发明名称 SEARCHING RAW DATA FROM AN EXTERNAL DATA SYSTEM USING A DUAL MODE SEARCH SYSTEM
摘要 A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.
申请公布号 US2017046433(A1) 申请公布日期 2017.02.16
申请号 US201615339951 申请日期 2016.11.01
申请人 Splunk Inc. 发明人 Bitincka Ledion;Zhang Steve;Stojanovski Igor;Sorkin Stephen
分类号 G06F17/30 主分类号 G06F17/30
代理机构 代理人
主权项 1. A method, comprising: receiving, by a first device, a first search request from a second device; communicating, by the first device, a second search request to an external data system, the search request based at least in part on the first search request; receiving, by the first device, raw data from the external data system obtained from raw data accessible by the external data system, the raw data fulfills at least a portion of the first search request; processing, by the first device, the raw data, as the raw data is being received, responsive to the first search request; while the first device is processing the raw data, streaming at least a portion of the raw data to the second device; wherein the processing the raw data further comprises: creating, by the first device, at least one interim search result from the raw data based on the first search request;sending the at least one interim search result to the second device.
地址 San Francisco CA US