Enabling role-based operations to be performed on machine data in a machine environment

Patent metadata

Field	Value
Publication number	US-11258803-B2
Application number	US-202016796825-A
Country	US
Kind code	B2
Filing date	Feb 20, 2020
Priority date	Aug 12, 2011
Publication date	Feb 22, 2022
Grant date	Feb 22, 2022

Abstract

Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving a request from a user to interact with an indexed data store associated with a project, the indexed data store storing a set of events for the project, wherein access to the indexed data store is controlled based on one or more roles assigned to one or more abstract users, and wherein at least some events in the set of events comprise a portion of raw machine data associated with a timestamp;
associating an abstract user from the one or more abstract users with the user, wherein the abstract user is assigned a role from the one or more roles, and, wherein the role is associated with a set of permissions for interacting with the indexed data store;
determining, based on the set of permissions associated with the role, a set of operations that the user has permission to perform on the set of events stored in the indexed data store; and
allowing the user to perform an operation included in the set of operations.

2. The method of claim 1 , wherein the role indicates that the user has permission to access a particular subset of the set of events included in the indexed data store.

3. The method of claim 1 , wherein the role indicates that the user has permission to search the set of events included in the indexed data store.

4. The method of claim 1 , wherein the role indicates that the user has permission to store data in the indexed data store.

5. The method of claim 1 , wherein the user inherits the role from the abstract user.

6. The method of claim 1 , wherein the user performs the operation via an application executing in a computing environment.

7. The method of claim 1 , wherein the user performs the operation via an application executing in a computing environment, and wherein the set of permissions allows the user to interact with the application.

8. The method of claim 1 , wherein each portion of raw machine data reflects activity in an information technology environment.

9. The method of claim 1 , wherein each portion raw machine data is produced by a component in an information technology environment.

10. One or more non-transitory computer-readable storage media including instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of:
receiving a request from a user to interact with an indexed data store associated with a project, the indexed data store storing a set of events for the project, wherein access to the indexed data store is controlled based on one or more roles assigned to one or more abstract users, and wherein at least some events in the set of events comprise a portion of raw machine data associated with a timestamp;
associating an abstract user from the one or more abstract users with the user, wherein the abstract user is assigned a role from the one or more roles, and, wherein the role is associated with a set of permissions for interacting with the indexed data store;
determining, based on the set of permissions associated with the role, a set of operations that the user has permission to perform on the set of events stored in the indexed data store; and
allowing the user to perform an operation included in the set of operations.

11. The one or more non-transitory computer-readable storage media of claim 10 , wherein the role indicates that the user has permission to access a particular subset of the set of events included in the indexed data store.

12. The one or more non-transitory computer-readable storage media of claim 10 , wherein the role indicates that the user has permission to search the set of events included in the indexed data store.

13. The one or more non-transitory computer-readable storage media of claim 10 , wherein the role indicates that the user has permission to store data in the indexed data store.

14. The one or more non-transitory computer-readable storage media of claim 10 , wherein the user inherits the role from the abstract user.

15. The one or more non-transitory computer-readable storage media of claim 10 , wherein the user performs the operation via an application executing in a computing environment.

16. The one or more non-transitory computer-readable storage media of claim 10 , wherein the user performs the operation via an application executing in a computing environment, and wherein the set of permissions allows the user to interact with the application.

17. The one or more non-transitory computer-readable storage media of claim 10 , wherein each portion of raw machine data reflects activity in an information technology environment.

18. The one or more non-transitory computer-readable storage media of claim 10 , wherein each portion raw machine data is produced by a component in an information technology environment.

19. A computer system, comprising:
a memory that includes instructions; and
a processor coupled to the memory and, when executing the instructions, is configured to perform the steps of:
receiving a request from a user to interact with an indexed data store associated with a project, the indexed data store storing a set of events for the project, wherein access to the indexed data store is controlled based on one or more roles assigned to one or more abstract users, and wherein at least some events in the set of events comprise a portion of raw machine data associated with a timestamp;

associating an abstract user from the one or more abstract users with the user, wherein the abstract user is assigned a role from the one or more roles, and, wherein the role is associated with a set of permissions for interacting with the indexed data store;
determining, based on the set of permissions associated with the role, a set of operations that the user has permission to perform on the set of events stored in the indexed data store; and
allowing the user to perform an operation included in the set of operations.

20. The computer system of claim 19 , wherein the role indicates that the user has permission to access a particular subset of the set of events included in the indexed data store.

Assignees

• Splunk Inc

Inventors

• Das Robin Kumar
• Ago Ledio
• Shanaghy Declan Gerard
• Gupta Gaurav

Classifications

• G06F16/986 Primary

  Document structures and storage, e.g. HTML extensions · CPC title

• G06F16/13

  File access structures, e.g. distributed indices (arrangements of input from, or output to, record carriers G06F3/06) · CPC title

• H04L12/1435

  volume-based · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title

• G06F16/2228

  Indexing structures · CPC title