Splunk Inc.

Cisco Technology, Inc.

Robin Kumar Das

Stephen Phillip Sorkin

Andre David Stechert

Michael Joseph Baum

Erik M Swan

Rory Greene

Brian Philip Murphy

Nicholas Christian Mealy

R David Carasso

Bradley Hall

Christina Frances Regina Noren

Ledio Ago

Gaurav Gupta

Declan Gerard Shanaghy

David Carasso

Brad Hall

Vishal Patel

Mitchell Blank, Jr

Johnathon Lee Cervelli

Nick Mealy

Jimmy John

Christina Noren

Brian Phillip Murphy

Declan Gerald Shanaghy

Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

Enabling role-based operations to be performed on machine data in a machine environment

Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.

Segmenting machine data into events

Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is stored as discrete events time stamps. A search is received and relevant event information is retrieved based in whole or in part on the time stamp, a keyword indexing mechanism, or statistical indices calculated at the time of the search.

Search phrase processing

Optimizing resource allocation for projects executing in a cloud-based environment

Segmenting machine data into events to identify matching events

Segmenting machine data into events based on source signatures

Storing events derived from log data and performing a search on the events and data that is not log data

Time series search phrase processing

Determining time stamps in machine data derived events

Methods and apparatus are disclosed to automatically timestamp events within streaming machine data. The streaming machine data is broken into a set of events using breaking rules. Each event can be analyzed by iterating over own time stamp format patterns from a list of known time stamp format patterns to determine whether a matching pattern exists in the event. When an individual event broken out from the streaming machine data includes time information according to at least one known time stamp format pattern of the list of known time stamp format patterns, a timestamp can be created for the event by extracting a time value from event ng the matching pattern determined to exist in the event.

Determining timestamps to be associated with events in machine data

Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.

Segmenting machine data using token-based signatures

Deriving signature-based rules for creating events from machine data

Growing community of inventors

Healdsburg, CA, United States of America

Robin Kumar Das