IP Library Granted Patent US 12,003,572
Granted Patent B1
US 12,003,572 · App. 17/804,260 · Granted Jun 4, 2024

Two-way replication of search node configuration files using a mediator node

Inventors: Ledion Bitincka (San Francisco, CA); Vishal Patel (San Francisco, CA); Geoffrey Hendrey (San Francisco, CA); Eric Woo (San Francisco, CA)
Assignee: Splunk Inc.
H04L67/06H04L41/0813H04L41/0843H04L41/0856H04L67/34H04L69/329
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,003,572
App. No.
17/804,260
Granted
Jun 4, 2024
Kind
B1
Abstract

In a computer-implemented method for configuring a distributed computer system comprising a plurality of nodes of a plurality of node classes, configuration files for a plurality of nodes of each of the plurality of node classes are stored in a central repository. The configuration files include information representing a desired system state of the distributed computer system, and the distributed computer system operates to keep an actual system state of the distributed computer system consistent with the desired system state. The plurality of node classes includes forwarder nodes for receiving data from an input source, indexer nodes for indexing the data, and search head nodes for searching the data. Responsive to receiving changes to the configuration files, the changes are propagated to nodes of the plurality of nodes impacted by the changes based on a node class of the nodes impacted by the changes.

Claims (28)

1. A computer-implemented method comprising:

storing, in a central repository on a management node, configuration files for a plurality of node classes of a data intake and query system; and

propagating changes, to one of the configuration files for one of the node classes comprising search nodes responsible for performing search operations on data collected by the data intake and query system, using two-way replication between the management node and the search nodes via a mediator node of the search nodes.

2. The computer-implemented method of claim 1 , further comprising propagating other changes, to another one of the configuration files for another one of the node classes, using one-way replication from the management node to nodes of the other node class via another mediator node of the other node class.

3. The computer-implemented method of claim 1 , wherein the mediator node is in a cluster of the search nodes, wherein the mediator node includes a search head configuration repository that manages, for each of the search nodes in the cluster, configuration checkpoints and deltas from the configuration checkpoints.

4. The computer-implemented method of claim 1 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by transmitting deltas from configuration checkpoints.

5. The computer-implemented method of claim 1 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by pulling a configuration checkpoint from the mediator node, merging local changes to the local configuration files with the configuration checkpoint to generate merged deltas, and pushing the merged deltas to the mediator node.

6. The computer-implemented method of claim 1 , wherein using the two-way replication comprises the search nodes pulling a configuration checkpoint from the mediator node, overwriting a local configuration file using the configuration checkpoint, and subsequently pushing to the mediator node and pulling from the mediator node deltas from the configuration checkpoint.

7. The computer-implemented method of claim 1 , wherein the mediator node is in a cluster of the search nodes, the computer-implemented method further comprising, upon partitioning the cluster into a majority partition and a minority partition, buffering deltas from configuration checkpoints for a set of the search nodes in the minority partition until the minority partition is healed.

8. The computer-implemented method of claim 1 , wherein the mediator node is in a cluster of the search nodes, wherein the search nodes are configured to pull snapshots of a search head configuration repository from the mediator node, the computer-implemented method further comprising, upon partitioning the cluster into a majority partition and a minority partition, configuring one of the search nodes in the minority partition as a new mediator node for the minority partition using one of the snapshots of the search head configuration repository for the new mediator node.

9. One or more non-transitory computer storage media containing instructions which when executed on one or more data processors, cause the one or more data processors to perform operations comprising:

storing, in a central repository on a management node, configuration files for a plurality of node classes of a data intake and query system; and

propagating changes, to one of the configuration files for one of the node classes comprising search nodes responsible for performing search operations on data collected by the data intake and query system, using two-way replication between the management node and the search nodes via a mediator node of the search nodes.

10. The one or more non-transitory computer storage media of claim 9 , the operations further comprising propagating other changes, to another one of the configuration files for another one of the node classes, using one-way replication from the management node to nodes of the other node class via another mediator node of the other node class.

11. The one or more non-transitory computer storage media of claim 9 , wherein the mediator node is in a cluster of the search nodes, wherein the mediator node include s a search head configuration repository configured to manage, for each of the search nodes in the cluster, configuration checkpoints and deltas from the configuration checkpoints.

12. The one or more non-transitory computer storage media of claim 9 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by transmitting deltas from configuration checkpoints.

13. The one or more non-transitory computer storage media of claim 9 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by pulling a configuration checkpoint from the mediator node, merging local changes to the local configuration files with the configuration checkpoint to generate merged deltas, and pushing the merged deltas to the mediator node.

14. The one or more non-transitory computer storage media of claim 9 , wherein using the two-way replication comprises the search nodes pulling a configuration checkpoint from the mediator node, overwriting a local configuration file using the configuration checkpoint, and subsequently pushing to the mediator node and pulling from the mediator node deltas from the configuration checkpoint.

15. The one or more non-transitory computer storage media of claim 9 , wherein the mediator node is in a cluster of the search nodes, the operations further comprising, upon partitioning the cluster into a majority partition and a minority partition, buffering deltas from configuration checkpoints for a set of the search nodes in the minority partition until the minority partition is healed.

16. The one or more non-transitory computer storage media of claim 9 , wherein the mediator node is in a cluster of the search nodes, wherein the search nodes are configured to pull snapshots of a search head configuration repository from the mediator node, the operations further comprising, upon partitioning the cluster into a majority partition and a minority partition, configuring one of the search nodes in the minority partition as a new mediator node for the minority partition using one of the snapshots of the search head configuration repository for the new mediator node.

17. A system comprising:

one or more data processors; and

one or more non-transitory computer storage media containing instructions which when executed on the one or more data processors, cause the one or more processors to perform operations comprising:

storing, in a central repository on a management node, configuration files for a plurality of node classes of a data intake and query system; and

propagating changes, to one of the configuration files for one of the node classes comprising search nodes responsible for performing search operations on data collected by the data intake and query system, using two-way replication between the management node and the search nodes via a mediator node of the search nodes.

18. The system of claim 17 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by transmitting deltas from configuration checkpoints.

19. The system of claim 17 , wherein the search nodes are configured to asynchronously replicate local configuration files to the mediator node by pulling a configuration checkpoint from the mediator node, merging local changes to the local configuration files with the configuration checkpoint to generate merged deltas, and pushing the merged deltas to the mediator node.

20. The system of claim 17 , wherein using the two-way replication comprises the search nodes pulling a configuration checkpoint from the mediator node, overwriting a local configuration file using the configuration checkpoint, and subsequently pushing to the mediator node and pulling from the mediator node deltas from the configuration checkpoint.

Assignments (4)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
CHANGE OF NAME Recorded Jan 6, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 069825/0782 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 26, 2022
From: BITINCKA, LEDION; PATEL, VISHAL; HENDREY, GEOFFREY; WOO, ERIC
To: SPLUNK INC.
Reel/Frame 060032/0175 →
Continuity (3)
Continuation 17010399 · Sep 2, 2020
Continuation 16202990 · Nov 28, 2018
Continuation 15143472 · Apr 29, 2016