IP Library Granted Patent US 11,934,417
Granted Patent B2
US 11,934,417 · App. 17/373,580 · Granted Mar 19, 2024

Dynamically monitoring an information technology networked entity

Inventors: Ai-Chi Lu (San Francisco, CA); Arun Ramani (Bellevue, WA); Nicholas Matthew Tankersley (Seattle, CA)
Assignee: Splunk Inc.
G06F16/248G06F3/04847G06F16/9535G06F3/04842
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,934,417
App. No.
17/373,580
Filed
Jul 12, 2021
Granted
Mar 19, 2024
Kind
B2
Examiner
PHAM, TUAN A
Art Unit
2163
USPC
707/722
Abstract

Data intake and query system (DIQS) instances supporting applications including lower-tier, focused, work group oriented applications, are tailored to display the metrics for the needs of the user. An interface caused by operation of an entity monitoring system (EMS) operating in conjunction with the lower-tier DIQS displays the monitored entities as individual representations. The user selects a metric and a metric threshold. The EMS causes a display of an interface having a representation for each monitored entity. Each representation includes a metric value and indicates an entity status based on the metric value and the threshold. The user can dynamically change the threshold on the interface for easy visualization of aggregation of monitored entities to determine the performance of the infrastructure. The interface also provides the user with the ability to select an entity and click through to the entity analysis workspace for more detailed information.

Claims (56)

1. A method, comprising:

receiving an indication of a first user input identifying a performance metric;

causing concurrent display, via a user interface, of:

a plurality of tiles, wherein each tile of the plurality of tiles corresponds to a respective entity of a plurality of entities and is associated with the performance metric identified via the first user input, and wherein each tile of the plurality of tiles has a respective visual status based on a first threshold value and a respective performance metric value for the performance metric identified via the first user input, the respective performance metric value associated with the respective entity, and

a display object for adjusting the first threshold value;

receiving, via the display object, an indication of a second user input to adjust the first threshold value to a second threshold value; and

in response to the second user input, dynamically updating the respective visual status of each tile of the plurality of tiles based on the second threshold value and the respective performance metric value, wherein the updated respective visual status of each tile of the plurality of tiles has one of a plurality of states, wherein a first state of the plurality of states indicates that the respective performance metric value satisfies the second threshold value and a second state of the plurality of states indicates that the respective performance metric value does not satisfy the second threshold value.

2. The method of claim 1 , wherein each tile of the plurality of tiles displays the respective performance metric value.

3. The method of claim 1 , wherein the first state is visually distinct from the second state.

4. The method of claim 1 , wherein the display object comprises a slider for adjusting the first threshold value.

5. The method of claim 1 , wherein the display object comprises a threshold value field for adjusting the first threshold value.

6. The method of claim 1 further comprising receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric.

7. The method of claim 1 , wherein the user interface enables a user to indicate one or more metadata factors associated with the performance metric, the method further comprising receiving an indication of a third user input identifying the one or more metadata factors.

8. The method of claim 1 further comprising:

receiving a search request message;

executing a search query based on the search request message; and

producing search results based on the search query.

9. The method of claim 1 further comprising:

receiving a search request message;

executing a search query based on the search request message;

producing search results based on the search query;

receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric; and

filtering the search results responsive to the one or more metadata factors.

10. The method of claim 1 further comprising:

obtaining search results;

receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric; and

filtering the search results responsive to the one or more metadata factors.

11. The method of claim 1 further comprising:

obtaining search results;

receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric; and

filtering the search results responsive to the one or more metadata factors, wherein causing concurrent display of the plurality of tiles and the display object comprises causing display of the plurality of tiles and the display object enabling a user to identify the one or more metadata factors.

12. The method of claim 1 further comprising receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric, wherein the one or more metadata factors comprise one or more of an environment of an entity of the plurality of entities, a physical location of an entity of the plurality of entities, an owner of an entity of the plurality of entities, or an escalation priority of an entity of the plurality of entities.

