公开(公告)号：US11838372B2

公开(公告)日：2023-12-05

申请号：US18093980

申请日：2023-01-06

Applicant: SPLUNK Inc.

Inventor： Gergely Danyi ,  Joseph Ari Ross

IPC: G06F15/173 ,  H04L67/146 ,  G06F16/906 ,  G06F16/955

CPC classification number: H04L67/146 ,  G06F16/906 ,  G06F16/9566

Abstract: A method of normalizing URLs associated with a real user session comprises extracting uniform resource locators (URLs) from ingested spans where at least a portion of the URLs comprise unique URL strings. The method also comprises decomposing each of the URLs into a sequence of tokens and grouping together subsets of related URLs. Also, the method comprises representing each subset of related URLs with a normalized URL string.

公开(公告)号：US11789943B1

公开(公告)日：2023-10-17

申请号：US17829141

申请日：2022-05-31

Applicant: Splunk Inc.

Inventor： Gergely Danyi ,  Steven Flanders ,  Joseph Ari Ross ,  Justin Smith ,  Eric Wohlstadter ,  Chengyu Yang

IPC: G06F16/245 ,  G06F11/34 ,  G06F11/30

CPC classification number: G06F16/245 ,  G06F11/302 ,  G06F11/3495

Abstract: A computer-implemented method for analyzing spans and traces associated with a microservices-based application executing in a distributed computing environment comprises aggregating a plurality of ingested spans associated with one or more applications executing in the distributed computing environment into a plurality of traces, wherein each of the plurality of ingested spans is associated with a plurality of tags. The method further comprises comparing durations of a set of related traces of the plurality of traces to determine patterns for the plurality of tags and generating a histogram that represents a distribution of the durations of the set of related traces. The method also comprises providing alerts for one or more tags from the plurality of tags associated with traces having a duration above a threshold based on the distribution of the durations.

公开(公告)号：US20230156093A1

公开(公告)日：2023-05-18

申请号：US18093980

申请日：2023-01-06

Applicant: SPLUNK Inc.

Inventor： Gergely Danyi ,  Joseph Ari Ross

IPC: H04L67/146 ,  G06F16/906 ,  G06F16/955

CPC classification number: H04L67/146 ,  G06F16/906 ,  G06F16/9566

Abstract: A method of normalizing URLs associated with a real user session comprises extracting uniform resource locators (URLs) from ingested spans where at least a portion of the URLs comprise unique URL strings. The method also comprises decomposing each of the URLs into a sequence of tokens and grouping together subsets of related URLs. Also, the method comprises representing each subset of related URLs with a normalized URL string.

公开(公告)号：US11381492B1

公开(公告)日：2022-07-05

申请号：US16990923

申请日：2020-08-11

Applicant: Splunk Inc.

Inventor： Ozan Turgut ,  Joseph Ari Ross ,  Eyal Ophir ,  Calvin Chan

IPC: H04L43/00 ,  G06F11/30 ,  H04L43/16 ,  G06F11/34 ,  G06F11/36 ,  H04L43/0817 ,  H04L41/0686 ,  H04L43/0876

Abstract: An instrumentation analysis system processes data streams received from servers executing instrumented software. The system determines a set of servers that satisfy a given criteria, for example, a set of servers with high resource utilization. The set of servers may be determined by the system based on triggers or specified by a user. The system analyzes properties of servers to determine a property that characterizes the set of servers. The property characterizing the servers is provided to users via a user interface or alerts for further analysis, for example, to analyze the cause of high resource utilization.

公开(公告)号：US11023280B2

公开(公告)日：2021-06-01

申请号：US16129494

申请日：2018-09-12

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross

IPC: G06F9/50 ,  G06F11/30 ,  G06F11/32 ,  G06F11/34 ,  G06F9/54 ,  G06F16/2455

Abstract: A system receives a time series of data values from instrumented software executing on an external system. Each data value corresponds to a metric of the external system. The system stores a level value representing a current estimate of the time series and a trend value representing a trend in the time series. The level and trend values are based on data in a window having a trailing value. In response to receiving a most recent value, the system updates the level value and the trend value to add an influence of the most recent value and remove an influence of the trailing value. The system forecasts based on the updated level and trend values, and in response to determining that the forecast indicates the potential resource shortage event, takes action.

公开(公告)号：US20200372007A1

公开(公告)日：2020-11-26

申请号：US16757354

申请日：2019-10-28

Applicant: Splunk Inc.

Inventor： Joseph Ari Ross ,  Matthew William Pound

IPC: G06F16/23

Abstract: Embodiments of the present disclosure provide for trace and span sampling and analysis for instrumented software. Each span may be annotated with one or more tags that provide context about an executed task, such as a user instrumenting the software, a document involved in a request, an infrastructure element used in servicing a request, etc. A sampler may perform tail-based sampling of traces comprising spans. The sampler may select a portion of the traces having selected features and send them to an analyzer. The analyzer may receive the selected traces and determine whether the selected traces are indicative of configuration problems for the instrumented software. An alert may be generated based on identified configuration problems.