Related content identification for different types of machine-generated data

Patent metadata

Field	Value
Publication number	US-11636160-B2
Application number	US-202217647324-A
Country	US
Kind code	B2
Filing date	Jan 6, 2022
Priority date	Oct 16, 2020
Publication date	Apr 25, 2023
Grant date	Apr 25, 2023

Abstract

A system can display content generated from one type of machine-generated data to a user via a graphical user interface. Based on an interaction with the machine-generated data, the system can determine an entity identifier associated with the machine-generated data and determine an entity type for the entity identifier. The system can map the entity type to one or more content generators associated with the entity type and communicate the entity identifier to the identified content generators. The content generators can determine if they have content associated with the machine-generated data. The system can generate and display a link to the related content via a graphical user interface.

First claim

What is claimed is:

1. A method, comprising:
identifying an entity associated with machine-generated data based on a determined interaction with a first display object that corresponds to the machine-generated data, wherein the first display object is generated by a first content generator;
determining an entity type for the entity;
identifying a second content generator based on the determined entity type for the entity, wherein the second content generator is configured to generate content associated with the entity type;
identifying first content of the content generated by the second content generator, wherein the first content is associated with the machine-generated data;
generating a second display object that includes a link to the first content associated with the machine-generated data; and
causing display of the second display object.

2. The method of claim 1 , wherein the determined interaction includes a selection of the first display object on a graphical user interface.

3. The method of claim 1 , wherein the entity is an isolated execution environment executing in a shared computing resource environment, and wherein the entity type for the entity is determined to be an isolated execution environment type.

4. The method of claim 1 , wherein the entity type for the entity is determined to be at least one of: a software container, pod, service, trace, or span.

5. The method of claim 1 , wherein the machine-generated data is first machine-generated data of a first type, and wherein the first content associated with the first machine-generated data is generated based on second machine-generated data of a second type.

6. The method of claim 1 , wherein the machine-generated data is first machine-generated data, wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data, and wherein the first content is generated by the second content generator using the second machine-generated data.

7. The method of claim 1 , wherein the machine-generated data is first machine-generated data,
wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data,
wherein the first content is generated by the second content generator using the second machine-generated data,
wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and
wherein the entity identifier in the first machine-generated data is extracted from the raw machine data using a regular expression rule.

8. The method of claim 1 , wherein the machine-generated data is first machine-generated data,
wherein identifying the first content comprises identifying, via the second content generator, an entity identifier in second machine-generated data that corresponds to an entity identifier in the first machine-generated data,
wherein the first content is generated by the second content generator using the second machine-generated data,
wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and
wherein the entity identifier in the first machine-generated data is determined using metadata associated with the raw machine data.

9. The method of claim 1 , wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and wherein the second content generator is a metrics content generator configured to generate the first content using metrics data.

10. The method of claim 1 , wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data, and wherein the second content generator is a trace content generator configured to generate the first content using trace data.

11. The method of claim 1 , wherein the link is a first link, the method further comprising:
identifying a third content generator based on the determined entity type for the entity, wherein the third content generator is configured to generate data associated with the entity type;
identifying second content generated by the third content generator, wherein the second content is associated with the machine-generated data;
generating a third display object that includes a second link to the second content associated with the machine-generated data; and
causing display of the third display object.

12. The method of claim 1 , wherein the link is a first link, the method further comprising:
identifying a third content generator based on the determined entity type for the entity, wherein the third content generator is configured to generate content associated with the entity type;
identifying second content of the content generated by the third content generator, wherein the second content is associated with the machine-generated data;
generating a third display object that includes a second link to the second content associated with the machine-generated data; and
causing display of the third display object,
wherein the first content generator is a log content generator configured to generate content using log data for display with the first display object, the log data comprising raw machine data,
wherein the second content generator is a trace content generator configured to generate the first content using trace data, and
wherein the third content generator is a metrics content generator configured to generate the second content using metrics data.

13. The method of claim 1 , wherein the link is a first link, the method further comprising:
identifying second content generated by the second content generator, wherein the second content is associated with the machine-generated data;
generating a third display object that includes a second link to the second content associated with the machine-generated data; and
causing display of the third display object.

14. The method of claim 1 , wherein the first content generator is a trace content generator configured to generate content using trace data for display with the first display object, and wherein the second content generator is a metrics content generator configured to generate the first content using metrics data.

15. The method of claim 1 , wherein the first content generator is a trace content generator configured to generate content using trace data for display with the first display object, and wherein the second content generator is a log content generator configured to generate the first content using log data.

16. The method of claim 1 , wherein the first content generator is a metrics content generator configured to generate content using metric data for display with the first display object, and wherein the second content generator is a trace content generator configured to generate the first content using trace data or a log content generator configured to generate the first content using log data.

17. Non-transitory computer-readable media having computer-executable instructions that, when executed by a computer system, cause the comput

Assignees

• Splunk Inc

Inventors

• Bianchi Amy Katherine Hunnel
• Chang Sonya
• Kittipatkul Park
• Lin Patrick
• Matarese Sarah
• Mullen Clark
• Nuttbrown Alexandra Victoria
• Patrick Danika
• Smith Justin
• Vashistha Harsh Vardhan

Classifications

• G06F16/9035 Primary

  Filtering based on additional data, e.g. user or group profiles · CPC title

• G06F11/3072

  where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting · CPC title

• G06F16/904 Primary

  Browsing; Visualisation therefor (for navigating the web G06F16/954; browsing optimisation for the web G06F16/957) · CPC title

• G06F11/323

  Visualisation of programs or trace data · CPC title

• G06F11/3006

  where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50) · CPC title