Splunk Inc.

John Nguyen

Sai Krishna Sajja

Sourav Pal

Ledion Bitincka

Alexandros Batsakis

Igor Stojanovski

Ruochen Zhang

Tameem Anwar

Sanket Murlidhar Varkhede

A computer-implemented method for performing cross regional disaster recovery includes receiving event data at an active deployment of a data intake and query system. The method further includes processing the event data in a plurality of stages of the data intake and query system to convert the event data into searchable buckets of indexed data, wherein files generated at each stage of the processing are uploaded to a first scalable storage module in the active deployment. Further, the method includes replicating the files generated at each stage of the processing to a second scalable storage module in a standby deployment of the data intake and query system. Responsive to an outage at the active deployment, the method includes transitioning control to the standby deployment and recovering the event data at the standby deployment using the files replicated to the second scalable storage module.

Bootstrapping techniques for performing cross region disaster recovery

Systems and methods are disclosed for processing and executing queries in a data intake and query system. The data intake and query system receives raw machine data at an indexing system, and stores at least a portion of the raw machine data in buckets. Based on a determination that the size of multiple buckets satisfies a threshold size, the data intake and query system converts the buckets to non-editable buckets and stores the data in a remote shared storage system.

Managing and storing buckets to a remote shared storage system based on a collective bucket size

Growing community of inventors

San Francisco, CA, United States of America

John Nguyen