Systems and methods for updating a status indication in a system providing dynamic indexer discovery

1. A method comprising:

receiving a status message from an indexer associated with a set of indexers, wherein each indexer in the set of indexers indexes events of raw machine generated data that are received from a plurality of data collectors, and wherein an index manager tracks a respective status for each indexer in the set of indexers;

updating a status indication associated with the indexer based on the status message;

determining a time duration between a receipt of a prior status message and the status message; and

in response to determining that the time duration exceeds a predetermined threshold, removing the indexer from the set of indexers that index events of raw machine generated data from the plurality of data collectors.

2. The method of claim 1 , wherein the events of raw machine-generated data are each associated with a respective time stamp.

3. The method of claim 1 , wherein the status indication is selected from a group including a status list, a status directory and a status table.

4. The method of claim 1 , wherein the status message is received by the index manager at a pre-determined time.

5. The method of claim 1 , further comprising:

in response to determining that the time duration does not exceed the predetermined threshold, receiving a subsequent status message from the indexer at a periodic time interval after the status message.

6. The method of claim 1 , further comprising:

in response to determining that the time duration does not exceed the predetermined threshold, waiting to receive a subsequent status message from the indexer.

7. The method of claim 1 , wherein the updating comprises:

comparing one or more performance metrics associated with the indexer; and

performing the updating based on a result of the comparing.

8. The method of claim 1 , wherein the status indication comprises a link to the status indication maintained at a remote site.

9. The method of claim 1 , wherein the status indication comprises a read-only instantiation of the status indication.

10. The method of claim 1 , wherein the status indication is stored in a datastore.

11. The method of claim 1 , wherein the predetermined threshold is configurable.

12. The method of claim 1 , further comprising:

in response to determining that the time duration does not exceed the predetermined threshold, receiving a subsequent status message from the indexer at a periodic time interval after the status message, wherein the periodic time interval is configured to be dynamically adjustable by the index manager.

13. The method of claim 1 , wherein the status message may include a performance metric associated with the indexer, wherein the performance metric is related to one or more of: a disk capacity, a storage capacity and a processing capacity.

14. A non-transitory computer-readable medium storing computer-executable instructions which, when executed by a processor, cause the processor to perform operations comprising:

receiving a status message from an indexer associated with a set of indexers, wherein each indexer in the set of indexers indexes events of raw machine generated data that are received from a plurality of data collectors, and wherein the index manager tracks a respective status for each indexer in the set of indexers;

updating a status indication associated with the indexer based on the status message;

determining a time duration between a receipt of a prior status message and the status message; and

in response to determining that the time duration exceeds a predetermined threshold, removing the indexer from the set of indexers that index events of raw machine generated data from the plurality of data collectors.

15. The non-transitory computer-readable medium of claim 14 , wherein the events of raw machine-generated data are each associated with a respective time stamp.

16. The non-transitory computer-readable medium of claim 14 , wherein the status indication is selected from a group including a status list, a status directory and a status table.

17. The non-transitory computer-readable medium of claim 14 , wherein the status message is received by an index manager at a pre-determined time.

18. The non-transitory computer-readable medium of claim 14 , wherein the operations further comprise: in response to determining that the time duration does not exceed the predetermined threshold, receiving a subsequent status message from the indexer at a periodic time interval after the status message.

19. The non-transitory computer-readable medium of claim 14 , wherein the operations further comprise: in response to determining that the time duration does not exceed the predetermined threshold, waiting to receive a subsequent status message from the indexer.

20. A system comprising:

one or more processors; and

one or more memories comprising program instructions stored thereon that are executable by the one or more processors to cause:

receiving a status message from an indexer associated with a set of indexers, wherein each indexer in the set of indexers indexes events of raw machine generated data that are received from a plurality of data collectors, and wherein the index manager tracks a respective status for each indexer in the set of indexers;

updating a status indication associated with the indexer based on the status message;

determining a time duration between a receipt of a prior status message and the status message; and

in response to determining that the time duration exceeds a predetermined threshold, removing the indexer from the set of indexers that index events of raw machine generated data from the plurality of data collectors.