The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Mar. 01, 2022
Filed:
Oct. 18, 2019
Splunk Inc., San Francisco, CA (US);
Chandrashekar Basavaiah, San Ramon, CA (US);
Jindrich Dinga, Los Altos, CA (US);
Elizabeth Li, Oakland, CA (US);
Cary Glen Noel, Camas, WA (US);
Isabelle Park, San Mateo, CA (US);
Eric Tschetter, Redwood City, CA (US);
Joshua Walters, Santa Clara, CA (US);
Mei Chun Yeh, San Francisco, CA (US);
Splunk Inc., San Francisco, CA (US);
Abstract
Systems and methods are disclosed for efficiently detecting alert states within unstructured event data. Alert states are illustratively defined as occurring when a threshold number of journey instances are present within the unstructured event data, each journey instance representing a series of events within the event data representing steps within a pre-defined journey. Detecting journey instances within unstructured event data can require significant computational resources, and thus attempting to detect alert states directly from unstructured event data can lead to inefficiencies. Embodiments of this disclosure enable a structured data set of journey instances to be generated from unstructured event data, and for the structured data set to be evaluated based on criteria of multiple alert states. By utilizing a single structured data set to support evaluation based on multiple alert states, detecting alert states from unstructured event data is rendered more efficient.