中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

32 records (took 0.022 seconds)

    CONFIGURING MODULAR ALERT ACTIONS AND REPORTING ACTION PERFORMANCE INFORMATION
    21.
    发明申请
    CONFIGURING MODULAR ALERT ACTIONS AND REPORTING ACTION PERFORMANCE INFORMATION 审中-公开

    公开(公告)号：US20180091528A1

    公开(公告)日：2018-03-29

    申请号：US15276756

    申请日：2016-09-26

    Applicant: Splunk Inc.

    Inventor： Banipal Shahbaz ,  Siri Atma Oaklander De Licori ,  John Robert Coates ,  David Hazekamp ,  Devendra Badhani ,  Luke Murphey ,  Patrick Schulz

    IPC: H04L29/06

    Abstract: Techniques and mechanisms are disclosed for configuring actions to be performed by a network security application in response to the detection of potential security incidents, and for causing a network security application to report on the performance of those actions. For example, users may use such a network security application to configure one or more “modular alerts.” As used herein, a modular alert generally represents a component of a network security application which enables users to specify security modular alert actions to be performed in response to the detection of defined triggering conditions, and which further enables tracking information related to the performance of modular alert actions and reporting on the performance of those actions.

    IDENTIFYING NOTABLE EVENTS BASED ON EXECUTION OF CORRELATION SEARCHES
    23.
    发明申请
    IDENTIFYING NOTABLE EVENTS BASED ON EXECUTION OF CORRELATION SEARCHES 审中-公开

    公开(公告)号：US20170142143A1

    公开(公告)日：2017-05-18

    申请号：US15421393

    申请日：2017-01-31

    Applicant: Splunk Inc.

    Inventor： Mark Seward ,  John Robert Coates

    IPC: H04L29/06 ,  G06F17/30

    CPC classification number: H04L63/1416 ,  G06F16/212 ,  G06F16/951 ,  H04L63/1425

    Abstract: Systems and methods are provided for identifying network addresses and/or IDs of a deduplicated list among network data, machine data, and/or events derived from network data and/or machine data, and for identifying notable events by searching for the presence of network addresses and/or network IDs that are deduplicated across lists received from multiple external sources. One method includes receiving a plurality of lists of network locations, wherein each list is received from over a network, wherein each of the network locations includes a domain name or an IP address, and wherein at least two of the plurality of lists each include a same network location; aggregating the plurality of lists of network locations into a deduplicated list of unique network locations; and searching network data or machine data for a network location included in the deduplicated list of unique network locations.

    Mapping Key Performance Indicators Derived from Machine Data to Dashboard Templates
    24.
    发明申请
    Mapping Key Performance Indicators Derived from Machine Data to Dashboard Templates 审中-公开

    公开(公告)号：US20170140071A1

    公开(公告)日：2017-05-18

    申请号：US15420383

    申请日：2017-01-31

    Applicant: Splunk Inc.

    Inventor： John Robert Coates ,  Poorva Malviya ,  Brian John Bingham

    IPC: G06F17/30 ,  G06F3/0482 ,  G06F3/0484 ,  H04L12/24

    Abstract: Raw machine data are captured and organized as events. Entity definitions representing machine entities that perform a service identify the machine data associated with respective entities. KPI search queries each define a KPI. Each KPI search query derives one or more values for the KPI from machine data identified in the entity definitions. A dashboard template having an identifier for the KPI is presented by a graphical interface. The identifier presents at a user-designated location and may be a widget that provides a numerical or graphical representation of one or more values for the KPI. Embodiments may allow modification of the template.

    Technology add-on interface
    25.
    发明授权
    Technology add-on interface 有权

    公开(公告)号：US12265863B2

    公开(公告)日：2025-04-01

    申请号：US17565181

    申请日：2021-12-29

    Applicant: Splunk Inc.

