Data source tokens
AssigneeSplunk Inc.
InventorsGlenn Block, Patrick Ogdin
Life of this patent
Estimating the term…
Abstract
A data intake and query system processes and stores events, which are associated with token identifiers for tokens corresponding to data sources for the messages that the events are generated from. Thus, the data intake and query system can receive a request to provide analyses and visualizations regarding stored events associated with a particular component associated with a plurality of events, such as a data source for the messages from which the plurality of events are generated from. These requests and the resulting visualizations can be customized based on selected tokens and selected components.
Claims30
A computer-implemented method, comprising:
- identifying a plurality of events associated with a token identifier, the plurality of events received via a plurality of messages and stored by a data intake and query system, wherein the token identifier indicates a data source of the plurality of messages;
- identifying one or more components of the data intake and query system that process the plurality of events received via the plurality of messages;
- and
- generating visualization data for a graphical visualization, the visualization data indicating one or more metrics of the one or more components of the data intake and query system that process the plurality of events received via the plurality of messages.
A computing system, comprising:
- one or more processing devices configured to:
- identify a plurality of events associated with a token identifier, the plurality of events received via a plurality of messages and stored by a data intake and query system, wherein the token identifier indicates a data source of the plurality of messages;
- identify one or more components of the data intake and query system that process the plurality of events received via the plurality of messages;
- and
- generate visualization data for a graphical visualization, the visualization data indicating one or more metrics of the one or more components of the data intake and query system that process the plurality of events received via the plurality of messages.
Non-transitory computer readable storage media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:
- identify a plurality of events associated with a token identifier, the plurality of events received via a plurality of messages and stored by a data intake and query system, wherein the token identifier indicates a data source of the plurality of messages;
- identify one or more components of the data intake and query system that process the plurality of events received via the plurality of messages;
- and
- generate visualization data for a graphical visualization, the visualization data indicating one or more metrics of the one or more components of the data intake and query system that process the plurality of events received via the plurality of messages.
Dependencies are inferred from the claim text.