13. The method of claim 1 further comprising receiving an indication of a third user input identifying one or more metadata factors associated with the performance metric, wherein the one or more metadata factors correspond to metadata information representing at least one of an operating system of an entity of the plurality of entities, a version of the operating system, or a system IP address of an entity of the plurality of entities.

14. The method of claim 1 , wherein the performance metric comprises one or more of a CPU-related performance metric, a disk free-related performance metric, a disk-related performance metric, an interface-related performance metric, a load-related performance metric, or a memory-related performance metric.

15. The method of claim 1 further comprising receiving performance metric data for the plurality of entities, wherein the performance metric data comprises performance metric values for the performance metric for the plurality of entities, wherein the performance metric values comprise the respective performance metric value for each tile of the plurality of tiles.

16. The method of claim 1 further comprising receiving performance metric data for the plurality of entities, wherein the performance metric data comprises performance metric values for a plurality of performance metrics, the plurality of performance metrics comprising the performance metric, wherein the performance metric values comprise the respective performance metric value for each tile of the plurality of tiles.

17. The method of claim 1 , wherein the performance metric comprises a first performance metric, the method further comprising receiving an indication of a third user input identifying a second performance metric.

18. The method of claim 1 , wherein the performance metric comprises a first performance metric, the method further comprising:

receiving an indication of a third user input identifying a second performance metric; and

updating the respective visual status of each tile of the plurality of tiles based on the second performance metric.

19. A system comprising:

a memory containing computer-executable instructions; and

a processing device configured to execute the computer-executable instructions to cause the system to:

receive an indication of a first user input identifying a performance metric;

cause concurrent display, via a user interface, of:

a plurality of tiles, wherein each tile of the plurality of tiles corresponds to a respective entity of a plurality of entities and is associated with the performance metric identified via the first user input, and wherein each tile of the plurality of tiles has a respective visual status based on a first threshold value and a respective performance metric value for the performance metric identified via the first user input, the respective performance metric value associated with the respective entity, and

a display object for adjusting the first threshold value;

receive, via the display object, an indication of a second user input to adjust the first threshold value to a second threshold value; and

in response to the second user input, dynamically update the respective visual status of each tile of the plurality of tiles based on the second threshold value and the respective performance metric value, wherein the updated respective visual status of each tile of the plurality of tiles has one of a plurality of states, wherein a first state of the plurality of states indicates that the respective performance metric value satisfies the second threshold value and a second state of the plurality of states indicates that the respective performance metric value does not satisfy the second threshold value.

20. A non-transitory computer readable storage media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:

receive an indication of a first user input identifying a performance metric;

cause concurrent display, via a user interface, of:

a plurality of tiles, wherein each tile of the plurality of tiles corresponds to a respective entity of a plurality of entities and is associated with the performance metric identified via the first user input, and wherein each tile of the plurality of tiles has a respective visual status based on a first threshold value and a respective performance metric value for the performance metric identified via the first user input, the respective performance metric value associated with the respective entity, and

a display object for adjusting the first threshold value;

receive, via the display object, an indication of a second user input to adjust the first threshold value to a second threshold value; and

in response to the second user input, dynamically update the respective visual status of each tile of the plurality of tiles based on the second threshold value and the respective performance metric value, wherein the updated respective visual status of each tile of the plurality of tiles has one of a plurality of states, wherein a first state of the plurality of states indicates that the respective performance metric value satisfies the second threshold value and a second state of the plurality of states indicates that the respective performance metric value does not satisfy the second threshold value.

Assignments (3)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 6, 2021
From: TANKERSLEY, NICHOLAS MATTHEW; LU, AI-CHI; RAMANI, ARUN
To: SPLUNK INC.
Reel/Frame 057715/0143 →
Continuity (5)
Continuation 16049628 · Jul 30, 2018
Continuation In Part 15885632 · Jan 31, 2018
Continuation In Part 15713606 · Sep 23, 2017
Provisional Application 62563010 · Sep 25, 2017
Related Publication 20210342337A1 · Nov 4, 2021
Cited By (1)
US 12,361,086