Splunk Inc.

Cisco Technology, Inc.

Jonathan Yeung

Anthony Ng

Rodrigo Paulo Quaresma

Warren Shum

Neel Mehta

William Huang

Joel Jacob

Qi Shu

Yi Chien Lee

Allyson Aberg

Neha Kumari

Masrur Mahmood

Alan Sung

Jesse Chor

Tishan Mills

Casing Chu

Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device. Both offline and online updating approaches are described.

Online updating of an edge device operating in a secure computing environment

Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device.

Updating an edge device operating in a secure computing environment

Described herein are techniques for integrating external sensors to an edge device, such as for ingesting data into a data intake and query system. The edge device has an internal message broker for communicating with internal (e.g., preconfigured, recognized) sensors, and an external message broker for communicating with external (e.g., customer-configured, otherwise unrecognized) sensors. The external message broker provides access to customer configuration of external sensors, but is logically quarantined from the internal message broker to prevent unwanted customer access to internal configurations. The internal and external message brokers interface only via a bridging service that transforms external sensor data into data based on customer-configurable transformations. The transformed data can be handled by the edge device and/or downstream components (e.g., a data intake and query system) in the same manner as internal sensor data.

External sensor integration at edge device for delivery of data to intake system

In various embodiments, a computer-implemented method comprises acquiring status data for settings that control operations of the edge sensor device, transmitting the status data to a backend system, receiving a command to modify settings that control the operations of the edge sensor device, the settings specifying (i) one or more subscribers, and (ii) a data collection limit, in response to receiving the command, modifying the setting, acquiring sensor data associated with a physical device operating within a physical environment, where a sensor service collects the the sensor data up to the data collection limit, and the edge sensor device is located proximal to the physical device, inputting the sensor data into an onboard message broker for publishing, and transmitting, from the onboard message broker, the sensor data, where the sensor data is addressed to a first set of one or more subscribers of the onboard message broker.

Sensor data device

A wrapper layer over a target interface receives requests from client devices over a different interface, converts the requests into a format that is compatible with the target interface, and transmits each converted request over the target interface for processing by a service. The wrapper layer also processes a request by a client device to subscribe to a certain type of update made via the target interface by verifying that the client device is authorized to access a resource associated with that type of update and creating a subscription that identifies the client device and the type of update. When the wrapper layer subsequently receives a request corresponding to that type of update, the wrapper layer matches attributes of the request to the subscription by the client device and transmits a message notifying the client device of the request.

Managing subscriptions to resource updates made via a target interface

Growing community of inventors

Mississauga, Canada

Jonathan Yeung