Site-based search affinity
    1.
    发明授权
    Site-based search affinity 有权
    基于站点的搜索关联

    公开(公告)号:US09130971B2

    公开(公告)日:2015-09-08

    申请号:US14266812

    申请日:2014-04-30

    Applicant: Splunk Inc.

    Abstract: According to various embodiments, techniques are described for managing data within a multi-site clustered data intake and query system. A data intake and query system as described herein generally refers to a system for collecting, retrieving, and analyzing data. In this context, a clustered data intake and query system generally refers to a system environment that is configured to provide data redundancy and other features that improve the availability of data stored by the system. For example, a clustered data intake and query system may be configured to store multiple copies of data stored by the system across multiple components such that recovery from a failure of one or more of the components is possible by using copies of the data stored elsewhere in the cluster.

    Abstract translation: 根据各种实施例,描述了用于管理多站点群集数据访问和查询系统内的数据的技术。 本文所述的数据采集和查询系统通常是指用于收集,检索和分析数据的系统。 在这种情况下,集群数据采集和查询系统通常是指被配置为提供数据冗余和提高系统存储的数据的可用性的其他特征的系统环境。 例如,集群数据采集和查询系统可以被配置为存储由多个组件存储的系统的多个副本,以便可以通过使用其他地方存储的数据的副本来从一个或多个组件的故障中恢复 集群。

    Dynamic reassignment in a search and indexing system

    公开(公告)号:US11630695B1

    公开(公告)日:2023-04-18

    申请号:US17163160

    申请日:2021-01-29

    Applicant: Splunk Inc.

    Abstract: Dynamic reassignment of search processes into workload pools includes receiving a search query to search at least one data store, assigning the search query to a first workload pool, and executing the search query using a first hardware resource in the first workload pool, the first hardware resource corresponding to a first portion of a hardware device. Dynamic reassignment further includes receiving, while executing the search query, an update command to move the search query to a second workload pool, moving, while executing the search query, the search query to the second workload pool; and continuing execution of the search query using a second hardware resource in the second workload pool. The second hardware resource corresponds to a second portion of the hardware device.

    Systems and Methods for Verifying User Credentials for Search
    5.
    发明申请
    Systems and Methods for Verifying User Credentials for Search 审中-公开
    用于验证用户凭据进行搜索的系统和方法

    公开(公告)号:US20160314211A1

    公开(公告)日:2016-10-27

    申请号:US14695827

    申请日:2015-04-24

    Applicant: Splunk Inc.

    CPC classification number: G06F21/45 G06F21/6227

    Abstract: Provided are systems and methods for verifying user credentials for performing a search. In one embodiment, a method can be provided that includes receiving a request to perform a search of machine generated data comprising time stamped events that is associated with a user, determining whether a set of cached user credentials has been updated within a period of time, querying, in response to determining that the credentials for the user have not been updated within the period of time, an identity provider server for a current set of user credentials associated with the user, receiving the current set of user credentials, determining whether the user has privileges to perform the search based at least in part on the set of user credentials, and causing, in response to determining that the user has privileges to perform the search, the search to be performed to identify one or more of the events that are responsive to the search.

    Abstract translation: 提供了用于验证用于执行搜索的用户凭证的系统和方法。 在一个实施例中,可以提供一种方法,包括接收执行机器生成数据的搜索的请求,所述机器生成的数据包括与用户相关联的时间戳事件,确定在一段时间内是否更新了一组缓存的用户凭证, 响应于确定用户的证书在一段时间内未被更新的查询,用于与用户相关联的当前用户凭证集合的身份提供商服务器,接收当前用户凭证集合,确定用户是否 具有至少部分地基于所述一组用户凭证执行搜索的特权,并且响应于确定用户具有执行搜索的权限而导致要执行的搜索以识别一个或多个事件 响应搜索。

    Systems and methods for verifying user credentials for search

    公开(公告)号:US11062016B2

    公开(公告)日:2021-07-13

    申请号:US14695827

    申请日:2015-04-24

    Applicant: Splunk Inc.

    Abstract: Provided are systems and methods for verifying user credentials for performing a search. In one embodiment, a method can be provided that includes receiving a request to perform a search of machine generated data comprising time stamped events that is associated with a user, determining whether a set of cached user credentials has been updated within a period of time, querying, in response to determining that the credentials for the user have not been updated within the period of time, an identity provider server for a current set of user credentials associated with the user, receiving the current set of user credentials, determining whether the user has privileges to perform the search based at least in part on the set of user credentials, and causing, in response to determining that the user has privileges to perform the search, the search to be performed to identify one or more of the events that are responsive to the search.

    MANAGING SITE-BASED SEARCH CONFIGURATION DATA
    7.
    发明申请
    MANAGING SITE-BASED SEARCH CONFIGURATION DATA 有权
    管理基于站点的搜索配置数据

    公开(公告)号:US20150339308A1

    公开(公告)日:2015-11-26

    申请号:US14815880

    申请日:2015-07-31

    Applicant: Splunk Inc.

    Abstract: Techniques are described for managing data within a multi-site clustered data intake and query system. A data intake and query system as described herein generally refers to a system for collecting, retrieving, and analyzing data. In this context, a clustered data intake and query system generally refers to a system environment that is configured to provide data redundancy and other features that improve the availability of data stored by the system. For example, a clustered data intake and query system may be configured to store multiple copies of data stored by the system across multiple components such that recovery from a failure of one or more of the components is possible by using copies of the data stored elsewhere in the cluster.

    Abstract translation: 描述了用于管理多站点群集数据采集和查询系统中的数据的技术。 本文所述的数据采集和查询系统通常是指用于收集,检索和分析数据的系统。 在这种情况下,集群数据采集和查询系统通常是指被配置为提供数据冗余和提高系统存储的数据的可用性的其他特征的系统环境。 例如,集群数据采集和查询系统可以被配置为存储由多个组件存储的系统的多个副本,以便可以通过使用其他地方存储的数据的副本来从一个或多个组件的故障中恢复 集群。

    User credentials verification for search

    公开(公告)号:US11822640B1

    公开(公告)日:2023-11-21

    申请号:US17347025

    申请日:2021-06-14

    Applicant: Splunk Inc.

    Abstract: Provided are systems and methods for verifying user credentials for performing a search. Verifying user credentials include receiving a search request at a search server, determining, at the search server, whether a set of user credentials of a user has been updated within a threshold period of time. The set of user credentials are received from an identity provider server and cached at the search server. Responsive to determining that the cached set of user credentials have not been updated within the threshold period of time, the identity provider server is queried for a current set of user credentials associated with the user. The current set of user credentials from the identity provider server, and used to determine that the user is authorized to perform the search. The search of the datastore is launched responsive to determining that the user is authorized.

Patent Agency Ranking