Workflows for configuring the ingestion of user data from a service provider network into a data intake and query system

Patent metadata

Field	Value
Publication number	US-11522812-B1
Application number	US-202117162945-A
Country	US
Kind code	B1
Filing date	Jan 29, 2021
Priority date	Oct 30, 2020
Publication date	Dec 6, 2022
Grant date	Dec 6, 2022

Abstract

Techniques are described for providing a cloud data collector (CDC) application for managing the generation of infrastructure templates. The CDC application provides graphical user interfaces that enable a user to provide inputs indicating configurations of data to be ingested by the data intake and query system, each configuration including one or more user accounts, in addition to data sources and regions associated with data sources. Using the configurations provided as input to the CDC application, the CDC application generates an infrastructure template that can be used to configure the service provider network to provide the requested security data to the data intake and query system.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving, by a data intake and query system, input specifying a set of user accounts of a service provider network and a set of services of the service provider network, wherein each service of the set of services manages data associated with each account of the set of user accounts;
generating, based on the input, a template used to create computing resources at the service provider network, wherein the computing resources are to be used to send the data associated with each account of the set of user accounts to the data intake and query system;
performing an authentication process with the service provider network using user credentials specified in the input; and
executing the template at the service provider network, wherein the template, upon execution, creates the computing resources at the service provider network.

2. The computer-implemented method of claim 1 , wherein the input specifying the set of user accounts of the service provider network and the set of services of the service provider network is received via a graphical user interface (GUI), and wherein the GUI is part of a guided workflow comprising a set of GUIs including user interface elements.

3. The computer-implemented method of claim 1 , wherein the input specifying the set of user accounts is an identifier of an account group, wherein the account group includes the set of user accounts.

4. The computer-implemented method of claim 1 , wherein the input further specifies at least one region of a plurality of service provider network regions.

5. The computer-implemented method of claim 1 , further comprising:
generating a command executable in the service provider network to create a set of cloud resources in the service provider network based on the template; and
causing display of the command.

6. The computer-implemented method of claim 5 , wherein the method further comprises:
automatically executing the command in the service provider network.

7. The computer-implemented method of claim 1 , wherein the template includes an automatically generated security token used by a computing resource of the computing resources to authenticate with the data intake and query system.

8. The computer-implemented method of claim 1 , further comprising:
receiving, by the data intake and query system, data from the computing resources at the service provider network and associated with the set of user accounts; and
performing analytics using the data from the computing resources at the service provider network for the set of user accounts.

9. The computer-implemented method of claim 8 , further comprising:
generating one or more graphical user interfaces for display to a user, the one or more graphical user interfaces indicating results of the performed analytics.

10. The computer-implemented method of claim 1 , wherein the computing resources created at the service provider network include roles, streaming resources, and storage resources.

11. The computer-implemented method of claim 1 , wherein the input specifying a set of user accounts includes a control account and at least one data account, wherein the control account manages a creation of computing resources in the at least one data account.

12. The computer-implemented method of claim 1 , further comprising:
automatically applying a template by providing the template as input to an infrastructure provisioning service of the service provider network.

13. The computer-implemented method of claim 1 , wherein the template, upon execution, further dynamically determines configuration data of the set of services of the service provider network for each account of the set of user accounts.

14. The computer-implemented method of claim 1 , further comprising:
performing a discovery of a service provider network environment based on the input;
displaying results of the performed discovery;
receiving additional inputs based on the displayed results of the performed discovery; and
generating the template used to create the computing resources at the service provider network based on the additional inputs.

15. A computing device, comprising:
a processor; and
a non-transitory computer-readable medium having stored thereon instructions that, when executed by the processor, cause the processor to perform operations including:
receiving, by a data intake and query system, input specifying a set of user accounts of a service provider network and a set of services of the service provider network, wherein each service of the set of services manages data associated with each account of the set of user accounts;
generating, based on the input, a template used to create computing resources at the service provider network, wherein the computing resources are to be used to send the data associated with each account of the set of user accounts to the data intake and query system;
performing an authentication process with the service provider network using user credentials specified in the input; and
executing the template at the service provider network, wherein the template, upon execution, creates the computing resources at the service provider network.

16. The computing device of claim 15 , wherein the input specifying the set of user accounts of the service provider network and the set of services of the service provider network is received via a graphical user interface (GUI), and wherein the GUI is part of a guided workflow comprising a set of GUIs including user interface elements.

17. The computing device of claim 15 , wherein the input specifying the set of user accounts is an identifier of an account group, wherein the account group includes the set of user accounts.

18. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
receiving, by a data intake and query system, input specifying a set of user accounts of a service provider network and a set of services of the service provider network, wherein each service of the set of services manages data associated with each account of the set of user accounts;
generating, based on the input, a template used to create computing resources at the service provider network, wherein the computing resources are to be used to send the data associated with each account of the set of user accounts to the data intake and query system;
performing an authentication process with the service provider network using user credentials specified in the input; and
executing the template at the service provider network, wherein the template, upon execution, creates the computing resources at the service provider network.

19. The non-transitory computer-readable medium of claim 18 , wherein the input specifying the set of user accounts of the service provider network and the set of services of the service provider network is received via a graphical user interface (GUI), and wherein the GUI is part of a guided workflow comprising a set of GUIs including user interface elements.

20. The non-transitory computer-readable medium of claim 18 , wherein the input specifying the set of user accounts is an identifier of an account group, wherein the account group includes the set of user accounts.

Assignees

• Splunk Inc

Inventors

• Thoppai Omprakaash
• Mehasanewala Sakib
• Sontakke Yogesh

Classifications

• H04L47/828 Primary

  Allocation of resources per group of connections, e.g. per group of users · CPC title

• H04L47/781

  Centralised allocation of resources · CPC title

• H04L47/762 Primary

  triggered by the network · CPC title

• G06F16/901

  Indexing; Data structures therefor; Storage structures (for retrieval from the web G06F16/951) · CPC title

• G06F16/9035

  Filtering based on additional data, e.g. user or group profiles · CPC title