Automated generation of metrics from log data

    公开(公告)号:US11803548B1

    公开(公告)日:2023-10-31

    申请号:US17578278

    申请日:2022-01-18

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/24553 G06F16/2379

    Abstract: A log-to-metrics transformation system includes a log-to-metrics application executing on a processor. The log-to-metrics transformation system receives a format associated with machine data, and further receives, via a first graphical control, a first set of metric identifiers corresponding to a first set of metrics associated with the machine data. The log-to-metrics transformation system generates a first set of mappings between the first set of metric identifiers and a first set of field values included in the machine data. The log-to-metrics transformation system stores the first set of mappings and an association with the format of the machine data. The log-to-metrics transformation system, based on the first set of mappings, causes the first set of field values to be extracted from the machine data. Further, a first metric included in the first set of metrics is determined based on at least a portion of the first set of field values.

    Clustering events while excluding extracted values

    公开(公告)号:US11657065B2

    公开(公告)日:2023-05-23

    申请号:US17158880

    申请日:2021-01-26

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/26

    Abstract: Systems and methods include causing presentation of a first cluster in association with an event of the first cluster, the first cluster from a first set of clusters of events. Each event includes a time stamp and event data. Based on the presentation of the first cluster, an extraction rule corresponding to the event of the first cluster is received from a user. Similarities in the event data between the events are determined based on the received extraction rule. The events are grouped into a second set of clusters based on the determined similarities. Presentation is caused of a second cluster in association with an event of the second cluster, where the second cluster is from the second set of clusters.

    Locating and categorizing data using inverted indexes

    公开(公告)号:US11061918B2

    公开(公告)日:2021-07-13

    申请号:US15479823

    申请日:2017-04-05

    Applicant: Splunk Inc.

    Abstract: Systems and methods are disclosed for locating data and categorizing a set of data using inverted indexes. The inverted indexes include token entries and field-value pair entries, as well as event references that correspond to events that include raw machine data. Using filter criteria, the inverted indexes are identified. In turn, the inverted indexes are used to identify a set of events that satisfy the filter criteria. The identified set of events are categorized based on categorization criteria and provided for display to a user.

    LOCATING AND CATEGORIZING DATA USING INVERTED INDEXES

    公开(公告)号:US20180293327A1

    公开(公告)日:2018-10-11

    申请号:US15479823

    申请日:2017-04-05

    Applicant: Splunk Inc.

    Abstract: Systems and methods are disclosed for locating data and categorizing a set of data using inverted indexes. The inverted indexes include token entries and field-value pair entries, as well as event references that correspond to events that include raw machine data. Using filter criteria, the inverted indexes are identified. In turn, the inverted indexes are used to identify a set of events that satisfy the filter criteria. The identified set of events are categorized based on categorization criteria and provided for display to a user.

    CLUSTERING EVENTS BASED ON EXTRACTION RULES
    6.
    发明申请

    公开(公告)号:US20180089303A1

    公开(公告)日:2018-03-29

    申请号:US15276693

    申请日:2016-09-26

    Applicant: SPLUNK INC.

    CPC classification number: G06F16/26

    Abstract: Systems and methods include causing presentation of a first cluster in association with an event of the first cluster, the first cluster from a first set of clusters of events. Each event includes a time stamp and event data. Based on the presentation of the first cluster, an extraction rule corresponding to the event of the first cluster is received from a user. Similarities in the event data between the events are determined based on the received extraction rule. The events are grouped into a second set of clusters based on the determined similarities. Presentation is caused of a second cluster in association with an event of the second cluster, where the second cluster is from the second set of clusters.

Patent Agency Ranking