US 12,287,812 B2
Enriching search results with provenance information in an observability pipeline system
Clint Sharp, Oakland, CA (US); Dritan Bitincka, Edgewater, NJ (US); Ledion Bitincka, San Francisco, CA (US); and Oliver Draese, Los Gatos, CA (US)
Assigned to Cribl, Inc., San Francisco, CA (US)
Filed by Cribl, Inc., San Francisco, CA (US)
Filed on May 23, 2023, as Appl. No. 18/322,048.
Claims priority of provisional application 63/344,864, filed on May 23, 2022.
Claims priority of provisional application 63/414,762, filed on Oct. 10, 2022.
Claims priority of provisional application 63/419,632, filed on Oct. 26, 2022.
Claims priority of provisional application 63/423,264, filed on Nov. 7, 2022.
Prior Publication US 2023/0376498 A1, Nov. 23, 2023
Int. Cl. G06F 7/00 (2006.01); G06F 11/34 (2006.01); G06F 16/2453 (2019.01); G06F 16/2457 (2019.01); G06F 16/2458 (2019.01); G06F 16/248 (2019.01); G06F 16/28 (2019.01); H04L 67/1021 (2022.01)
CPC G06F 16/287 (2019.01) [G06F 11/3419 (2013.01); G06F 16/2453 (2019.01); G06F 16/2457 (2019.01); G06F 16/2471 (2019.01); G06F 16/248 (2019.01); H04L 67/1021 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A search method comprising:
receiving a search query from a leader role in an observability pipeline system, the search query representing a request to search event data at a computer resource;
configuring an observability pipeline process to perform a search according to the search query;
obtaining search results based on applying the observability pipeline process to the event data, the search results comprising a plurality of events from the event data;
obtaining provenance information for each of the plurality of events, the provenance information for each event comprising:
an identification of the computer resource, and
a link to the computer resource;
generating augmented search results by associating the provenance information with the respective events; and
communicating the augmented search results to the leader role.