发明名称 Processing a system search request including external data sources and mixed modes
摘要 A search request received at a computer of a search support system is processed by analyzing the received search request to identify request parameters and connecting to a system index of the search support system that is referenced in the request parameters. An external result provider (ERP) process is initiated that establishes communication between the search support system and a data source external to the search support system, for a virtual index referenced in the request parameters. Thus, the ERP process provides an interface between the search support system and external data sources, such as by third parties. The ERP process can operate in a streaming mode (providing real-time search results with minimal processing) and/or a reporting mode (providing results with a greater delay and processing extent) and can switch between modes. The search request results are received from the connected system indexes and the referenced virtual indexes.
申请公布号 US8793225(B1) 申请公布日期 2014.07.29
申请号 US201313886692 申请日期 2013.05.03
申请人 Splunk Inc. 发明人 Bitincka Ledion;Zhang Steve;Stojanovski Igor;Sorkin Stephen
分类号 G06F17/30 主分类号 G06F17/30
代理机构 Hickman Palermo Truong Becker Bingham Wong LLP 代理人 Hickman Palermo Truong Becker Bingham Wong LLP ;Wong Kirk D.
主权项 1. A method of processing a search request received at a computer of a search support system, the method comprising: in response to receiving the search request, a search head initiating an external result provider (ERP) process that enables retrieval of data responsive to the request from an external data system corresponding to a virtual index, wherein the ERP process is configured to operate in a streaming mode and a reporting mode; based at least partially on first data received from the ERP process while the ERP process is operating in the streaming mode, the search head providing to a client interim results for the request; and subsequent to providing the client with the interim results, the search head then providing the client with results for the request that are based at least partially on second data received from the ERP process while the ERP process is operating in the reporting mode.
地址 San Francisco CA US