公开(公告)号：US20210049150A1

公开(公告)日：2021-02-18

申请号：US17084965

申请日：2020-10-30

Applicant: Splunk Inc.

Inventor： Amritpal Singh Bath ,  Yuan Xu, Jr. ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.

公开(公告)号：US10891284B2

公开(公告)日：2021-01-12

申请号：US15582458

申请日：2017-04-28

Applicant: SPLUNK INC.

Inventor： Amritpal Singh Bath ,  Yuan Xu, Jr. ,  Bharath Aleti ,  Manu Jose

IPC: G06F16/00 ,  G06F16/23 ,  G06F16/27 ,  G06F16/951 ,  G06F16/22 ,  G06F16/2458

Abstract: The present disclosure provides solutions for determining the divergence (delta) between the current and previous reference data structures for mutable data in a search head. A method is provided that includes updating a pre-existing lookup table in a search head, generating a delta file that identifies the divergence between the updated and previous lookup table, and distributing the delta file to other components in the search environment. The compatibility of the delta file is checked with the local instance of the lookup table in each search component, and the lookup table is applied if compatibility is determined. However, if the delta file is determined to not be compatible with the current version of a local lookup table in an indexer, the entire lookup table sent to the requesting indexer instead.