DETERMINING DUPLICATE ENTITIES IN CONTENT PACKS
A request to load a content pack can be received. A first duplicity check between the content pack and a previously loaded content pack can be performed. A second duplicity check between the content pack and the previously loaded content pack can be performed responsive to a determination that the content pack passed the first duplicity check. The content pack can be loaded responsive to a determination that the content pack passed the second duplicity check.
1 . A non-transitory machine-readable medium having instructions stored thereon which, when executed by a processor, cause the processor to:
receive a request to load a content pack;
perform a first duplicity check between the content pack and a previously loaded content pack;
perform a second duplicity check between the content pack and the previously loaded content pack responsive to a determination that the content pack passed the first duplicity check; and
load the content pack responsive to a determination that the content pack passed the second duplicity check.
2 . The medium of claim 1 , including instructions to not load the content pack responsive to a determination that the content pack failed the first duplicity check.
3 . The medium of claim 1 , wherein the instructions to perform the first duplicity check include instructions to compare:
compare a name of the content pack with a name of the previously loaded content pack;
a version of the content pack with a version of the previously loaded content pack;
an author of the content pack with an author of the previously loaded content pack; and
a namespace of the content pack with a namespace of the previously loaded content pack.
4 . The medium of claim 3 , including instructions to determine that the content pack failed the first duplicity check responsive to a determination that:
the name of the content pack is identical to the name of the previously loaded content pack;
the version of the content pack is identical to the version of the previously loaded content pack;
the author of the content pack is identical to the author of the previously loaded content pack; or
the namespace of the content pack is identical to the namespace of the previously loaded content pack.
5 . The medium of claim 3 , including instructions to determine that the content pack failed the first duplicity check responsive to a determination that:
the name of the content pack is identical to the name of the previously loaded content pack;
the version of the content pack is identical to the version of the previously loaded content pack;
the author of the content pack is identical to the author of the previously loaded content pack; and
the namespace of the content pack is identical to the namespace of the previously loaded content pack.
6 . The medium of claim 1 , including instructions to create a tree structure associated with the content pack for the second duplicity check.
7 . The medium of claim 1 , including instructions to create a tree structure associated with the content pack, wherein the tree structure includes:
a first node corresponding to agents of the content pack;
a second node corresponding to queries of the content pack;
a third node corresponding to alerts of the content pack; and
a fourth node corresponding to extracted fields of the content pack.
8 . The medium of claim 7 , wherein the tree structure includes:
a child node of the first node corresponding to a particular agent of the content pack;
a child node of the second node corresponding to a particular query of the content pack;
a child node of the third node corresponding to a particular alert of the content pack; and
a child node of the fourth node corresponding to a particular extracted field of the content pack.
9 . The medium of claim 1 , wherein the instructions to perform the second duplicity check include instructions to:
create a first tree structure associated with the content pack;
create a second tree structure associated with the previously loaded content pack; and
compare the first tree structure with the second tree structure.
10 . The medium of claim 9 , including instructions to determine that the content pack passed the second duplicity check responsive to a determination that the first tree structure is different than the second tree structure.
11 . A method, comprising:
receiving a request to load a content pack;
performing a first duplicity check between the content pack and a previously loaded content pack;
performing a second duplicity check between the content pack and the previously loaded content pack responsive to determining that the content pack passed the first duplicity check, wherein performing the second duplicity check includes:
creating a first tree structure associated with the content pack;
creating a second tree structure associated with the previously loaded content pack;
comparing the first tree structure with the second tree structure; and
loading the content pack responsive to determining that the first tree structure is different than the second tree structure.
12 . The method of claim 11 , wherein creating the first tree structure includes:
creating a first node corresponding to agents of the content pack;
creating a second node corresponding to queries of the content pack;
creating a third node corresponding to alerts of the content pack; and
creating a fourth node corresponding to extracted fields of the content pack.
13 . The method of claim 12 , wherein creating the second tree structure includes:
creating a fifth node corresponding to agents of the previously loaded content pack;
creating a sixth node corresponding to queries of the previously loaded content pack;
creating a seventh node corresponding to alerts of the previously loaded content pack; and
creating an eighth node corresponding to extracted fields of the previously loaded content pack.
14 . The method of claim 13 , wherein determining that the first tree structure is different than the second tree structure includes determining that:
a child node of the first node is different than a child node of the fifth node;
a child node of the second node is different than a child node of the sixth node;
a child node of the third node is different than a child node of the seventh node; or
a child node of the fourth node is different than a child node of the eighth node.
15 . The method of claim 13 , wherein determining that the first tree structure is different than the second tree structure includes determining that:
a quantity of child nodes of the first node is different than a quantity of child nodes of the fifth node;
a quantity of child nodes of the second node is different than a quantity of child nodes of the sixth node;
a quantity of child nodes of the third node is different than a quantity of child nodes of the seventh node; or
a quantity of child nodes of the fourth node is different than a quantity of child nodes of the eighth node.
16 . A system, comprising:
a request engine configured to receive a request to load a content pack;
a first check engine configured to perform a first duplicity check between the content pack and a previously loaded content pack;
a second check engine configured to perform a second duplicity check between the content pack and the previously loaded content pack responsive to a determination that the content pack passed the first duplicity check; and
a load engine configured to load the content pack responsive to a determination that the content pack passed the second duplicity check.
17 . The system of claim 16 , wherein the content pack is a newly created content pack.
18 . The system of claim 16 , wherein the content pack is a customized content pack.
19 . The system of claim 16 , wherein the content pack is associated with a migration from a first log analytics solution to a second log analytics solution.
20 . The system of claim 16 , including a recommendation engine configured to provide a recommendation responsive to a determination that the content pack failed the second duplicity check.