Invention Grant
- Patent Title: Generating and storing summarization tables for sets of searchable events
-
Application No.: US14815973Application Date: 2015-08-01
-
Publication No.: US09990386B2Publication Date: 2018-06-05
- Inventor: David Ryan Marquardt , Stephen Phillip Sorkin , Steve Yu Zhang
- Applicant: Splunk Inc.
- Applicant Address: US CA San Francisco
- Assignee: SPLUNK INC.
- Current Assignee: SPLUNK INC.
- Current Assignee Address: US CA San Francisco
- Main IPC: G06F17/30
- IPC: G06F17/30

Abstract:
Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.
Public/Granted literature
- US20160004750A1 Generating and Storing Summarization Tables for Sets of Searchable Events Public/Granted day:2016-01-07
Information query