Configuring event stream generation in cloud-based computing environments
AssigneeSplunk Inc.
InventorMichael Dickey
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments provide a method and system for facilitating the processing of network data. During operation, the system obtains, at a remote capture agent, configuration information for the remote capture agent from a configuration server over a network. Next, the system uses the configuration information to configure the generation of event data from network packets at the remote capture agent. Upon receiving an update to the configuration information from the configuration server, the system uses the update to reconfigure the generation of the event data by the remote capture agent during runtime of the remote capture agent.
Claims29
A computer-implemented method performed by a configuration server coupled via one or more networks to a remote capture agent running in a cloud-based computing environment, the method comprising:
- receiving input defining an event stream to be generated by the remote capture agent running in the cloud-based computing environment, the event stream to include timestamped event data generated by the remote capture agent based on network traffic monitored by the remote capture agent;
- generating configuration information based on the input, wherein the configuration information instructs the remote capture agent to send the event stream to another component on the network for subsequent processing;
- and
- sending the configuration information to the remote capture agent, the configuration information causing the remote capture agent to generate the event stream based on network traffic monitored by the remote capture agent and involving at least one server running in the cloud-based computing environment.
A configuration server coupled to a network, the configuration server comprising:
- a processor;
- a non-transitory computer readable storage medium storing instructions which, when executed by the processor, cause the configuration server to:
- receive input defining an event stream to be generated by a remote capture agent running in a cloud-based computing environment, the event stream to include timestamped event data generated by the remote capture agent based on network traffic monitored by the remote capture agent;
- generate configuration information based on the input, wherein the configuration information instructs the remote capture agent to send the event stream to another component on the network for subsequent processing;
- and
- send the configuration information to the remote capture agent, the configuration information causing the remote capture agent to generate the event stream based on network traffic monitored by the remote capture agent and involving at least one server running in the cloud-based computing environment.
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause a configuration server to perform operations comprising:
- receiving input defining an event stream to be generated by a remote capture agent running in a cloud-based computing environment, the event stream to include timestamped event data generated by the remote capture agent based on network traffic monitored by the remote capture agent;
- generating configuration information based on the input, wherein the configuration information instructs the remote capture agent to send the event stream to another component on the network for subsequent processing;
- and
- sending the configuration information to the remote capture agent, the configuration information causing the remote capture agent to generate the event stream based on network traffic monitored by the remote capture agent and involving at least one server running in the cloud-based computing environment.
Dependencies are inferred from the claim text.