Anomaly detection
    21.
    发明授权

    公开(公告)号:US10592093B2

    公开(公告)日:2020-03-17

    申请号:US14859248

    申请日:2015-09-18

    Applicant: Splunk Inc.

    Abstract: Techniques are disclosed for anomaly detection. A search query can be executed over a period of time to produce values for a key performance indicator (KPI), the search query defining the KPI and deriving a value indicative of the performance of a service at a point in time or during a period of time, the value derived from machine data pertaining to one or more entities that provide the service. A graphical user interface (GUI) enabling a user to indicate a sensitivity setting can be displayed. A user input indicating the sensitivity setting can be received via the GUI. Zero or more of the values as anomalies can be identified in consideration of the sensitivity setting indicated by the user input. A GUI including information related to the values identified as anomalies can be caused to be displayed.

    Analytics for edge devices
    22.
    发明授权

    公开(公告)号:US10536351B2

    公开(公告)日:2020-01-14

    申请号:US15224440

    申请日:2016-07-29

    Applicant: Splunk Inc.

    Abstract: Disclosed is a technique that can be performed by an electronic device. The technique can include generating timestamped events, where the timestamped events include raw data generated by electronic device. The technique can further include obtaining results by performing a operation on the timestamped events, in accordance with instructions. The technique can further include sending the results or indicia thereof over a network to a server computer system, and receiving back new instructions generated by the server computer system based on the sent results. Lastly, the technique can include performing a new operation on timestamped events including raw data generated based by the electronic device, where the new operation can be performed in accordance with the new instructions to obtain new results.

    Data Analytics In Edge Devices
    23.
    发明申请

    公开(公告)号:US20200012966A1

    公开(公告)日:2020-01-09

    申请号:US16573745

    申请日:2019-09-17

    Applicant: Splunk Inc.

    Abstract: Disclosed is a technique that can be performed by an electronic device. The electronic device can generate time-stamped events, extract training data from the time-stamped events, and sending the training data over a network to a remote computer. The electronic device can receive model data generated by the remote computer from the training data by use of a machine learning process, update a local model of the electronic device based on the received model data, and generate an output by processing locally sourced data of the electronic device with the updated local model.

    Machine learning in edge analytics
    24.
    发明授权

    公开(公告)号:US10460255B2

    公开(公告)日:2019-10-29

    申请号:US15224439

    申请日:2016-07-29

    Applicant: Splunk Inc.

    Abstract: Disclosed is a technique that can be performed by an electronic device. The technique can include generating raw data based on inputs to the electronic device, and sending the raw data or data items over a network to a server computer system. The sent raw data or the data items can include training data. The technique can further include receiving global model data from the server computer system over the network. The global model data may have been derived from the training data in accordance with a machine learning process. The technique can further include generating an updated local model by updating a local model associated with the electronic device based on the received global model data, and processing local data based on the updated local model to generate output data. The local data can include raw data or data items generated based on inputs to the electronic device.

    CLUSTERING EVENTS BASED ON EXTRACTION RULES
    26.
    发明申请

    公开(公告)号:US20180089303A1

    公开(公告)日:2018-03-29

    申请号:US15276693

    申请日:2016-09-26

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/26

    Abstract: Systems and methods include causing presentation of a first cluster in association with an event of the first cluster, the first cluster from a first set of clusters of events. Each event includes a time stamp and event data. Based on the presentation of the first cluster, an extraction rule corresponding to the event of the first cluster is received from a user. Similarities in the event data between the events are determined based on the received extraction rule. The events are grouped into a second set of clusters based on the determined similarities. Presentation is caused of a second cluster in association with an event of the second cluster, where the second cluster is from the second set of clusters.

    ADAPTIVE KEY PERFORMANCE INDICATOR THRESHOLDS
    27.
    发明申请
    ADAPTIVE KEY PERFORMANCE INDICATOR THRESHOLDS 审中-公开
    自适应关键性能指标阈值

    公开(公告)号:US20160104076A1

    公开(公告)日:2016-04-14

    申请号:US14859236

    申请日:2015-09-18

    Applicant: Splunk Inc.

    CPC classification number: G06N99/005

    Abstract: Techniques are disclosed for providing adaptive thresholding technology for Key Performance Indicators (KPIs). Adaptive thresholding technology may automatically assign new values or adjust existing values for one or more thresholds of one or more time policies. Assigning threshold values using adaptive thresholding may involve identifying training data (e.g., historical data, simulated data, or example data) for the time frames and analyzing the training data to identify variations within the data (e.g., patterns, distributions, trends). A threshold value may be determined based on the variations and may be assigned to one or more of the thresholds without additional user intervention.

    Abstract translation: 公开了用于为关键性能指标(KPI)提供自适应阈值技术的技术。 自适应阈值技术可以自动分配新值或调整一个或多个时间策略的一个或多个阈值的现有值。 使用自适应阈值分配阈值可以涉及识别用于时间帧的训练数据(例如,历史数据,模拟数据或示例数据),并且分析训练数据以识别数据内的变化(例如,模式,分布,趋势)。 可以基于变化来确定阈值,并且可以将阈值分配给一个或多个阈值,而无需额外的用户干预。

    User interface with automated condensation

    公开(公告)号:US11379508B1

    公开(公告)日:2022-07-05

    申请号:US17158220

    申请日:2021-01-26

    Applicant: Splunk Inc.

    Abstract: Machine data reflecting operation of a monitored system is ingested and made available for search by a data intake and query system (DIQS). Ingested data includes log data entries produced by an application that represent low-level instances of user interface or interaction events. Inference processing generates a new collection of data instances that each identifies a higher-level task performed by a user in a sequence of the low-level events without regard to any explicit task affiliation data component of the low-level instances. Information for the task may include a measure of confidence that each low-level event of the sequence is properly associated with the task. Tasks of the new collection may be advantageously visualized and included in downstream processing.

Patent Agency Ranking