# US 12,182,151 B1 · Framework for managing dynamic configurations of data intake and query systems deployed in remote computing environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,151 B1 - Document ID: US12182151B1 - Status: Granted - Kind: B1 - Application number: 18/104,142 - Filed: 2023-01-31 - Granted: 2024-12-31 - Earliest claimed: 2019-07-31 - Assignees: Splunk Inc. - Applicants: SPLUNK Inc. - Inventors: Daniel Federschmidt; Ashley Hoang; Yuan Ling; Mayur Sanjaybhai Pipaliya; Nicolas Stone; Carl Yestrau - Web page: https://patentgrep.com/patent/US12182151B1 ## CPC - G06F 16/252: {between a Database Management System and a front-end application} - G06F 3/0482: Interaction with lists of selectable items, e.g. menus - G06F 16/168: {Details of user interfaces specifically adapted to file systems, e.g. browsing and visualisation, 2d or 3d GUIs (query results presentation G06F16/156)} - G06F 16/2272: {Management thereof} - G06F 16/2471: {Distributed queries} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Implementations of this disclosure provide for automated monitoring of configuration parameters of a primary data intake and query system instance operating within a distributed deployment environment. Further implementations provide for automatically generating instructions in response to a detected change in a configuration parameter of the primary data intake and query system instance and transmitting those instructions to one or more secondary data intake and query system instances. The instructions, upon execution by one or more processors, cause the configuration parameters of the one or more secondary data intake and query system instances to be updated in accordance with the detected change in the configuration parameter of the primary data intake and query system instance. ## Claims ### Claim 1 A computerized method comprising: establishing a first communicative coupling with a first data intake and query system instance and a second communicative coupling with a second data intake and query system instance, wherein changes to one or more configuration parameters of the first data intake and query system instance are monitored; determining a change has occurred to a first configuration parameter of the first data intake and query system instance, wherein the change results in a second version of the first configuration parameter; and transmitting instructions to the second data intake and query system instance, the instructions, upon execution by one or more processors, causing updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter. ### Claim 2 (depends on 1) The computerized method of claim 1, further comprising: receiving an acknowledgement that updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter occurred. ### Claim 3 (depends on 1) The computerized method of claim 1, wherein monitoring changes to the one or more configuration parameters of the first data intake and query system instance is performed by a configuration tracking logic processing at the first data intake and query system instance. ### Claim 4 (depends on 3) The computerized method of claim 3, wherein the monitoring performed by the configuration tracking logic includes recording of an old value of a configuration parameter and a new value of a configuration parameter. ### Claim 5 (depends on 1) The computerized method of claim 1, wherein transmitting the instructions to the second data intake and query system instance is performed via an application programming interface (API). ### Claim 6 (depends on 1) The computerized method of claim 1, further comprising: establishing a third communicative coupling with a third data intake and query system instance; and upon determining the change has occurred to the first configuration parameter of the first data intake and query system instance wherein the change results in the second version of the first configuration parameter, transmitting the instructions to the second data intake and query system instance and the third data intake and query system instance, wherein the instructions cause updating of the first configuration parameter at the second data intake and query system instance and the third data intake and query system instance to the second version of the first configuration parameter. ### Claim 7 (depends on 1) The computerized method of claim 1, wherein the first data intake and query system instance and the second data intake and query system instance are each configured to receive raw machine data and parse the raw machine data into a plurality of timestamped events, each timestamped event in the plurality of timestamped events comprising at least a portion of the parsed raw machine data. ### Claim 8 A computing device, comprising: a processor; and a non-transitory computer-readable medium having stored thereon instructions that, when executed by the processor, cause the processor to perform operations including: establishing a first communicative coupling with a first data intake and query system instance and a second communicative coupling with a second data intake and query system instance, wherein changes to one or more configuration parameters of the first data intake and query system instance are monitored; determining a change has occurred to a first configuration parameter of the first data intake and query system instance, wherein the change results in a second version of the first configuration parameter; and transmitting instructions to the second data intake and query system instance, the instructions, upon execution by one or more processors, causing updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter. ### Claim 9 (depends on 8) The computing device of claim 8, wherein the operations further include: receiving an acknowledgement that updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter occurred. ### Claim 10 (depends on 8) The computing device of claim 8, wherein monitoring changes to the one or more configuration parameters of the first data intake and query system instance is performed by a configuration tracking logic processing at the first data intake and query system instance. ### Claim 11 (depends on 10) The computing device of claim 10, wherein the monitoring performed by the configuration tracking logic includes recording of an old value of a configuration parameter and a new value of a configuration parameter. ### Claim 12 (depends on 8) The computing device of claim 8, wherein transmitting the instructions to the second data intake and query system instance is performed via an application programming interface (API). ### Claim 13 (depends on 8) The computing device of claim 8, wherein the operations further include: establishing a third communicative coupling with a third data intake and query system instance; and upon determining the change has occurred to the first configuration parameter of the first data intake and query system instance wherein the change results in the second version of the first configuration parameter, transmitting the instructions to the second data intake and query system instance and the third data intake and query system instance, wherein the instructions cause updating of the first configuration parameter at the second data intake and query system instance and the third data intake and query system instance to the second version of the first configuration parameter. ### Claim 14 (depends on 8) The computing device of claim 8, wherein the first data intake and query system instance and the second data intake and query system instance are each configured to receive raw machine data and parsing the raw machine data into a plurality of timestamped events, each timestamped event in the plurality of timestamped events comprising at least a portion of the parsed raw machine data. ### Claim 15 A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processor to perform operations including: establishing a first communicative coupling with a first data intake and query system instance and a second communicative coupling with a second data intake and query system instance, wherein changes to one or more configuration parameters of the first data intake and query system instance are monitored; determining a change has occurred to a first configuration parameter of the first data intake and query system instance, wherein the change results in a second version of the first configuration parameter; and transmitting instructions to the second data intake and query system instance, the instructions, upon execution by one or more processors, causing updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the operations further include: receiving an acknowledgement that updating of the first configuration parameter at the second data intake and query system instance to the second version of the first configuration parameter occurred. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein monitoring changes to the one or more configuration parameters of the first data intake and query system instance is performed by a configuration tracking logic processing at the first data intake and query system instance. ### Claim 18 (depends on 17) The non-transitory computer-readable medium of claim 17, wherein the monitoring performed by the configuration tracking logic includes recording of an old value of a configuration parameter and a new value of a configuration parameter. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein transmitting the instructions to the second data intake and query system instance is performed via an application programming interface (API). ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the operations further include: establishing a third communicative coupling with a third data intake and query system instance; and upon determining the change has occurred to the first configuration parameter of the first data intake and query system instance wherein the change results in the second version of the first configuration parameter, transmitting the instructions to the second data intake and query system instance and the third data intake and query system instance, wherein the instructions cause updating of the first configuration parameter at the second data intake and query system instance and the third data intake and query system instance to the second version of the first configuration parameter.