公开(公告)号：US20190095502A1

公开(公告)日：2019-03-28

申请号：US15715074

申请日：2017-09-25

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park

IPC: G06F17/30

CPC classification number: G06F16/248 ,  G06F16/2457

Abstract: Systems and methods are disclosed for cross-system journey modeling based on relation of machine data. An example method includes obtaining information describing a user journey that includes multiple steps, each step corresponding to a query to be applied to one or more field-searchable data stores storing events, each event including a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, and each event being associated with a timestamp extracted from the portion of machine data of that event. Events returned as a result of the query of each step are related. The results of the relating are displayed.

公开(公告)号：US12019858B1

公开(公告)日：2024-06-25

申请号：US17474833

申请日：2021-09-14

Applicant: SPLUNK Inc.

Inventor： Jindrich Dinga ,  Simon Fishel ,  Cary Noel ,  Isabelle Park ,  Horst Werner

IPC: G06F3/04847 ,  G06F3/0482 ,  G06F16/904 ,  G06F16/9535

CPC classification number: G06F3/04847 ,  G06F3/0482 ,  G06F16/904 ,  G06F16/9535

Abstract: Systems, methods, and computer readable media are disclosed for generating and providing concurrent journey visualizations associated with different journey definitions. In computer-implemented embodiments, a data intake and query system, or a journey visualization computing tool, can be used to generate and provide concurrent representations corresponding with different journey definitions. In operation, a set of journey instances associated with a journey having a set of steps is obtained. Each step may be associated with at least one event that includes raw machine data produced by a component of an information technology environment. Upon obtaining different journey definitions specifying filters to apply to the set of journey instances, the data intake and query system can generate journey visualizations in accordance with the journey definitions. Thereafter, the journey visualizations corresponding with the journey definitions can be concurrently displayed by a computing device via a graphical user interface.

公开(公告)号：US11550849B2

公开(公告)日：2023-01-10

申请号：US17160933

申请日：2021-01-28

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park ,  Joshua Walters ,  Eric Tschetter ,  Simon Foster Fishel

IPC: G06F16/903 ,  G06F16/28 ,  G06F16/9038

Abstract: Systems and methods are disclosed for processing events having raw machine data associated with a timestamp using one or more pivot identifiers and one or more step identifiers to generate one or more journey instances. Based on the one or more pivot identifier field, the system can relate events that have a common field value for the pivot identifier field. Based on the one or more step identifiers, the system can group the related events into a subset of events. Using the subset of events, the system can build a journey instance.

公开(公告)号：US11256497B1

公开(公告)日：2022-02-22

申请号：US16936056

申请日：2020-07-22

Applicant: Splunk Inc.

Inventor： Akash Dwivedi ,  Simon Foster Fishel ,  Isabelle Park ,  Vivian Shen ,  Eric Tschetter ,  Joshua Walters

IPC: G06F8/65 ,  G06F8/71 ,  H04L29/08 ,  G06F16/9038 ,  G06F3/0482 ,  G06F16/903 ,  H04L67/025

Abstract: Systems and methods are disclosed for providing a multi-component application, including a first and second component. Functionality of the application may be easily and rapidly modified by modification to the first component, without requiring modification to the second component. The first component may be implemented locally at a client device, while the second component is implemented remotely. While modification of the second component may require privileges of a remote location, a user of a client device may modify the first component while maintaining interoperability and compatibility with the second component, thereby enabling the end user to modify functionality of the multi-component application. In some instances, different versions of a first component are provided, and an end user of a client device is enabled to specify which version of the first component should be used.

公开(公告)号：US20210224331A1

公开(公告)日：2021-07-22

申请号：US17160933

申请日：2021-01-28

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park ,  Joshua Walters ,  Eric Tschetter ,  Simon Foster Fishel

IPC: G06F16/903 ,  G06F16/28 ,  G06F16/9038

Abstract: Systems and methods are disclosed for processing events having raw machine data associated with a timestamp using one or more pivot identifiers and one or more step identifiers to generate one or more journey instances. Based on the one or more pivot identifier field, the system can relate events that have a common field value for the pivot identifier field. Based on the one or more step identifiers, the system can group the related events into a subset of events. Using the subset of events, the system can build a journey instance.

公开(公告)号：US10769163B2

公开(公告)日：2020-09-08

申请号：US15715061

申请日：2017-09-25

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park

IPC: G06F16/00 ,  G06F16/248 ,  G06F16/26 ,  G06F16/2457

Abstract: Systems and methods are disclosed for cross-system nested journey modeling based on relation of machine data. An example method includes obtaining information describing a user journey that includes multiple steps, each step corresponding to a query to be applied to events related to data sources. At least one step is a nested user journey including sub-steps. Events obtained from the data sources are related based on the obtained information. The results of the relating are displayed.

公开(公告)号：US20200250178A1

公开(公告)日：2020-08-06

申请号：US16264562

申请日：2019-01-31

Applicant: Splunk Inc.

Inventor： Paul Boster ,  Keith Kramer ,  Cary Noel ,  Isabelle Park

IPC: G06F16/248 ,  G06F16/25

Abstract: Systems and methods are disclosed for implementing a data stream correlation user interface. The data stream correlation user interface provides workflows for selecting individual data sources from a matrix of data sources, identifying individual data fields of the data sources, establishing criteria for determining correlations between them, and reviewing and enabling user verification of correlated data sources. Correlations may be established based on the values of data fields in individual records of the data sources, and may be determined based on correspondences or associations between the values, lookup tables, formulas, user-specified criteria, or other relationships.

公开(公告)号：US20190294720A1

公开(公告)日：2019-09-26

申请号：US15936356

申请日：2018-03-26

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park ,  Joshua Walters ,  Eric Tschetter ,  Simon Fishel

IPC: G06F17/30 ,  G06F3/0483 ,  G06F3/0482 ,  G06F3/0484

Abstract: Systems and methods are disclosed for generating one or more journey instances from events having raw machine data associated with a timestamp. The system generates a user interface that includes field identifiers associated with the plurality events for selection as one or more pivot identifiers and one or more step identifiers. Based on the one or more pivot identifiers, the system identifies related events that share a common field value, and based on the one or more step identifiers, the system groups the related events into a subset of events. Using the subset of events the system builds a journey instance.

公开(公告)号：US20220261397A1

公开(公告)日：2022-08-18

申请号：US17653343

申请日：2022-03-03

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park

IPC: G06F16/248 ,  G06F16/2457

Abstract: Systems and methods are disclosed for cross-system journey modeling based on relation of machine data. An example method includes obtaining information describing a user journey that includes multiple steps, each step corresponding to a query to be applied to one or more field-searchable data stores storing events, each event including a portion of machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment, and each event being associated with a timestamp extracted from the portion of machine data of that event. Events returned as a result of the query of each step are related. The results of the relating are displayed.

公开(公告)号：US10909128B2

公开(公告)日：2021-02-02

申请号：US15936372

申请日：2018-03-26

Applicant: Splunk Inc.

Inventor： Joerg Beringer ,  Isabelle Park ,  Joshua Walters ,  Eric Tschetter ,  Simon Fishel ,  Horst Werner

IPC: G06F16/2458 ,  G06F16/248

Abstract: Systems and methods are disclosed for processing events having raw machine data associated with a timestamp using one or more pivot identifiers and one or more step identifiers to generate one or more journey instances. Based on the one or more pivot identifier field, the system can relate events that have a common field value for the pivot identifier field. Based on the one or more step identifiers, the system can group the related events into a subset of events. Using the subset of events the system can build a journey instance.