	US 11,928,046 B1
	Real-time processing of data streams received from instrumented software
Phillip Liu, Palo Alto, CA (US); Arijit Mukherji, Fremont, CA (US); and Rajesh Raman, Palo Alto, CA (US)
Assigned to Splunk Inc., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Oct. 29, 2021, as Appl. No. 17/515,272.
Application 17/515,272 is a continuation of application No. 16/546,860, filed on Aug. 21, 2019, granted, now 11,194,697.
Application 16/546,860 is a continuation of application No. 15/005,489, filed on Jan. 25, 2016, granted, now 10,394,692, issued on Aug. 27, 2019.
Claims priority of provisional application 62/109,308, filed on Jan. 29, 2015.
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 11/36 (2006.01); G06F 11/30 (2006.01); G06F 11/32 (2006.01); G06F 16/2455 (2019.01)

CPC G06F 11/3644 (2013.01) [G06F 11/3006 (2013.01); G06F 11/3082 (2013.01); G06F 16/24568 (2019.01); G06F 11/323 (2013.01)]

30 Claims

1. A computer-implemented method for processing data generated by instrumented software, the method comprising: determining, for a time interval of a plurality of time intervals, a failure threshold value for a data stream based on a type of a data source sending the data stream, the failure threshold value indicating that the instrumented software sending the data stream has failed; monitoring the data stream for data values for the time interval; marking the data stream as dead data if the data values from the data stream fail to arrive before the failure threshold value; excluding the data stream from sets of data streams considered for subsequent time intervals until a next data value arrives for the data stream; marking the data stream as alive when the next data value of the data stream is received; evaluating an expression using the data values of the data stream, the expression processing the data values of the data stream; and sending a result of evaluating the expression for presentation through a user interface.