Splunk Inc.

J Mathew Elting

Siegfried Puchbauer-Schnabel

Vivian Shen

Nicholas John Filippi

Carl S Yestrau

Carl Sterling Yestrau

Nicholas J Filippi

A system that enables a user to configure alert actions based on search results generated by a query is disclosed. During operation, the system presents an alert user interface (UI) to a user, wherein the alert UI enables the user to configure one or more alert actions to be performed based on the search results. Next, the system receives alert configuration information from the user through the alert UI, wherein the alert configuration information includes tokens representing parameters associated with the query and the search results. Then, while generating an alert associated with the search results, the system performs a token substitution operation that substitutes tokens in the alert configuration information with corresponding parameters from the search results to generate a payload that is communicated to alert-generating functionality. This token substitution allows the parameters to be used by the alert-generating functionality while performing the one or more alert actions.

Graphical user interface for alert configuration

Executing alert actions based on search query results

The disclosed embodiments relate to a system that generates an alert based on information extracted from search results generated by a query. During operation, the system executes the query to generate the search results. The system also obtains configuration information for the alert, wherein the configuration information identifies information associated with the search results, and also specifies a trigger condition for the alert. Next, when the trigger condition for the alert is met, the system uses the configuration information to generate a payload containing the identified information associated with the search results. The system then invokes alert-generating functionality and provides the payload as input to the alert-generating functionality. This enables the alert-generating functionality to use the information from the search results while performing one or more alert actions association with the alert.

User configurable alert notifications applicable to search query results

Configuring alerts related to performance problems or security issues in an information technology environment

Facilitating configuration of alerts based on information obtained from search results in a query-processing system

Automatically generating alerts based on information obtained from search results in a query-processing system

Growing community of inventors

San Francisco, CA, United States of America

J Mathew Elting