point. A seasonality component expected for the data point subsequent to the incoming data point can be identified, for example, based on a seasonality component associated with a previous corresponding data point. Thereafter, the expected trend and seasonality components can be used to predict the data point subsequent to the incoming data point. Such a data prediction can be performed in an online processing manner such that a subsequent data point is not used to decompose the incoming data point or forecast the data point.Type: GrantFiled: April 30, 2021Date of Patent: September 3, 2024Assignee: Splunk Inc.Inventors: Abhinav Mishra, Ram Sriharsha, Sichen Zhong
-
Patent number: 12079672Abstract: Embodiments of the present invention are directed to facilitating efficient message queueing. In particular, embodiments herein describe, among other things, a redelivery monitor used to monitor when to redeliver messages, or tasks, for reprocessing based on expiration of a redelivery deadline. In this regard, markers indicating processing states for tasks being processed are read by the redelivery monitor. When the processing state indicates that processing is ongoing, the redelivery deadline is extended such that a message or task is not redelivered for processing while the message or task is being processed.Type: GrantFiled: August 30, 2023Date of Patent: September 3, 2024Assignee: Splunk Inc.Inventors: Daniel Ferstay, Denis Vergnes
-
Patent number: 12081418Abstract: In various embodiments, a computer-implemented method comprises acquiring status data for settings that control operations of the edge sensor device, transmitting the status data to a backend system, receiving a command to modify settings that control the operations of the edge sensor device, the settings specifying (i) one or more subscribers, and (ii) a data collection limit, in response to receiving the command, modifying the setting, acquiring sensor data associated with a physical device operating within a physical environment, where a sensor service collects the the sensor data up to the data collection limit, and the edge sensor device is located proximal to the physical device, inputting the sensor data into an onboard message broker for publishing, and transmitting, from the onboard message broker, the sensor data, where the sensor data is addressed to a first set of one or more subscribers of the onboard message broker.Type: GrantFiled: January 28, 2021Date of Patent: September 3, 2024Assignee: SPLUNK INC.Inventors: Jesse Chor, Casing Chu, Tishan Mills, Anthony Ng, Rodrigo Paulo Quaresma, Jonathan Yeung
-
Patent number: 12079175Abstract: Systems and methods are described herein for synthesizing traces from logs of a distributed computing system. A trace represents a single transaction, such as handling of a user request, on the distributed computing system. The transaction can include multiple underlying operations on the distributed computing system, which are represented as spans within the trace and may be hierarchically arranged within the trace. In instances where a distributed computing system does not provide for tracing natively, a trace can be synthesized from log entries of the distributed computing system. A streaming data processing system can ingest a data stream including log entries, and identify within the data stream those log entries relating to a given transaction. The streaming data processing system can further identify log entries that demark the beginnings and endings of operations for that transaction, and can utilize the identified log entries to build a trace for the transaction.Type: GrantFiled: October 19, 2020Date of Patent: September 3, 2024Assignee: Splunk Inc.Inventors: Poornima Devaraj, Joseph Gabriel Echeverria, Venkata SreeKrishna Koganti, Shyam Mundhra, Hardik Shah, Xiangyu Wu, Ryan Konrad Yee
-
Patent number: 12072907Abstract: A graphical user interface (GUI) includes multiple data visualizations and an adjustable graphical user control. The data underlying the data visualizations are timestamped, and the graphical user control enables a user to select a time interval. When a time interval is selected or modified via the graphical user control, the multiple data visualizations update automatically in real time to reflect data that correspond to the currently selected time interval.Type: GrantFiled: March 29, 2022Date of Patent: August 27, 2024Assignee: Splunk Inc.Inventors: Nusair Haq, Ryan O'Connor, Siegfried Puchbauer
-
Patent number: 12072852Abstract: A schema consistency mechanism monitors data ingested by a data intake and query system for changes to the structure, or data schema, associated with the data. A schema consistency monitor obtains data from a data source (or, more generally, from any number of separate data sources) at a plurality of points in time. The data is analyzed to determine whether a first portion of the data received at a first point in time conforms to a first data schema and that a second portion of the data received at a second point in time conforms to a second data schema that is different from the first data schema (thereby indicating a change to the associated data schema). A graphical user interface (GUI) can be generated that includes indications of identified changes to one or more data schemas associated with data.Type: GrantFiled: October 31, 2022Date of Patent: August 27, 2024Assignee: Splunk Inc.Inventor: Gleb Esman
-
Patent number: 12072939Abstract: A data intake and query system can generate local data enrichment objects and receive federated data enrichment objects from another data intake and query system. In response to receiving a query, the data intake and query system can determine whether the query is subquery of a federated query. If the query is a subquery, the data intake and query system can use the federated data enrichment objects to execute the query.Type: GrantFiled: January 31, 2022Date of Patent: August 27, 2024Assignee: Splunk Inc.Inventors: Alexandros Batsakis, Nir Frenkel, Nitilaksha Halakatti, Balaji Rao, Anish Shrigondekar, Ruochen Zhang, Steve Yu Zhang
-
Patent number: 12072891Abstract: The disclosed embodiments include a method performed by a data intake and query system. The method includes receiving a search query by a search head, defining a search process for applying the search query to indexers, delegating a first portion of the search process to indexers and a second portion of the search process to intermediary node(s) communicatively coupled to the search head and the indexers. The first portion can define a search scope for obtaining partial search results of the indexers and the second portion can define operations for combining the partial search results by the intermediary node(s) to produce a combination of the partial search results. The search head then receives the combination of the partial search results, and outputs final search results for the search query, where the final search results are based on the combination of the partial search results.Type: GrantFiled: March 8, 2023Date of Patent: August 27, 2024Assignee: Splunk Inc.Inventors: Sourav Pal, Ashish Mathew, Xiaowei Wang, Christopher Pride
-
Patent number: 12073103Abstract: Multiple storage system event handling includes obtaining multiple events for storage on multiple storage systems. For each of the multiple events, field values from each event are extracted. The field values are matched to configurations of the storage systems to identify a subset of the storage system having a matching configuration. The event is transmitted to the subset. The multiple events are transmitted to heterogeneous subsets.Type: GrantFiled: July 29, 2022Date of Patent: August 27, 2024Assignee: Splunk Inc.Inventors: Amritpal Singh Bath, Samat Jain, Felix Jiang, Shanmugam Kailasam, Jibang Liu, Isabelle Park, Vishal Patel, Divya Vijayan, Jiahan Wang, Tingjin Xu
-
Patent number: 12072783Abstract: Information retrieved from monitoring agents currently installed on instrumented entities within a system is analyzed to discover additional entities within the system that are connected to the instrumented entities. Each of these discovered entities is analyzed to determine whether a monitoring agent is able to be installed within the entity; if installation is possible, such installation is automatically performed (or a guided manual installation is implemented utilizing an interface). After a monitoring agent is installed within a discovered entity, information is retrieved from that monitoring agent and is used to discover additional entities within the system that are connected to that discovered entity. In this way, an iterative discovery of all entities within a system may be performed.Type: GrantFiled: October 25, 2022Date of Patent: August 27, 2024Assignee: SPLUNK Inc.Inventors: Tigran Najaryan, Aunsh Bharat Chaudhari, Morgan James McLean, Yiqing Pei