US 12,332,999 B1
Expediting processing of events based on a specified duration
Vadan Thimmegowda, San Jose, CA (US); Sourabh Satish, Fremont, CA (US); and Tejas Wanjari, Fremont, CA (US)
Assigned to SPLUNK Inc., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Dec. 22, 2022, as Appl. No. 18/145,731.
Application 18/145,731 is a continuation of application No. 16/779,465, filed on Jan. 31, 2020, granted, now 11,593,477.
Int. Cl. G06F 21/10 (2013.01); G06F 9/48 (2006.01); G06F 16/245 (2019.01); G06F 16/25 (2019.01); G06F 21/55 (2013.01); G06F 21/56 (2013.01); H04L 9/40 (2022.01)
CPC G06F 21/552 (2013.01) [G06F 9/4881 (2013.01); G06F 16/245 (2019.01); G06F 16/252 (2019.01); G06F 2221/033 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method performed by an information technology (IT) and security operations application, the method comprising:
obtaining data reflecting activity within an IT environment, wherein the data includes a plurality of events representing first occurrences of an activity within the IT environment;
assigning a severity level to each event of the plurality of events, wherein the IT and security operations application processes each event of the plurality of events in an order that is based on the severity level assigned to each event of the plurality of events;
using a Machine Learning (ML) model to identify one or more events from the plurality of events to be included in a set of expedited events, wherein, for at least a first event in the set of expedited events, a severity level assigned to the first event is lower than a severity level assigned to at least one event in the plurality of events that is not in the set of expedited events;
receiving input identifying a specified duration of time for processing the one or more events in the set of expedited events before processing any event in the plurality of events that is not in the set of expedited events:
during the specified duration of time, processing events in the set of expedited events before processing events that are not in the set of expedited events;
determining that the specified duration of time has elapsed; and
processing events in the set of expedited events in an order based on a severity level assigned to each event in the set of expedited events.