Sharing configuration information through a shared storage location
AssigneeSplunk Inc.
InventorsLedio Ago, Declan Gerard Shanaghy
Life of this patent
Estimating the term…
Abstract
Various embodiments describe multi-site cluster-based data intake and query systems, including cloud-based data intake and query systems. Using a hybrid search system that includes cloud-based data intake and query systems working in concert with so-called “on-premises” data intake and query systems can promote the scalability of search functionality. In addition, the hybrid search system can enable data isolation in a manner in which sensitive data is maintained “on premises” and information or data that is not sensitive can be moved to the cloud-based system. Further, the cloud-based system can enable efficient leveraging of data that may already exist in the cloud.
Claims30
A computer-implemented method comprising:
- accessing, by a first cluster of a multi-site data intake and query system, a search configuration that defines at least a portion of how the first cluster retrieves or displays search results, the multi-site data intake and query system comprising the first cluster, a second cluster, and a shared storage location outside the first and second clusters, wherein the first cluster is an on-premises cluster and the second cluster is a cloud-based cluster;
- synchronizing, by a first synchronization process that is not triggered by search processing, the search configuration from the first cluster to the shared storage location through a first firewall associated with the first cluster;
- and
- synchronizing, by a second synchronization process that is not triggered by search processing, the search configuration from the shared storage location to the second cluster through a second firewall associated with the second cluster, thereby updating the second cluster based on the search configuration.
One or more non-transitory computer-readable media storing instructions thereon, the instructions, when executed by one or more processors, cause the one or more processors to perform operations comprising:
- accessing, by a first cluster of a multi-site data intake and query system, a search configuration that defines at least a portion of how the first cluster retrieves or displays search results, the multi-site data intake and query system comprising the first cluster, a second cluster, and a shared storage location outside the first and second clusters, wherein the first cluster is an on-premises cluster and the second cluster is a cloud-based cluster;
- synchronizing, by a first synchronization process that is not triggered by search processing, the search configuration from the first cluster to the shared storage location through a first firewall associated with the first cluster;
- and
- synchronizing, by a second synchronization process that is not triggered by search processing, the search configuration from the shared storage location to the second cluster through a second firewall associated with the second cluster, thereby updating the second cluster based on the search configuration.
A computer-implemented system comprising:
- one or more processors and memory storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- accessing, by a first cluster of a multi-site data intake and query system, a search configuration that defines at least a portion of how the first cluster retrieves or displays search results, the multi-site data intake and query system comprising the first cluster, a second cluster, and a shared storage location outside the first and second clusters, wherein the first cluster is an on-premises cluster and the second cluster is a cloud-based cluster;
- synchronizing, by a first synchronization process that is not triggered by search processing, the search configuration from the first cluster to the shared storage location through a first firewall associated with the first cluster;
- and
- synchronizing, by a second synchronization process that is not triggered by search processing, the search configuration from the shared storage location to the second cluster through a second firewall associated with the second cluster, thereby updating the second cluster based on the search configuration.
Dependencies are inferred from the claim text.