IP Library Granted Patent US 11,580,071
Granted Patent B2
US 11,580,071 · App. 17/080,416 · Granted Feb 14, 2023

Monitoring changes to data items using associated metadata

Inventors: Amritpal Singh Bath (El Sobrante, CA); Mitchell Neuman Blank, Jr. (San Francisco, CA); Vishal Patel (San Francisco, CA); Stephen Phillip Sorkin (San Francisco, CA)
Assignee: Splunk Inc.
G06F16/1734G06F16/174G06F16/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,580,071
App. No.
17/080,416
Granted
Feb 14, 2023
Kind
B2
Abstract

Embodiments are directed towards managing and tracking item identification of a plurality of items to determine if an item is a new or existing item, where an existing item has been previously processed. In some embodiments, two or more item identifiers may be generated. In one embodiment, generating the two or more item identifiers may include analyzing the item using a small item size characteristic, a compressed item, or for an identifier collision. The two or more item identifiers may be employed to determine if the item is a new or existing item. In one embodiment, the two or more item identifiers may be compared to a record about an existing item to determine if the item is a new or existing item. If the item is an existing item, then the item may be further processed to determine if the existing item has actually changed.

Claims (46)

1. A method, comprising:

comparing, after expiration of a time value corresponding to an item, first metadata corresponding to the item to second metadata corresponding to the item, the first metadata determined prior to the second metadata;

based at least in part on the comparing, determining whether the item has been changed;

updating the time value associated with the item to an updated time value based at least in part on:

decreasing the time value when the item is determined to have changed; or

one of maintaining the time value or increasing the time value when the item is not determined to have changed; and

after expiration of the updated time value, comparing the second metadata to third metadata corresponding to the item, the third metadata determined prior to the second metadata.

2. The method of claim 1 , wherein at least one of the first metadata, the second metadata, or the third metadata corresponds to at least one of an item size, a timestamp, an access time, a creation time, a modification time, or a permissions attribute.

3. The method of claim 1 , further comprising, when another updated time value includes a maximum time value, ceasing comparing metadata corresponding to the item.

4. The method of claim 1 , further comprising:

determining that the item is a new item; and

based at least in part on the item being the new item, setting a default time value as the time value.

5. The method of claim 1 , wherein the determining whether the item has been changed includes determining whether a size of the item has changed.

6. The method of claim 5 , wherein the determining whether the size of the item has changed includes comparing a first end position of the item from the first metadata to a second end position of the item from the second metadata.

7. The method of claim 1 , wherein the method is executed, at least in part, using a computing device in a cloud computing architecture.

8. A system comprising:

one or more processors;

one or more memory devices storing instructions thereon that, when executed by the one or more processors, cause the one or more processors to execute operations comprising:

comparing, after expiration of a time value corresponding to an item, first metadata corresponding to the item to second metadata corresponding to the item, the first metadata determined prior to the second metadata;

based at least in part on the comparing, determining whether the item has been changed;

updating the time value associated with the item to an updated time value based at least in part on:

decreasing the time value when the item is determined to have changed; or

one of maintaining the time value or increasing the time value when the item is not determined to have changed; and

after expiration of the updated time value, comparing the second metadata to third metadata corresponding to the item, the third metadata determined prior to the second metadata.

9. The system of claim 8 , wherein at least one of the first metadata, the second metadata, or the third metadata corresponds to at least one of an item size, a timestamp, an access time, a creation time, a modification time, or a permissions attribute.

10. The system of claim 8 , wherein the operations further comprise, when another updated time value includes a maximum time value, ceasing comparing metadata corresponding to the item.

11. The system of claim 8 , wherein the operations further comprise:

determining that the item is a new item; and

based at least in part on the item being the new item, setting a default time value as the time value.

12. The system of claim 8 , wherein the determining whether the item has been changed includes determining whether a size of the item has changed.

13. The system of claim 12 , wherein the determining whether the size of the item has changed includes comparing a first end position of the item from the first metadata to a second end position of the item from the second metadata.

14. The system of claim 8 , wherein the system is comprised in a cloud computing architecture.

15. One or more non-transitory computer-storage media storing instructions that, when executed by one or more processors, cause the one or more processors to execute operations comprising:

comparing, after expiration of a time value corresponding to an item, first metadata corresponding to the item to second metadata corresponding to the item, the first metadata determined prior to the second metadata;

based at least in part on the comparing, determining whether the item has been changed;

updating the time value associated with the item to an updated time value based at least in part on:

decreasing the time value when the item is determined to have changed; or

one of maintaining the time value or increasing the time value when the item is not determined to have changed; and

after expiration of the updated time value, comparing the second metadata to third metadata corresponding to the item, the third metadata determined prior to the second metadata.

16. The one or more non-transitory computer-storage media of claim 15 , wherein at least one of the first metadata, the second metadata, or the third metadata corresponds to at least one of an item size, a timestamp, an access time, a creation time, a modification time, or a permissions attribute.

17. The one or more non-transitory computer-storage media of claim 15 , wherein the operations further comprise, when another updated time value includes a maximum time value, ceasing comparing metadata corresponding to the item.

18. The one or more non-transitory computer-storage media of claim 15 , wherein the operations further comprise:

determining that the item is a new item; and

based at least in part on the item being the new item, setting a default time value as the time value.

19. The one or more non-transitory computer-storage media of claim 15 , wherein the determining whether the item has been changed includes determining whether a size of the item has changed.

20. The one or more non-transitory computer-storage media of claim 19 , wherein the determining whether the size of the item has changed includes comparing a first end position of the item from the first metadata to a second end position of the item from the second metadata.

Assignments (4)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
CHANGE OF NAME Recorded Jan 6, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 069825/0782 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 30, 2020
From: BATH, AMRITPAL SINGH; BLANK, MITCHELL NEUMAN, JR.; PATEL, VISHAL; SORKIN, STEPHEN PHILLIP
To: SPLUNK INC.
Reel/Frame 054228/0995 →
Continuity (6)
Continuation 15663652 · Jul 28, 2017
Continuation 15224649 · Jul 31, 2016
Continuation 14611156 · Jan 30, 2015
Continuation 14034220 · Sep 23, 2013
Continuation 13076296 · Mar 30, 2011
Related Publication 20210042269A1 · Feb 11, 2021