Unified data processing across streaming and indexed data sets
AssigneeSplunk Inc.
InventorsJoseph Gabriel Echeverria, Arthur Foelsche, Eric Sammer, Sarah Stanger
Life of this patent
Estimating the term…
Loading patent…
AssigneeSplunk Inc.
InventorsJoseph Gabriel Echeverria, Arthur Foelsche, Eric Sammer, Sarah Stanger
Estimating the term…
Systems and methods are described for unified processing of indexed and streaming data. A system enables users to query indexed data or specify processing pipelines to be applied to streaming data. In some instances, a user may specify a query intended to be run against indexed data, but may specify criteria that includes not-yet-indexed data (e.g., a future time frame). The system may convert the query into a data processing pipeline applied to not-yet-indexed data, thus increasing the efficiency of the system. Similarly, in some instances, a user may specify a data processing pipeline to be applied to a data stream, but specify criteria including data items outside the data stream. For example, a user may wish to apply the pipeline retroactively, to data items that have already exited the data stream. The system can convert the pipeline into a query against indexed data to satisfy the users processing requirements.
A method comprising:
A system comprising:
Non-transitory computer-readable media comprising instructions executable by a computing system to:
Dependencies are inferred from the claim text.