Splunk Inc.

Ebay, Incorporated

Chandrashekar Basavaiah

Eric Nathaniel Tschetter

Joshua Walters

Elizabeth Li

Cary Glen Noel

Jindrich Dinga

Isabelle Park

Mei Chun Yeh

Ayub S Khan

Dror Engel

Tea The Vinh Tran

Shyamala Sriramulu

Zhiyi Jason Liu

Systems and methods are disclosed for supporting transformations of a graph generated from a query to event data. The event data may be unstructured event data, from which instances of a journey can be identified that represent sequences of related events describing actions performed in a computing environment. When evaluating journey instances, it can be helpful to visualize the instances as a graph. Depending on the instances viewed, a user may desire different modifications to the graph. While such modifications can be made when initially building instances from the unstructured event data, this can limit reuse of the resulting instances (since the modification would also be present when evaluating other subsets). To address this, embodiments of the present disclosure enable graph modifications to be applied to subsets of journey instances after building those instances from unstructured event data, increasing reuse of instances built from a query against the unstructured data.

Supporting graph data structure transformations in graphs generated from a query to event data

Systems and methods are disclosed for efficiently detecting alert states within unstructured event data. Alert states are illustratively defined as occurring when a threshold number of journey instances are present within the unstructured event data, each journey instance representing a series of events within the event data representing steps within a pre-defined journey. Detecting journey instances within unstructured event data can require significant computational resources, and thus attempting to detect alert states directly from unstructured event data can lead to inefficiencies. Embodiments of this disclosure enable a structured data set of journey instances to be generated from unstructured event data, and for the structured data set to be evaluated based on criteria of multiple alert states. By utilizing a single structured data set to support evaluation based on multiple alert states, detecting alert states from unstructured event data is rendered more efficient.

Efficient detection of alert states within unstructured event data based on evaluation of structured data set

System and methods for tracking of user interactions are disclosed. A server system receives a first user interaction record from a first client device. The server system receives a second user interaction record from a second client device, wherein the first user interaction record and the second user interaction record are both formatted using a multi-platform user interaction data record format. The server system stores the first user interaction record and the second user interaction record at a database at the server system.

Tracking of user interactions

Receiving data from a client machine, the data representing selection of a subset of components of a set of components of a fixed query response representation; performing a map/reduce function on the data to retrieve the subset of components; and transmitting the subset of components to the client machine. The data may include an Xpath expression that is created at the client machine or at a server and the map/reduce function may be performed according to a design pattern that designates the pattern of components in a fixed query response representation designated by the client machine.

Representation manipulation language

Growing community of inventors

San Ramon, CA, United States of America

Chandrashekar Basavaiah