Identification of systems with anomalous behaviour using events derived from machine data produced by those systems

US10318553B2 · kind B2 · utility

Assignee

• Splunk Inc. · US

Inventors

• Michael Joseph Baum · Ross, US
• R. David Carasso · San Rafael, US
• Robin Kumar Das · Redwood City, US
• Bradley Hall · Palo Alto, US
• Brian Phillip Murphy · London, GB
• Stephen Phillip Sorkin · San Francisco, US
• Andre David Stechert · Brooklyn, US
• Erik M. Swan · San Francisco, US
• Rory Greene · San Francisco, US
• Nicholas Christian Mealy · Oakland, US
• Christina Frances Regina Noren · San Francisco, US

Key dates

• Filing date: Jan 31, 2015
• Grant date: Jun 11, 2019
• Expiry date: Jan 31, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F16/3331
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.