Splunk Inc.

Splunkinc.

Clark Eugene Mullen

Thomas Allan Haggie

Ioan Popa

Jacob Sebastian Stark

Michael Porath

Amin Moshgabadi

Hema Krishnamurthy Mohan

Siri Singamneni

Marshall Chalmers Agnew

Nasim Bigdelu

Daniel Streit

Finlay Cannon

Jonathan Ng

Patrick Wied

Barbara Janczer

Justin Lew

Keng-Ming Sheu

Jindrich Dinga

Iryna Vogler-Ivashchanka

Faya Peng

Justin Pearson Smith

Sarah Matarese

Ram Sriharsha

Kristal Curtis

Andrew Peters

Alexandra Victoria Nuttbrown

Danika Patrick

Christopher Bolognese

Amy Katherine Hunnel Bianchi

Elizabeth Li

Viet Quoc Nguyen

Patrick Lin

Sonya Chang

Park Kittipatkul

Harsh Vardhan Vashistha

Bardhi Shtylla

Abid Salahi

Tulika Thakur

Eli Clein

Umesh Dinkar

Adam Jamison Oliner

Simon Foster Fishel

Siegfried Puchbauer-Schnabel

Tatsuya Hama

Yuchen Mou

Mudit Mittal

A system generates a user interface that enables a user to interact with an interactive chart associated with a statement of a data processing package. Via one or more user interactions with the user interface, the system may receive one or more chart parameters for the chart. Using a statement from the data processing package and the one or more chart parameters, the system may generate an additional statement and append the generated statement to the data processing package to form an enriched data processing package. The system may communicate the enriched data processing package to a search service for execution. The system may display the results in the chart.

Interactive chart using a data processing package

A system generates a user interface that enables a user to generate a chart from one or more statements of a data processing package. Via one or more user interactions with the user interface, the system may receive one or more chart parameters for a chart. Using a statement from the data processing package and the one or more chart parameters, the system may generate an additional statement and append the generated statement to the data processing package to form an enriched data processing package. The system may communicate the enriched data processing package to a search service for execution. The system may display the results in an interactive chart.

Chart creation based on a data processing package

A system generates a user interface that enables a user to modify time ranges associated with search-related statements of a data processing package. Via one or more user interactions with the user interface, the system may receive a modified time range for the statement. The modified time range may be appended to the data processing package to form an enriched data processing package. The system may communicate the enriched data processing package to a search service for execution. The system may display the results in the user interface.

Appending time ranges to distinct statements of a data processing package

A system is described that receives a query model of a query that includes one or more query commands. The query model includes a command model that corresponds to at least query command of the one or more query commands. The system uses the command model to generate an interactive action model summary and causes a user interface to display the query and the interactive action model summary in a query actions panel. A modification to the query in the user interface causes an update to the query actions panel and a modification to the action model summary causes an update to the at least one query command of the query.

Bi-directional query updates in a user interface

Display screen or portion thereof having a graphical user interface for a simplified visualization of a data security system

A system generates a user interface that enables a user to generate a data summarization statement for a data processing package. Via one or more user interactions with the user interface, the system may receive one or more parameters for the summarization statement. Using the parameters, the system may generate a summarization statement for execution by a data service, an action model display object, a statement action model display object, and/or a filter token object for display in the user interface.

Interactive filter tokens in a GUI interface

Systems and methods are described for processing ingested data in an asynchronous manner as the data is being ingested to detect potential anomalies. For example, one or more streaming data processors can convert data as the data is ingested into a comparable data structure, determine whether the comparable data structure should be assigned to an existing data pattern or a new data pattern, and optionally update a characteristic of the data pattern to which the comparable data structure is assigned. The streaming data processor(s) can perform these operations automatically in real-time or in periodic batches. Once one or more comparable data structures have been assigned to one or more data patterns, the streaming data processor(s) can analyze the comparable data structures assigned to a particular data pattern to determine whether any of the comparable data structures appear to be anomalous.

Processing ingested data to identify anomalies

Systems and methods are disclosed for performing multiple queries in a single graphical user interface (GUI) displayed in a client browser. The client browser causes the display of a first user interface field in a first area of the GUI, where the first user interface field can be used to enter or edit a first query. The client browser also causes first query results generated by a data intake and query system executing the first query to be displayed in the first area. The client browser further causes the display of a second user interface field in a second area of the GUI, where the second user interface field can be used to enter or edit a second query. The client browser also causes second query results generated by the data intake and query system executing the second query to be displayed in the second area.

Executing one query based on results of another query

Display screen or portion thereof having a graphical user interface

Systems and methods are disclosed for assigning a global parameter to one or more queries present in a single graphical user interface (GUI) displayed in a client browser. The client browser causes the display of a first user interface field in a first area of the GUI, where the first user interface field can be used to enter or edit a first query. The client browser further causes the display of a second user interface field in a second area of the GUI, where the second user interface field can be used to enter or edit a second query. The client browser also receives a selection of a global parameter, applies the global parameter to the first and second queries, receives a modification to the global parameter for the second query, and causes execution of the first query using the global parameter and of the second query using the modification.

Assigning a global parameter to queries in a graphical user interface

Systems and methods are disclosed for allowing a user to view query results associated with a time range that is different from a time range indicated by a query. For example, a user interface (UI) data manager can receive a request for a panel of a workbook with a query that identifies the first time range. The UI data manager can obtain the panel, including the query and query results, and cause display of a panel view corresponding to the panel. The displayed query results may not correspond to the same time range as the literal time range indicated by the query. Rather, the query results may be the query results generated during an earlier time range that corresponds to the last time the query was run.

Displaying query results from a previous query when accessing a panel

A system can display content generated from one type of machine-generated data to a user via a graphical user interface. Based on an interaction with the machine-generated data, the system can determine an entity identifier associated with the machine-generated data and determine an entity type for the entity identifier. The system can map the entity type to one or more content generators associated with the entity type and communicate the entity identifier to the identified content generators. The content generators can determine if they have content associated with the machine-generated data. The system can generate and display a link to the related content via a graphical user interface.

Anomaly detection in data ingested to a data intake and query system

Systems and methods are disclosed for allowing a user to perform various actions in association with a panel. For example, a user interface (UI) data manager can cause display of, as part of a panel view associated with a panel, a user interface field that includes a query and a first display object that includes query results generated as a result of execution of the query. In response to a user input, the UI data manager can further cause display of a second display object that provides the user with a list of actions that can be performed in association with the panel. If a user selects an action, the UI data manager can perform the action and cause display of results of the action in the panel view. The UI data manager can further associate the results of the action with the panel corresponding to the panel view.

Performing panel-related actions based on user interaction with a graphical user interface

Growing community of inventors

San Mateo, CA, United States of America

Clark Eugene Mullen