Searching indexed data based on user roles

Patent metadata

Field	Value
Publication number	US-9516029-B2
Application number	US-201514735120-A
Country	US
Kind code	B2
Filing date	Jun 9, 2015
Priority date	Aug 12, 2011
Publication date	Dec 6, 2016
Grant date	Dec 6, 2016

Abstract

Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

First claim

What is claimed is:

1. A method, comprising:
determining at least one role for each project of a plurality of projects, wherein a role describes permissions for a user for interacting with resources associated with a project;
receiving a request from a first user to search indexed data in a data store for a particular project;
determining a role of the first user for the particular project;
determining whether the first user has permission to search indexed data in the data store based on the role determined for the first user, wherein the role of the first user for the particular project grants the first user permission to search indexed data in the data store for the particular project;
allowing the first user to search indexed data in the data store for the particular project to produce a result indicative of the performance or security of an information technology system in which the machine data was generated when the role indicates that the first user has permission to search indexed data in the data store for the particular project;
wherein the method is performed by one or more computing devices.

2. The method of claim 1 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store.

3. The method of claim 1 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store and grants the first user permission to search indexed data in the index store.

4. The method of claim 1 , wherein the role of the first user for the particular project grants the first user permission to access cloud-based resources.

5. The method of claim 1 , wherein the search is performed by a cloud-based search application.

6. The method of claim 1 , wherein the particular project comprises: receiving raw data.

7. The method of claim 1 , wherein the particular project comprises: storing indexed data.

8. The method of claim 1 , wherein the particular project comprises: dividing raw data into time stamped searchable events, storing the time-stamped searchable events, and searching the time-stamped searchable events.

9. The method of claim 1 , further comprising:
receiving input corresponding to an invitation to provide access to the particular project to a second user;
wherein the second user inherits the role for the particular project from the first user.

10. The method of claim 1 , wherein the plurality of projects reside in a cloud-based, multi-tenant environment sharing a common application program.

11. An apparatus, comprising:
a subsystem, implemented at least partially in hardware, that determines at least one role for each project of a plurality of projects, wherein a role describes permissions for a user for interacting with resources associated with a project;
a subsystem, implemented at least partially in hardware, that receives a request from a first user to search indexed data in a data store for a particular project;
a subsystem, implemented at least partially in hardware, that determines a role of the first user for the particular project;
a subsystem, implemented at least partially in hardware, that determines whether the first user has permission to search indexed data in the data store based on the role determined for the first user, wherein the role of the first user for the particular project grants the first user permission to search indexed data in the data store for the particular project;
a subsystem, implemented at least partially in hardware, that allows the first user to search indexed data in the data store for the particular project to produce a result indicative of the performance or security of an information technology system in which the machine data was generated when the role indicates that the first user has permission to search indexed data in the data store for the particular project.

12. The apparatus of claim 11 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store.

13. The apparatus of claim 11 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store and grants the first user permission to search indexed data in the index store.

14. The apparatus of claim 11 , wherein the role of the first user for the particular project grants the first user permission to access cloud-based resources.

15. The apparatus of claim 11 , wherein the search is performed by a cloud-based search application.

16. The apparatus of claim 11 , wherein the particular project comprises: receiving raw data.

17. The apparatus of claim 11 , wherein the particular project comprises: storing indexed data.

18. The apparatus of claim 11 , wherein the particular project comprises: dividing raw data into time stamped searchable events, storing the time-stamped searchable events, and searching the time-stamped searchable events.

19. The apparatus of claim 11 , further comprising:
a subsystem, implemented at least partially in hardware, that receives input corresponding to an invitation to provide access to the particular project to a second user;
wherein the second user inherits the role for the particular project from the first user.

20. The apparatus of claim 11 , wherein the plurality of projects reside in a cloud-based, multi-tenant environment sharing a common application program.

21. A non-transitory computer-readable medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform:
determining at least one role for each project of a plurality of projects, wherein a role describes permissions for a user for interacting with resources associated with a project;
receiving a request from a first user to search indexed data in a data store for a particular project;
determining a role of the first user for the particular project;
determining whether the first user has permission to search indexed data in the data store based on the role determined for the first user, wherein the role of the first user for the particular project grants the first user permission to search indexed data in the data store for the particular project;
allowing the first user to search indexed data in the data store for the particular project to produce a result indicative of the performance or security of an information technology system in which the machine data was generated when the role indicates that the first user has permission to search indexed data in the data store for the particular project.

22. The non-transitory computer-readable medium of claim 21 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store.

23. The non-transitory computer-readable medium of claim 21 , wherein the role of the first user for the particular project grants the first user permission to provide data to be indexed in an index store and grants the first user permission to search indexed data in the index store.

24. The non-transitory computer-readable medium of claim 21 , wherein the role of the first user for the particular project grants the first user permission to access cloud-based resources.

25. The non-tran

Assignees

• Splunk Inc

Inventors

• Das Robin Kumar
• Ago Ledio
• Shanaghy Declan Gerard
• Gupta Gaurav

Classifications

• G06F16/21

  Design, administration or maintenance of databases · CPC title

• G06F16/2228

  Indexing structures · CPC title

• G06F16/951

  Indexing; Web crawling techniques · CPC title

• G06F16/955

  using information identifiers, e.g. uniform resource locators [URL] · CPC title

• G06F16/9537

  Spatial or temporal dependent retrieval, e.g. spatiotemporal queries · CPC title