IP Library › Granted Patent US 11,636,160
Granted Patent B2
US 11,636,160 · App. 17/647,324 · Granted Apr 25, 2023

Related content identification for different types of machine-generated data

Inventors: Amy Katherine Hunnel Bianchi (Portland, OR); Sonya Chang (San Mateo, CA); Park Kittipatkul (Foster City, CA); Patrick Lin (Palo Alto, CA); Sarah Matarese (San Jose, CA); Clark Mullen (San Mateo, CA); Alexandra Victoria Nuttbrown (Los Altos, CA); Danika Patrick (San Francisco, CA); Justin Smith (San Francisco, CA); Harsh Vardhan Vashistha (San Jose, CA)
Assignee: Splunk Inc.
G06F16/904G06F11/323G06F16/9035G06F16/9038
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,636,160
App. No.
17/647,324
Filed
Jan 6, 2022
Granted
Apr 25, 2023
Kind
B2
Examiner
JACOB, AJITH
Art Unit
2161
USPC
707/705
Abstract

A system can display content generated from one type of machine-generated data to a user via a graphical user interface. Based on an interaction with the machine-generated data, the system can determine an entity identifier associated with the machine-generated data and determine an entity type for the entity identifier. The system can map the entity type to one or more content generators associated with the entity type and communicate the entity identifier to the identified content generators. The content generators can determine if they have content associated with the machine-generated data. The system can generate and display a link to the related content via a graphical user interface.

Claims (61)

1. A method, comprising:

identifying an entity associated with machine-generated data based on a determined interaction with a first display object that corresponds to the machine-generated data, wherein the first display object is generated by a first content generator;

determining an entity type for the entity;

identifying a second content generator based on the determined entity type for the entity, wherein the second content generator is configured to generate content associated with the entity type;

identifying first content of the content generated by the second content generator, wherein the first content is associated with the machine-generated data;

generating a second display object that includes a link to the first content associated with the machine-generated data; and

causing display of the second display object.

2. The method of claim 1 , wherein the determined interaction includes a selection of the first display object on a graphical user interface.

3. The method of claim 1 , wherein the entity is an isolated execution environment executing in a shared computing resource environment, and wherein the entity type for the entity is determined to be an isolated execution environment type.

4. The method of claim 1 , wherein the entity type for the entity is determined to be at least one of: a software container, pod, service, trace, or span.

5. The method of claim 1 , wherein the machine-generated data is first machine-generated data of a first type, and wherein the first content associated with the first machine-generated data is generated based on second machine-generated data of a second type.

6. The method of claim 1 , wherein the machine-generated data is first machine-generated data, wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data, and wherein the first content is generated by the second content generator using the second machine-generated data.

7. The method of claim 1 , wherein the machine-generated data is first machine-generated data,

wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data,

wherein the first content is generated by the second content generator using the second machine-generated data,

wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and

wherein the entity identifier in the first machine-generated data is extracted from the raw machine data using a regular expression rule.

8. The method of claim 1 , wherein the machine-generated data is first machine-generated data,

wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data,

wherein the first content is generated by the second content generator using the second machine-generated data,

wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and

wherein the entity identifier in the first machine-generated data is determined using metadata associated with the raw machine data.

9. The method of claim 1 , wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and wherein the second content generator is a metrics content generator configured to generate the first content using metrics data.

10. The method of claim 1 , wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and wherein the second content generator is a trace content generator configured to generate the first content using trace data.

11. The method of claim 1 , wherein the link is a first link, the method further comprising:

identifying a third content generator based on the determined entity type for the entity, wherein the third content generator is configured to generate data associated with the entity type;

identifying second content generated by the third content generator, wherein the second content is associated with the machine-generated data;

generating a third display object that includes a second link to the second content associated with the machine-generated data; and

causing display of the third display object.

12. The method of claim 1 , wherein the link is a first link, the method further comprising:

identifying a third content generator based on the determined entity type for the entity, wherein the third content generator is configured to generate content associated with the entity type;

identifying second content of the content generated by the third content generator, wherein the second content is associated with the machine-generated data;

generating a third display object that includes a second link to the second content associated with the machine-generated data; and

causing display of the third display object,

wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data,

wherein the second content generator is a trace content generator configured to generate the first content using trace data, and

wherein the third content generator is a metrics content generator configured to generate the second content using metrics data.

13. The method of claim 1 , wherein the link is a first link, the method further comprising:

identifying second content generated by the second content generator, wherein the second content is associated with the machine-generated data;

generating a third display object that includes a second link to the second content associated with the machine-generated data; and

causing display of the third display object.

14. The method of claim 1 , wherein the first content generator is a trace content generator configured to generate content using trace data for display with the first display object, and wherein the second content generator is a metrics content generator configured to generate the first content using metrics data.

15. The method of claim 1 , wherein the first content generator is a trace content generator configured to generate content using trace data for display with the first display object, and wherein the second content generator is a log content generator configured to generate the first content using log data.

16. The method of claim 1 , wherein the first content generator is a metrics content generator configured to generate content using metric data for display with the first display object, and wherein the second content generator is a trace content generator configured to generate the first content using trace data or a log content generator configured to generate the first content using log data.

17. Non-transitory computer-readable media having computer-executable instructions that, when executed by a computer system, cause the computer system to:

identify an entity associated with machine-generated data based on a determined interaction with a first display object that corresponds to the machine-generated data, wherein the first display object is generated by a first content generator;

determine an entity type for the entity;

identify a second content generator based on the determined entity type for the entity, wherein the second content generator is configured to generate content associated with the entity type;

identify first content of the content generated by the second content generator, wherein the first content is associated with the machine-generated data;

generate a second display object that includes a link to the first content associated with the machine-generated data; and

cause display of the second display object.

18. The non-transitory computer-readable media of claim 17 , wherein the machine-generated data is first machine-generated data, wherein to identify the first content, the computer-executable instructions further cause the computer system to identify, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data, and wherein the first content is generated by the second content generator using the second machine-generated data.

19. A computer system, comprising:

one or more processing devices communicatively coupled with memory, the one or more processing devices configured to:

identify an entity associated with machine-generated data based on a determined interaction with a first display object that corresponds to the machine-generated data, wherein the first display object is generated by a first content generator;

determine an entity type for the entity;

identify a second content generator based on the determined entity type for the entity, wherein the second content generator is configured to generate content associated with the entity type;

identify first content of the content generated by the second content generator, wherein the first content is associated with the machine-generated data;

generate a second display object that includes a link to the first content associated with the machine-generated data; and

cause display of the second display object.

20. The computer system of claim 19 , wherein the machine-generated data is first machine-generated data, wherein to identify the first content, the one or more processing devices are configured to identify, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data, and wherein the first content is generated by the second content generator using the second machine-generated data.

Assignments (3)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 20, 2022
From: BIANCHI, AMY KATHERINE HUNNEL; CHANG, SONYA; KITTIPATKUL, PARK; LIN, PATRICK; MATARESE, SARAH; MULLEN, CLARK; NUTTBROWN, ALEXANDRA VICTORIA; PATRICK, DANIKA; SMITH, JUSTIN; VASHISTHA, HARSH VARDHAN
To: SPLUNK INC.
Reel/Frame 058715/0386 →
Continuity (2)
Continuation 17073024 · Oct 16, 2020
Related Publication 20220277042A1 · Sep 1, 2022
Cited By (1)
US 12,461,987