知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

60 records (took 0.026 seconds)

    Query handling for field searchable raw machine data
    2.
    发明授权
    Query handling for field searchable raw machine data 有权

    公开(公告)号：US10402384B2

    公开(公告)日：2019-09-03

    申请号：US15421127

    申请日：2017-01-31

    Applicant: SPLUNK INC.

    Inventor： David Ryan Marquardt ,  Mitchell Neuman Blank, Jr. ,  Stephen Phillip Sorkin

    IPC: G06F16/00 ,  G06F16/22 ,  G06F16/2453 ,  G06F16/33 ,  G06F16/242 ,  G06F16/248 ,  G06F16/28 ,  G06F16/31 ,  G06F16/338 ,  G06F16/23 ,  G06F16/2458 ,  G06F16/2455

    Abstract: Embodiments are directed towards a method for searching data. The method comprises providing an inverted index that comprises at least one record, wherein the at least one record comprises at least one field name and a corresponding at least one field value. The at least one field name and corresponding value are extracted from time-stamped searchable events that are stored in a field searchable datastore and comprise portions of raw data. The at least one record further comprises a posting value that identifies a location in the field searchable datastore where an event associated with the at least one record is stored. The method further comprises receiving an incoming search query that references a field name and evaluating the incoming search query. Furthermore, responsive to the evaluating, the method comprises determining results for the incoming search query using the field searchable datastore or the inverted index.

    PARTIALLY TYPED SEMANTICS OPTIMIZATION
    3.
    发明申请
    PARTIALLY TYPED SEMANTICS OPTIMIZATION 审中-公开

    公开(公告)号：US20180314734A1

    公开(公告)日：2018-11-01

    申请号：US15582519

    申请日：2017-04-28

    Applicant: Splunk, Inc.

    Inventor： Alexander Douglas James ,  David Ryan Marquardt ,  Karthikeyan Sabhanatarajan

    IPC: G06F17/30 ,  G06F9/48

    CPC classification number: G06F16/24542 ,  G06F16/2477

    Abstract: A method includes receiving an initial pipeline including a sequence of commands for execution on a computing system, and obtaining, for each command in the sequence of commands, semantic information. The sequence of commands includes a command with incomplete semantic information. The method further includes generating an abstract semantic tree (AST) with the semantic information and a placeholder for the incomplete semantic information, and manipulating the AST to generate a revised AST. The revised AST corresponds to a revised pipeline that reduces an execution time on the computing system. The method further includes executing the revised pipeline.

    Collection query driven generation of inverted index for raw machine data
    4.
    发明授权
    Collection query driven generation of inverted index for raw machine data 有权

    公开(公告)号：US10061807B2

    公开(公告)日：2018-08-28

    申请号：US15421236

    申请日：2017-01-31

    Applicant: SPLUNK INC.

    Inventor： David Ryan Marquardt ,  Mitchell Blank ,  Stephen Sorkin

    IPC: G06F17/30

    CPC classification number: G06F16/2455 ,  G06F16/221 ,  G06F16/2272 ,  G06F16/2379 ,  G06F16/951

    Abstract: Embodiments of the present disclosure provide a method for generating an inverted index in accordance with a user generated collection query. The method comprises providing a field searchable data store that comprises a plurality of event records, each event record comprising a time-stamped portion of raw machine data. The method further comprises receiving a collection query that references a field name. Further, responsive to the collection query, an inverted index is generated by: a) determining an extraction rule associated with the field name; b) extracting a field value corresponding to the field name from one or more event records in the field searchable data store using the extraction rule; and c) populating the inverted index responsive to each extracted field value, wherein each entry comprises the field name, the corresponding field value and a reference value that identifies a location in the field searchable data store where an associated event record is stored.

    Generating and storing summarization tables for searchable events
    5.
    发明授权
    Generating and storing summarization tables for searchable events 有权

    公开(公告)号：US09817854B2

    公开(公告)日：2017-11-14

    申请号：US15007185

    申请日：2016-01-26

    Applicant: Splunk Inc.

    Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

    IPC: G06F7/00 ,  G06F17/30

    CPC classification number: G06F17/30321 ,  G06F17/30 ,  G06F17/30457 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/30595 ,  G06F17/30864

    Abstract: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    FACILITATING DATA MODEL ACCELERATION IN ASSOCIATION WITH AN EXTERNAL DATA SYSTEM
    6.
    发明申请
    FACILITATING DATA MODEL ACCELERATION IN ASSOCIATION WITH AN EXTERNAL DATA SYSTEM 审中-公开

    公开(公告)号：US20170220685A1

    公开(公告)日：2017-08-03

    申请号：US15011361

    申请日：2016-01-29

    Applicant: Splunk Inc.

    Inventor： Hailun Yan ,  Ledion Bitincka ,  Kishore Reddy Ramasayam ,  Elizabeth Lin ,  David Ryan Marquardt

    IPC: G06F17/30

    Abstract: Embodiments of the present invention are directed to facilitating data model acceleration in association with an external data system. In accordance with aspects of the present disclosure, at a core engine, a search request associated with a data model is received. The data model generally designates one or more fields, from among a plurality of fields, that are of interest for subsequent searches. Thereafter, it is determined that an accelerated data model summary associated with the data model is stored at an external data system remote from the core engine that received the search request. The accelerated data model summary includes field values associated with the one or more fields designated in the data model. A search for the received search request is initiated using the accelerated data model summary at the external data. A set of search results relevant to the search request is obtained and provided to a user device for display to a user.

    Generating and Storing Summarization Tables for Searchable Events
    8.
    发明申请
    Generating and Storing Summarization Tables for Searchable Events 有权
    生成和存储可搜索事件的汇总表

    公开(公告)号：US20160154832A1

    公开(公告)日：2016-06-02

    申请号：US15007185

    申请日：2016-01-26

    Applicant: Splunk Inc.

    Inventor： David Ryan Marquardt ,  Stephen Phillip Sorkin ,  Steve Yu Zhang

    IPC: G06F17/30

    CPC classification number: G06F17/30321 ,  G06F17/30 ,  G06F17/30457 ,  G06F17/30477 ,  G06F17/30554 ,  G06F17/30595 ,  G06F17/30864

    Abstract: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    Abstract translation: 实施例针对事件的透明总结。 可以在搜索头收到针对事件记录的总结和报告的查询。 搜索头可能与一个包含事件记录的索引器相关联。 搜索头可以将查询转发给索引器，可以解析用于并发执行的查询。 如果查询是集合查询，则索引器可以基于位于索引器上的事件记录生成摘要信息。 包含在汇总信息中的事件记录字段可以基于收集查询中包含的项来确定。 如果查询是统计查询，则每个索引器可以从先前生成的摘要信息生成部分结果集，将部分结果集返回到搜索头。 收集查询可以保存并计划运行，并定期更新摘要信息。

Patent Agency Ranking