    Inventor： Li Li ,  Gang Tao ,  Yongxin Su ,  Junqing Hao ,  Ting Wang ,  John Robert Coates ,  Elias Haddad ,  Guodong Wang

    IPC: G06N5/025 ,  G06F3/14 ,  G06F9/54 ,  G06Q10/063

    Abstract: The operation of an automatic data input and query system is controlled by well-defined control data. The system exposes user interfaces enabling an administrator to interact with control data to modify the ongoing operation of the system. Certain control data determines the collection and treatment of data from various technology sources. A robust control interface is provided enabling the efficient and reliable adding on of new technology data sources. Once established, control data for a new technology data source may be packaged in a form for archiving or distribution. The system may support the export and import of such packages. Such packages may be created independently of the system.

    MODIFYING FIELD DEFINITIONS TO INCLUDE POST-PROCESSING INSTRUCTIONS
    27.
    发明申请
    MODIFYING FIELD DEFINITIONS TO INCLUDE POST-PROCESSING INSTRUCTIONS 有权

    公开(公告)号：US20220327137A1

    公开(公告)日：2022-10-13

    申请号：US17809837

    申请日：2022-06-29

    Applicant: SPLUNK INC.

    Inventor： Michael Kinsely ,  Alex Raitz ,  John Robert Coates ,  Shirley Wu

    IPC: G06F16/25

    Abstract: A field extraction template simplifies the creation of field extraction rules by providing a user with a set of field names commonly assigned to a certain type of data, as well as guidance on how to extract values for those fields. These field extraction rules, in turn, facilitate access to certain “chunks” of the data, or to information derived from those chunks, through named fields. A field extraction template comprises at least a set of field names and ordering data for the field names. The ordering data indicates index positions that are associated with at least some of the field names. A delimiter is specified for splitting data items into arrays of chunks. The chunk of a data item that belongs to a given field name is the chunk whose position within the item's array of chunks is equivalent to the index position associated with the given field name.

    TECHNOLOGY ADD-ON INTERFACE
    28.
    发明申请
    TECHNOLOGY ADD-ON INTERFACE 有权

    公开(公告)号：US20220121410A1

    公开(公告)日：2022-04-21

    申请号：US17565181

    申请日：2021-12-29

    Applicant: Splunk Inc.

    Inventor： Li Li ,  Gang Tao ,  Yongxin Su ,  Junqing Hao ,  Ting Wang ,  John Robert Coates ,  Elias Haddad ,  Guodong Wang

    IPC: G06F3/14 ,  G06Q10/06 ,  G06N5/02 ,  G06F17/40 ,  G06F9/54

    Abstract: The operation of an automatic data input and query system is controlled by well-defined control data. The system exposes user interfaces enabling an administrator to interact with control data to modify the ongoing operation of the system. Certain control data determines the collection and treatment of data from various technology sources. A robust control interface is provided enabling the efficient and reliable adding on of new technology data sources. Once established, control data for a new technology data source may be packaged in a form for archiving or distribution. The system may support the export and import of such packages. Such packages may be created independently of the system.

    Templates for defining fields in machine data
    29.
    发明授权
    Templates for defining fields in machine data 有权

    公开(公告)号：US09922102B2

    公开(公告)日：2018-03-20

    申请号：US14266797

    申请日：2014-04-30

    Applicant: Splunk Inc.

    Inventor： Michael Kinsely ,  Alex Raitz ,  John Robert Coates ,  Shirley Wu

    IPC: G06F17/30 ,  G06F7/00

    CPC classification number: G06F17/30563

    Abstract: A field extraction template simplifies the creation of field extraction rules by providing a user with a set of field names commonly assigned to a certain type of data, as well as guidance on how to extract values for those fields. These field extraction rules, in turn, facilitate access to certain “chunks” of the data, or to information derived from those chunks, through named fields. A field extraction template comprises at least a set of field names and ordering data for the field names. The ordering data indicates index positions that are associated with at least some of the field names. A delimiter is specified for splitting data items into arrays of chunks. The chunk of a data item that belongs to a given field name is the chunk whose position within the item's array of chunks is equivalent to the index position associated with the given field name.

Patent Agency Ranking