Granted Patent B2

US 12,254,019 · App. 18/160,972 · Granted Mar 18, 2025

Inventors: Vladimir A. Shcherbakov (San Ramon, CA); Stewart Smith (San Francisco, CA); Nicholas Matthew Tankersley (Seattle, WA); Junyu Wang (Berkeley, CA); Peter Wu (San Francisco, CA)

Assignee: SPLUNK Inc.

G06F16/248G06F16/26G06F3/04817G06F3/0482

Abstract

Claims (62)

1. A computer-implemented method, comprising:

obtaining a set of data associated with an isolated execution environment system, wherein the isolated execution environment system comprises a plurality of isolated execution environments, wherein the plurality of isolated execution environments execute on a computing device, and wherein the plurality of isolated execution environments have a first hierarchical relationship with the computing device;

generating, using the plurality of isolated execution environments, log data;

generating, using the set of data, an interactive visualization of a relationship associated with the plurality of isolated execution environments, wherein the interactive visualization includes a first display object representing the computing device and a second display object representing a particular isolated execution environment of the plurality of isolated execution environments;

causing display of the interactive visualization;

in response to a determined interaction with the first display object representing the computing device within the interactive visualization and based at least in part on the first hierarchical relationship:

determining one or more query parameters, and

generating a first query according to the one or more query parameters to obtain a first generated query for retrieving at least a portion of the log data generated by the particular isolated execution environment, wherein in response to each of 1) the determined interaction with the first display object representing the computing device and 2) a determined interaction with the second display object representing the particular isolated execution environment, one or more respective queries are generated for retrieving the same at least a portion of the log data generated by the particular isolated execution environment; and

initiating execution of the first generated query, wherein, based at least in part on initiating execution of the first generated query, the at least a portion of the log data generated by the particular isolated execution environment is retrieved.

2. The computer-implemented method of claim 1 , wherein the second display object representing the particular isolated execution environment is in subordinate relationship to the first display object representing the computing device.

3. The computer-implemented method of claim 1 , wherein one of the first display object representing the computing device or the second display object representing the particular isolated execution environment is:

a nested element of a tree diagram;

an entity representation of an entity relationship diagram; or

a node of a hyperbolic tree diagram.

4. The computer-implemented method of claim 1 , wherein the relationship comprises a second hierarchical relationship.

5. The computer-implemented method of claim 1 , further comprising determining, using the set of data, the relationship.

6. The computer-implemented method of claim 1 , wherein the set of data comprises metadata.

7. The computer-implemented method of claim 1 , wherein the interactive visualization further includes a third display object representing a group associated with the particular isolated execution environment.

8. The computer-implemented method of claim 1 , further comprising:

in response to the determined interaction with the second display object representing the particular isolated execution environment and based at least in part on the second display object representing the particular isolated execution environment, causing generation of one or more queries, wherein the one or more queries comprise a second generated query for retrieving the at least a portion of the log data generated by the particular isolated execution environment, and

initiating execution of the second generated query, wherein, based at least in part on initiating execution of the second generated query, the at least a portion of the log data generated by the particular isolated execution environment is retrieved.

9. The computer-implemented method of claim 1 , wherein the plurality of isolated execution environments execute on a same computing device.

10. The computer-implemented method of claim 1 , wherein the plurality of isolated execution environments are configured to share a compute resource of the computing device during execution.

11. The computer-implemented method of claim 1 , further comprising:

receiving input indicative of a user interaction with the first display object representing the computing device, wherein the determined interaction with the first display object representing the computing device is based on the user interaction; and

causing display of a user interface in response to the input.

12. The computer-implemented method of claim 1 , wherein the isolated execution environment system comprises the computing device.

