IP Library Granted Patent US 11,831,521
Granted Patent B1
US 11,831,521 · App. 17/587,740 · Granted Nov 28, 2023

Entity lifecycle management in service monitoring system

Inventors: Jeetendra Shashikant Dhake (Dublin, CA); Ankur Ashok Kath (San Francisco, CA); Ayyappa Muthusami (Fremont, CA); Jeffrey Wen-Young Shih (San Jose, CA); Ian Edward Torbett (Pleasanton, CA)
Assignee: Splunk Inc.
H04L41/5025H04L41/0823H04L41/0894H04L41/22H04L41/5009
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,831,521
App. No.
17/587,740
Filed
Jan 28, 2022
Granted
Nov 28, 2023
Kind
B1
Art Unit
2441
USPC
709/224
Abstract

An example method of entity lifecycle management in a service monitoring system includes: receiving, by a software application of a service monitoring system, a policy definition specifying an entity lifecycle management policy, wherein the entity lifecycle management policy defines management rules for a plurality of entities in the network environment, wherein each entity of the plurality of entities is represented by one of: a device, an application, a service, or a user account; identifying, by applying the entity lifecycle management policy to a plurality of active entities, one or more candidate entities for retirement; retiring at least a subset of the one or more candidate entities; and excluding the retired entities from the plurality of active entities, thus preventing the retired entities from interacting with other components of the service monitoring system.

Claims (51)

1. A method performed by one or more processing devices, the method comprising:

receiving, by a software application of a service monitoring system, a policy definition specifying an entity lifecycle management policy, wherein the entity lifecycle management policy defines management rules for a plurality of entities in a network environment, wherein each entity of the plurality of entities is represented by one of: a device, an application, a service, or a user account;

identifying, by applying the entity lifecycle management policy to a plurality of active entities, one or more candidate entities for retirement;

retiring at least a subset of the one or more candidate entities;

excluding the retired entities from the plurality of active entities, thus preventing the retired entities from interacting with other components of the service monitoring system;

disabling the entity lifecycle management policy; and

removing retirement candidate designations from remaining candidate entities of the one or more candidate entities.

2. The method of claim 1 , further comprising:

deriving a value of a key performance indicator (KPI) reflecting an aspect of performance of the service, wherein the KPI is defined by a search query that derives the value of the KPI from machine data associated with one or more entities of the plurality of active entities.

3. The method of claim 1 , wherein retiring at least the subset of the one or more candidate entities further comprises:

receiving, via a graphical user interface (GUI), identifiers of the one or more candidate entities.

4. The method of claim 1 , further comprising:

suppressing one or more alerts associated with at least one of the retired entities.

5. The method of claim 1 , further comprising:

restoring at least one of the retired entities to an active status.

6. The method of claim 1 , wherein the entity lifecycle management policy comprises an entity retirement rule specifying a period of time during which no data has been received from a candidate entity.

7. The method of claim 1 , wherein the entity lifecycle management policy comprises an entity retirement rule specifying a period of time during which a candidate entity has not been associated with any service.

8. The method of claim 1 , wherein retiring at least a subset of the one or more candidate entities is performed responsive to receiving a user interface command to retire the one or more candidate entities.

9. The method of claim 1 , wherein retiring the subset of the one or more candidate entities is performed automatically upon identifying the one or more candidate entities for retirement.

10. The method of claim 1 , wherein retiring at least the subset of the one or more candidate entities is performed automatically upon applying one or more filtering criteria to the one or more candidate entities.

11. The method of claim 1 , wherein retiring at least the subset of the one or more candidate entities is performed automatically upon applying one or more filtering criteria to the one or more candidate entities, wherein the one or more filtering criteria specify a time window during which the subset of candidate entities have been identified for retirement.

12. The method of claim 1 , wherein identifying at least a subset of the one or more candidate entities as retired entities further comprises:

receiving, via a user interface, one or more filtering criteria; and

applying the one or more filtering criteria to the one or more candidate entities to identify the subset of the one or more candidate entities.

13. The method of claim 1 , wherein identifying at least a subset of the one or more candidate entities as retired entities further comprises:

receiving, via a user interface, one or more filtering criteria; and

applying the one or more filtering criteria to the one or more candidate entities to identify the subset of the one or more candidate entities, wherein the one or more filtering criteria specify a time window during which the subset of candidate entities have been identified for retirement.

14. The method of claim 1 , further comprising:

permanently deleting definitions of the retired entities.

15. The method of claim 1 , wherein applying the entity lifecycle management policy is performed based on a schedule associated with the entity lifecycle management policy.

16. The method of claim 1 , further comprising:

permanently deleting the entity lifecycle management policy.

17. The method of claim 1 , wherein applying the entity lifecycle management policy to the set of entities further comprises:

translating the entity lifecycle management policy to a set of search commands; and

executing the set of search commands based on a schedule associated with the entity lifecycle management policy.

18. A system, comprising:

a memory; and

one or more processing devices coupled to the memory, the one or more processing devices to:

receive, by a software application of a service monitoring system, a policy definition specifying an entity lifecycle management policy, wherein the entity lifecycle management policy defines management rules for a plurality of entities in a network environment, wherein each entity of the plurality of entities is represented by one of: a device, an application, a service, or a user account;

identify, by applying the entity lifecycle management policy to a plurality of active entities, one or more candidate entities for retirement;

retire at least a subset of the one or more candidate entities;

exclude the retired entities from the plurality of active entities, thus preventing the retired entities from interacting with other components of the service monitoring system;

disable the entity lifecycle management policy; and

remove retirement candidate designations from remaining candidate entities of the one or more candidate entities.

19. A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a computing system, cause the computing system to:

receive, by a software application of a service monitoring system, a policy definition specifying an entity lifecycle management policy, wherein the entity lifecycle management policy defines management rules for a plurality of entities in a network environment, wherein each entity of the plurality of entities is represented by one of: a device, an application, a service, or a user account;

identify, by applying the entity lifecycle management policy to a plurality of active entities, one or more candidate entities for retirement;

identify, as retired entities, at least a subset of the one or more candidate entities;

exclude the retired entities from the plurality of active entities, thus preventing the retired entities from interacting with other components of the service monitoring system,

disable the entity lifecycle management policy; and

remove retirement candidate designations from remaining candidate entities of the one or more candidate entities.

Assignments (3)
CHANGE OF NAME Recorded Jul 22, 2025
From: SPLUNK INC.
To: SPLUNK LLC
Reel/Frame 072170/0599 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 22, 2025
From: SPLUNK LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 072173/0058 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 24, 2022
From: DHAKE, JEETENDRA SHASHIKANT; KATH, ANKUR ASHOK; MUTHUSAMI, AYYAPPA; SHIH, JEFFREY WEN-YOUNG; TORBETT, IAN EDWARD
To: SPLUNK INC.
Reel/Frame 059096/0981 →
Continuity (1)
Continuation In Part 17515104 · Oct 29, 2021
Cited By (2)
US 12,259,856 US 12,563,025