Loading patent…
AssigneeSplunk Inc.
InventorsSUNDAR RENGARAJAN VASAN, MITCHELL NEUMAN BLANK, JR., VISHAL PATEL, DA XU, RAMA GOPALAN
Estimating the term…
According to various embodiments, techniques are described for managing data within a multi-site clustered data intake and query system. A data intake and query system as described herein generally refers to a system for collecting, retrieving, and analyzing data. In this context, a clustered data intake and query system generally refers to a system environment that is configured to provide data redundancy and other features that improve the availability of data stored by the system. For example, a clustered data intake and query system may be configured to store multiple copies of data stored by the system across multiple components such that recovery from a failure of one or more of the components is possible by using copies of the data stored elsewhere in the cluster.
A method comprising:
A non-transitory computer readable storage medium, storing software instructions, which when executed by one or more processors cause performance of steps of:
The one or more non-transitory computer-readable media of claim 18, wherein determining that the indexer is to respond to the first query with a result from searching the subset of data includes determining that the indexer has primary responsibility for responding to queries for the subset of data for the first site.
The one or more non-transitory computer-readable media of claim 18, wherein the instructions, when executed by the one or more computing devices, further cause performance of:
The one or more non-transitory computer-readable media of claim 18, wherein the particular search affinity identifier is a bitmask, and wherein each digit of the bitmask represents a particular site of a plurality of sites.
The one or more non-transitory computer-readable media of claim 18, wherein the instructions, when executed by the one or more computing devices, further cause performance of:
The one or more non-transitory computer-readable media of claim 18, wherein the instructions, when executed by the one or more computing devices, further cause performance of:
The one or more non-transitory computer-readable media of claim 18, wherein the instructions, when executed by the one or more computing devices, further cause performance of:
Dependencies are inferred from the claim text.