公开(公告)号：US11907097B1

公开(公告)日：2024-02-20

申请号：US18104207

申请日：2023-01-31

Applicant: SPLUNK Inc.

Inventor： Bogdan Cristian Drutu ,  Filip Slunecko ,  Charles Joseph Smith ,  Timothy Matthew Robin Williamson

IPC: G06F11/34 ,  G06F11/30 ,  H04L43/04

CPC classification number: G06F11/3476 ,  G06F11/3075 ,  H04L43/04

Abstract: Techniques may include receiving a plurality of spans of trace data at a computing system during a first time period. The techniques may include storing the plurality of spans in a span partition of a data store. The data store can contain a plurality of span partitions with spans that are grouped in the partition by trace identifier. The device may include generating a timestamp partition, with an index of timestamps by trace identifiers, for the first time period. The techniques may include storing the timestamp partition in the data store. Also, the techniques may include identifying at least two timestamp partitions that correspond to a second time period that preceded the first time period. The techniques may include generating and storing a primary compacted timestamp partition by combining the at least two timestamp partitions.