Splunk Inc.

Banipal Shahbaz

David Hazekamp

John Robert Coates

Vijay Chauhan

Luke K Murphey

Devendra M Badhani

Patrick Schulz

Siri Atma Oaklander De Licori

Sri Atma Oaklander De Licori

Techniques and mechanisms are disclosed for configuring actions to be performed by a network security application in response to the detection of potential security incidents, and for causing a network security application to report on the performance of those actions. For example, users may use such a network security application to configure one or more 'modular alerts.' As used herein, a modular alert generally represents a component of a network security application which enables users to specify security modular alert actions to be performed in response to the detection of defined triggering conditions, and which further enables tracking information related to the performance of modular alert actions and reporting on the performance of those actions.

Executing modular alerts and associated security actions

A data intake and query system measures an amount of raw data ingested by the system during defined periods of time. As used herein, ingesting raw data generally refers to receiving the raw data from one or more computing devices and processing the data for storage and searchability. Processing the data may include, for example, parsing the raw data into 'events,' where each event includes a portion of the received data and is associated with a timestamp. Based on a calculated number of events generated by the system during one or more defined time periods, the system may calculate various metrics including, but not limited to, a number of events generated during a particular day, a number of events generated per day over a period of time, a maximum number of events generated in a day over a period of time, an average number of events generated per day, etc.

Identifying metrics related to data ingestion associated with a defined time period

Scaling available storage based on counting generated events

Configuring modular alert actions and reporting action performance information

Display of data ingestion information based on counting generated events

Growing community of inventors

Santa Clara, CA, United States of America

Banipal Shahbaz