IP Library Granted Patent US 12,135,627
Granted Patent B1
US 12,135,627 · App. 17/589,283 · Granted Nov 5, 2024

Facilitating management of collection agents

Inventors: Dinesh Dutt Sharma (Pleasanton, CA); Chaitanya Sunil Phalak (San Francisco, CA); Kyung Rock Baek (Santa Clara, CA); Vinu K. Alazath (Santa Clara, CA)
Assignee: Splunk Inc.
G06F11/3089G06F11/3006G06F11/3072
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,135,627
App. No.
17/589,283
Filed
Jan 31, 2022
Granted
Nov 5, 2024
Kind
B1
Examiner
NGUYEN, ANH
Art Unit
2442
USPC
709/224
Abstract

Embodiments described herein are directed to facilitating management of collection agents. In one embodiment, a control request is received at an agent service manager from an agent controller that manages collection agents that collect data. The agent controller and the collection agents operate on a remote computing machine. A desired agent event is identified to be executed in association with a set of collection agent of the collection agents. An indication of the desired agent event is provided to the agent controller for execution of the desired agent event in association with each collection agent of the set of collection agents.

Claims (46)

1. A computer-implemented method, comprising:

receiving, at an agent service manager, a control request from an agent controller that manages collection agents that collect data, wherein the agent controller and the collection agents operate on a remote computing machine, the control request including a class level indicating a class of collection agents that collect data;

identifying a desired agent event to be executed in association with a set of collection agents of the collection agents managed by the agent controller, the desired agent event comprising an upgrade event, a downgrade event, or a certificate event to be executed in association with the set of collection agents, wherein the desired agent event to be executed is identified based on the class level indicated in the control request; and

providing an indication of the desired agent event to the agent controller for execution of the desired agent event in association with each collection agent of the set of collection agents.

2. The method of claim 1 , wherein the control request comprises a poll to request any new information to provide to the agent controller.

3. The method of claim 1 , wherein the control request is communicated from the agent controller based on an expiration of a time duration.

4. The method of claim 1 , wherein the control request is received at a gateway of the agent service manager via the Internet.

5. The method of claim 1 , wherein the agent service manager includes a registration manager to manage registration of the agent controller and the collection agents with the agent service manager.

6. The method of claim 1 , wherein the agent service manager includes:

a configuration manager to manage configurations associated with the collection agents;

a certificate manager to manage certificate updates associated with the collection agents;

a metadata manager to manage metadata associated with the collection agents; and

a deployment manager to manage deployments, upgrades, and downgrades associated with the collection agents.

7. The method of claim 1 , wherein the agent service manager includes an agent health service, wherein the agent health service obtains health data associated with the collection agents communicated from the agent controller and provides the health data to a data store or a data recipient.

8. The method of claim 1 , wherein the agent service manager includes an agent health service configured to:

obtain, from the agent controller, health data associated with the collection agents;

provide a most recent set of health data to a memory cache;

provide a less recent set of health data to a persistent data store; and

upon receiving a request to view health data, obtain appropriate health data from the memory cache and/or the persistent data store and provide the appropriate health data to a user device providing the request to view health data.

9. The method of claim 1 , wherein the desired agent event to be executed in association with the set of collection agents is input via a user device.

10. The method of claim 1 , wherein the desired agent event to be executed in association with the set of collection agents is identified by communicating with a set of managers operating at the agent service manager.

11. The method of claim 1 , wherein the desired agent event to be executed in association with the set of collection agents is identified by accessing a data store to identify an agent event indicator associated with the set of collection agents.

12. The method of claim 1 , wherein the desired agent event to be executed in association with the set of collection agents is identified by:

accessing a memory cache to determine that an agent event indicator is applicable to the class level communicated in the control request;

based on the determination that the agent event indicator is applicable to the class level communicated in the control request, accessing a persistent data store to identify the desired agent event to be executed in association with the set of collection agents.

13. The method of claim 1 further comprising identifying the set of collection agents for which the desired agent event is to be executed.

14. The method of claim 1 further comprising:

receiving a directive response from the agent controller, the directive response including data associated with the execution of the desired agent event;

storing the data associated with the execution of the desired agent event;

in response to a request from a user device to view information associated with a particular type of agent events, accessing the stored data to provide data associated with the execution of the desired agent event.

15. A computing device, comprising:

a processor; and

a non-transitory computer-readable medium having stored thereon instructions that, when executed by the processor, cause the processor to perform operations including:

receiving, at an agent service manager, a control request from an agent controller that manages collection agents that collect data, wherein the agent controller and the collection agents operate on a remote computing machine, the control request including a class level indicating a class of collection agents that collect data;

identifying a desired agent event to be executed in association with a set of collection agents of the collection agents managed by the agent controller, the desired agent event comprising an upgrade event, a downgrade event, or a certificate event to be executed in association with the set of collection agents, wherein the desired agent event to be executed is identified based on the class level indicated in the control request; and

providing an indication of the desired agent event to the agent controller for execution of the desired agent event in association with each collection agent of the set of collection agents.

16. The computing device of claim 15 , wherein the agent service manager includes an agent health service configured to:

obtain, from the agent controller, health data associated with the collection agents;

provide a most recent set of health data to a memory cache;

provide a less recent set of health data to a persistent data store; and

upon receiving a request to view health data, obtain appropriate health data from the memory cache and/or the persistent data store and provide the appropriate health data to a user device providing the request to view health data.

17. The method of claim 1 , wherein the desired agent event to be executed in association with the set of collection agents is input via a user device.

18. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processor to perform operations including:

receiving, at an agent service manager, a control request from an agent controller that manages collection agents that collect data, wherein the agent controller and the collection agents operate on a remote computing machine, the control request including a class level indicating a class of collection agents that collect data;

identifying a desired agent event to be executed in association with a set of collection agents of the collection agents managed by the agent controller, the desired agent event comprising an upgrade event, a downgrade event, or a certificate event to be executed in association with the set of collection agents, wherein the desired agent event to be executed is identified based on the class level indicated in the control request; and

providing an indication of the desired agent event to the agent controller for execution of the desired agent event in association with each collection agent of the set of collection agents.

Assignments (4)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
CHANGE OF NAME Recorded Jan 6, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 069825/0782 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 4, 2022
From: SHARMA, DINESH DUTT; PHALAK, CHAITANYA SUNIL; BAEK, KYUNG ROCK; ALAZATH, VINU K.
To: SPLUNK INC.
Reel/Frame 059489/0747 →
Cited By (3)
US 12,443,427 US 12,470,565 US 12,572,376