13. A computing system comprising:

memory; and

one or more processing devices coupled to the memory and configured to:

obtain a set of data associated with an isolated execution environment system, wherein the isolated execution environment system comprises a plurality of isolated execution environments, wherein the plurality of isolated execution environments execute on a computing device, and wherein the plurality of isolated execution environments have a first hierarchical relationship with the computing device;

generate, using the plurality of isolated execution environments, log data;

generate, using the set of data, an interactive visualization of a relationship associated with the plurality of isolated execution environments, wherein the interactive visualization includes a first display object representing the computing device and a second display object representing a particular isolated execution environment of the plurality of isolated execution environments;

cause display of the interactive visualization;

in response to a determined interaction with the first display object representing the computing device within the interactive visualization and based at least in part on the first hierarchical relationships;

determine one or more query parameters, and

generate a first query according to the one or more query parameters to obtain a first generated query for retrieving at least a portion of the log data generated by the particular isolated execution environment, wherein in response to each of 1) the determined interaction with the first display object representing the computing device and 2) a determined interaction with the second display object representing the particular isolated execution environment, one or more respective queries are generated for retrieving the same at least a portion of the log data generated by the particular isolated execution environment; and

initiate execution of the first generated query, wherein, based at least in part on initiating execution of the first generated query, the at least a portion of the log data generated by the particular isolated execution environment is retrieved.

14. The computing system of claim 13 , wherein the plurality of isolated execution environments are configured to share a compute resource of the computing device during execution.

15. The computing system of claim 13 , wherein the one or more processing devices are further configured to:

receive input indicative of a user interaction with the first display object representing the computing device, wherein the determined interaction with the first display object representing the computing device is based on the user interaction; and

cause display of a user interface in response to the input.

16. The computing system of claim 13 , wherein one of the first display object representing the computing device or the second display object representing the particular isolated execution environment is:

a nested element of a tree diagram;

an entity representation of an entity relationship diagram; or

a node of a hyperbolic tree diagram.

17. Non-transitory computer-readable media including computer-executable instructions that, when executed by a computing system, cause the computing system to:

obtain a set of data associated with an isolated execution environment system, wherein the isolated execution environment system comprises a plurality of isolated execution environments, wherein the plurality of isolated execution environments execute on a computing device, and wherein the plurality of isolated execution environments have a first hierarchical relationship with the computing device;

generate, using the plurality of isolated execution environments, log data;

generate, using the set of data, an interactive visualization of a relationship associated with the plurality of isolated execution environments, wherein the interactive visualization includes a first display object representing the computing device and a second display object representing a particular isolated execution environment of the plurality of isolated execution environments;

cause display of the interactive visualization;

in response to a determined interaction with the first display object representing the computing device within the interactive visualization and based at least in part on the first hierarchical relationship;

determine one or more query parameters, and

generate a first query according to the one or more query parameters to obtain a first generated query for retrieving at least a portion of the log data generated by the particular isolated execution environment, wherein in response to each of 1) the determined interaction with the first display object representing the computing device and 2) a determined interaction with the second display object representing the particular isolated execution environment, one or more respective queries are generated for retrieving the same at least a portion of the log data generated by the particular isolated execution environment; and

initiate execution of the first generated query, wherein, based at least in part on initiating execution of the first generated query, the at least a portion of the log data generated by the particular isolated execution environment is retrieved.

18. The non-transitory computer-readable media of claim 17 , wherein the plurality of isolated execution environments are configured to share a compute resource of the computing device during execution.

19. The non-transitory computer-readable media of claim 17 , wherein execution of the computer-executable instructions by the computing system, further causes the computing system to:

receive input indicative of a user interaction with the first display object representing the computing device, wherein the determined interaction with the first display object representing the computing device is based on the user interaction; and cause display of a user interface in response to the input.

20. The non-transitory computer-readable media of claim 17 , wherein one of the first display object representing the computing device or the second display object representing the particular isolated execution environment is:

a nested element of a tree diagram;

an entity representation of an entity relationship diagram; or

a node of a hyperbolic tree diagram.

Assignments (3)

Continuity (3)

References Cited (153)