US 11,899,670 B1
Generation of queries for execution at a separate system
Ankit Bhagat, Santa Clara, CA (US); Steven Karis, San Mateo, CA (US); Amin Moshgabadi, San Diego, CA (US); and Rajesh Raman, Palo Alto, CA (US)
Assigned to Splunk Inc., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Jan. 31, 2022, as Appl. No. 17/589,558.
Claims priority of provisional application 63/266,490, filed on Jan. 6, 2022.
Int. Cl. G06F 16/2455 (2019.01); G06F 16/22 (2019.01); G06F 16/2458 (2019.01); G06F 21/62 (2013.01)
CPC G06F 16/24568 (2019.01) [G06F 16/22 (2019.01); G06F 16/2471 (2019.01); G06F 21/6227 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
identifying, by a processing system, one or more credentials;
establishing, by the processing system, a connection with a data intake and query system based at least in part on the one or more credentials, wherein the processing system and the data intake and query system are distinct systems;
identifying, by the processing system, one or more indices of the data intake and query system associated with the one or more credentials based at least in part on establishing the connection with the data intake and query system;
identifying, by the processing system, a query, wherein the query identifies a selection of at least one index of the one or more indices of the data intake and query system identified by the processing system, wherein the query further identifies a set of log data ingested and indexed by the data intake and query system;
generating, by the processing system, a request, wherein the request comprises the query, the one or more credentials, and an identifier of the connection with the data intake and query system;
transmitting, by the processing system, the request to the data intake and query system via the connection with the data intake and query system, wherein the data intake and query system validates that a device associated with the one or more credentials is authorized to access the set of log data based at least in part on the one or more credentials and executes the query on the set of log data based at least in part on validating that the device is authorized to access the set of log data;
obtaining, by the processing system, from the data intake and query system, query results based at least in part on transmission of the request to the data intake and query system and execution of the query on the set of log data by the data intake and query system, the query results comprising a portion of the set of log data; and
providing, by the processing system, the portion of the set of log data in response to the query.