IP Library Granted Patent US 10,778,710
Granted Patent B2
US 10,778,710 · App. 16/177,394 · Granted Sep 15, 2020

User configurable alert notifications applicable to search query results

Inventors: Nicholas J. Filippi (Atherton, CA); Siegfried Puchbauer-Schnabel (San Francisco, CA); Carl S. Yestrau (San Francisco, CA); Vivian Shen (San Francisco, CA); J. Mathew Elting (San Francisco, CA)
Assignee: Splunk Inc.
H04L63/1425G06F9/542G06F16/21G06F16/3331G06F16/90344H04L41/0686H04L51/30H04L67/02H04L41/22H04L65/608
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,778,710
App. No.
16/177,394
Granted
Sep 15, 2020
Kind
B2
Abstract

The disclosed embodiments relate to a system that generates an alert based on information extracted from search results generated by a query. During operation, the system executes the query to generate the search results. The system also obtains configuration information for the alert, wherein the configuration information identifies information associated with the search results, and also specifies a trigger condition for the alert. Next, when the trigger condition for the alert is met, the system uses the configuration information to generate a payload containing the identified information associated with the search results. The system then invokes alert-generating functionality and provides the payload as input to the alert-generating functionality. This enables the alert-generating functionality to use the information from the search results while performing one or more alert actions association with the alert.

Claims (60)

1. A method, comprising:

causing display of an alert graphical user interface, the alert graphical user interface receiving input from a user to configure one or more alert actions to be performed based on search results resulting from a recurring search query;

receiving token information input via the alert graphical user interface, the token information representing search parameters associated with the recurring search query;

storing the one or more alert actions along with associated token information; and

wherein upon occurrence of search results that satisfy at least one alert action of the one or more alert actions:

substituting token information associated with the at least one alert action with information extracted from the search results; and

causing an alert-generating functionality to perform one or more alert actions using the information extracted from the search results.

2. The method of claim 1 , further comprising:

causing display of a graphical user interface that allows a user to manually invoke an alert action based on a set of search results.

3. The method of claim 1 , wherein the substituting token information further comprises:

using a late-binding schema to extract the information from the search results.

4. The method of claim 1 , wherein the substituting token information further comprises:

using a late-binding schema to extract the information from the search results;

using the extracted information to perform one or more token information substitutions in strings that are incorporated into the one or more alert actions.

5. The method of claim 1 , wherein configuration information for the one or more alert actions is received via the alert graphical user interface, and wherein the configuration information specifies how the extracted information is used to perform the one or more alert actions.

6. The method of claim 1 , wherein the one or more alert actions includes sending a chat message to a chat room.

7. The method of claim 1 , further comprising:

wherein the one or more alert actions includes sending a chat message to a chat room;

performing one or more token information substitutions in strings, using the extracted information, that are incorporated into the chat message.

8. The method of claim 1 , wherein the one or more alert actions includes sending a notification to one or more users.

9. The method of claim 1 , further comprising:

wherein the one or more alert actions includes sending a notification to one or more users;

performing one or more token information substitutions in strings, using the extracted information, that are incorporated into the notification.

10. The method of claim 1 , wherein configuration information for the one or more alert actions is received via the alert graphical user interface, and wherein the configuration information includes one or more of:

a title of the alert;

a description of the alert;

an indicator for when the alert is scheduled to be invoked;

one or more permissions associated with the alert;

one or more trigger conditions for the alert; or

the one or more alert actions.

11. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for generating an alert based on information associated with search results generated by a query, the method comprising:

causing display of an alert graphical user interface, the alert graphical user interface receiving input from a user to configure one or more alert actions to be performed based on search results resulting from a recurring search query;

receiving token information input via the alert graphical user interface, the token information representing search parameters associated with the recurring search query;

storing the one or more alert actions along with associated token information; and

wherein upon occurrence of search results that satisfy at least one alert action of the one or more alert actions:

substituting token information associated with the at least one alert action with information extracted from the search results; and

causing an alert-generating functionality to perform one or more alert actions using the information extracted from the search results.

12. The non-transitory computer-readable storage medium of claim 11 , wherein the substituting token information further comprises:

using a late-binding schema to extract the information from the search results.

13. The non-transitory computer-readable storage medium of claim 11 , wherein the substituting token information further comprises:

using a late-binding schema to extract the information from the search results;

using the extracted information to perform one or more token information substitutions in strings that are incorporated into the one or more alert actions.

14. The non-transitory computer-readable storage medium of claim 11 , wherein configuration information for the one or more alert actions is received via the alert graphical user interface, and wherein the configuration information specifies how the extracted information is used to perform the one or more alert actions.

15. The non-transitory computer-readable storage medium of claim 11 , wherein the one or more alert actions includes sending a chat message to a chat room.

16. An apparatus, comprising:

one or more processors; and

a memory storing instructions, which when executed by the one or more processors, causes the one or more processors to:

cause display of an alert graphical user interface, the alert graphical user interface receives input from a user to configure one or more alert actions to be performed based on search results resulting from a recurring search query;

receive token information input via the alert graphical user interface, the token information representing search parameters associated with the recurring search query;

store the one or more alert actions along with associated token information; and

wherein upon occurrence of search results that satisfy at least one alert action of the one or more alert actions:

substitute token information associated with the at least one alert action with information extracted from the search results; and

cause an alert-generating functionality to perform one or more alert actions using the information extracted from the search results.

17. The apparatus of claim 16 , wherein the substitute token information further comprises:

use a late-binding schema to extract the information from the search results.

18. The apparatus of claim 16 , wherein the substitute token information further comprises:

use a late-binding schema to extract the information from the search results;

use the extracted information to perform one or more token information substitutions in strings that are incorporated into the one or more alert actions.

19. The apparatus of claim 16 , wherein the configuration information is defined through a user interface by a user, and wherein the configuration information specifies how the extracted information is used to perform the one or more alert actions.

20. The apparatus of claim 16 , wherein the one or more alert actions includes sending a chat message to a chat room.

Assignments (4)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
CHANGE OF NAME Recorded Jan 6, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 069825/0782 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 1, 2018
From: FILIPPI, NICHOLAS J.; PUCHBAUER-SCHNABEL, SIEGFRIED; YESTRAU, CARL S.; SHEN, VIVIAN; ELTING, J. MATHEW
To: SPLUNK INC.
Reel/Frame 047387/0544 →
Continuity (3)
Continuation 15499852 · Apr 27, 2017
Continuation 14698724 · Apr 28, 2015
Related Publication 20190068629A1 · Feb 28, 2019