Access control for event data stored in cloud-based data stores

Patent metadata

Field	Value
Publication number	US-9497199-B2
Application number	US-201615007184-A
Country	US
Kind code	B2
Filing date	Jan 26, 2016
Priority date	Aug 12, 2011
Publication date	Nov 15, 2016
Grant date	Nov 15, 2016

Abstract

Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a cloud-based access control server, a request from a first user to access a set of time stamped, searchable events, the set of time stamped, searchable events among a plurality of sets of time stamped, searchable events stored in a plurality of cloud-based data stores, each of the time stamped, searchable events is parsed from raw data collected from one or more data sources, the raw data relate to performance or security aspects of one or more information technology systems;
determining, by the cloud-based access control server, a role of the first user for the set of time stamped, searchable events;
determining, by the cloud-based access control server, whether the first user has permission to access the set of time stamped, searchable events based on the role determined for the first user;
allowing, by the cloud-based access control server, the first user to access the set of time stamped, searchable events to perform operations on the set of time stamped, searchable events when the role indicates that the first user has permission to access the set of time stamped, searchable events;
wherein the method is performed by one or more computing devices.

2. The method of claim 1 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store.

3. The method of claim 1 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store and grants the first user permission to search time stamped, searchable events stored by the cloud-based data store.

4. The method of claim 1 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to access cloud-based resources associated with the set of time stamped, searchable events.

5. The method of claim 1 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to search time stamped, searchable events stored by a particular cloud-based data store.

6. The method of claim 1 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to search time stamped, searchable events stored by a particular cloud-based data store, and wherein the search is performed by a cloud-based search application.

7. The method of claim 1 , further comprising:
receiving, by the cloud-based access control server, input corresponding to an invitation to provide access to the set of time stamped, searchable events to a second user;
wherein the second user inherits the role for the set of time stamped, searchable events from the first user.

8. An apparatus, comprising:
a user input receiver, at a cloud-based access control server, implemented at least partially in hardware, that receives a request from a first user to access a set of time stamped, searchable events, the set of time stamped, searchable events among a plurality of sets of time stamped, searchable events stored in a plurality of cloud-based data stores, each of the time stamped, searchable events is parsed from raw data collected from one or more data sources, the raw data relate to performance or security aspects of one or more information technology systems;
a role processing device, at the cloud-based access control server, implemented at least partially in hardware, that determines a role of the first user for the set of time stamped, searchable events;
wherein the role processing device determines whether the first user has permission to access the set of time stamped, searchable events based on the role determined for the first user;
wherein the role processing device allows the first user to access the set of time stamped, searchable events to perform operations on the set of time stamped, searchable events when the role indicates that the first user has permission to access the set of time stamped, searchable events.

9. The apparatus of claim 8 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store.

10. The apparatus of claim 8 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store and grants the first user permission to search time stamped, searchable events stored by the cloud-based data store.

11. The apparatus of claim 8 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to access cloud-based resources associated with the set of time stamped, searchable events.

12. The apparatus of claim 8 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to search time stamped, searchable events stored by a particular cloud-based data store.

13. The apparatus of claim 8 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to search time stamped, searchable events stored by a particular cloud-based data store, and wherein the search is performed by a cloud-based search application.

14. One or more non-transitory computer-readable storage media, storing one or more sequences of instructions, which when executed by one or more processors cause performance of:
receiving, by a cloud-based access control server, a request from a first user to access a set of time stamped, searchable events, the set of time stamped, searchable events among a plurality of sets of time stamped, searchable events stored in a plurality of cloud-based data stores, each of the time stamped, searchable events is parsed from raw data collected from one or more data sources, the raw data relate to performance or security aspects of one or more information technology systems;
determining, by the cloud-based access control server, a role of the first user for the set of time stamped, searchable events;
determining, by the cloud-based access control server, whether the first user has permission to access the set of time stamped, searchable events based on the role determined for the first user;
allowing, by the cloud-based access control server, the first user to access the set of time stamped, searchable events to perform operations on the set of time stamped, searchable events when the role indicates that the first user has permission to access the set of time stamped, searchable events.

15. The one or more non-transitory computer-readable storage media of claim 14 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store.

16. The one or more non-transitory computer-readable storage media of claim 14 , wherein the role of the first user for the set of time stamped, searchable events grants the first user permission to provide data to be parsed into time stamped, searchable events at a cloud-based data store and grants the first user permission to search time stamped, searchable events stored by the cloud-based data store.

17. The one or more non-transitory computer-readable

Assignees

• Splunk Inc

Inventors

• Das Robin Kumar
• Ago Ledio
• Shanaghy Declan Gerard
• Gupta Gaurav

Classifications

• G06F16/21

  Design, administration or maintenance of databases · CPC title

• G06F16/134

  Distributed indices · CPC title

• G06F16/13

  File access structures, e.g. distributed indices (arrangements of input from, or output to, record carriers G06F3/06) · CPC title

• G06F16/2228

  Indexing structures · CPC title

• G06F9/4887

  involving deadlines, e.g. rate based, periodic · CPC title