US 12,013,880 B2
Dynamic resolution estimation for a detector
Nishant Agarwal, San Jose, CA (US); Houwu Bai, San Jose, CA (US); Darshan Patel, Sunnyvale, CA (US); Rajesh Raman, Palo Alto, CA (US); and Joseph Ari Ross, Redwood City, CA (US)
Assigned to SPLUNK Inc., San Francisco, CA (US)
Filed by SPLUNK Inc., San Francisco, CA (US)
Filed on Apr. 14, 2022, as Appl. No. 17/721,251.
Claims priority of provisional application 63/256,916, filed on Oct. 18, 2021.
Prior Publication US 2023/0120313 A1, Apr. 20, 2023
Int. Cl. G06F 16/28 (2019.01); G06F 16/2455 (2019.01); G06F 16/2458 (2019.01); H04L 43/08 (2022.01)
CPC G06F 16/287 (2019.01) [G06F 16/24568 (2019.01); G06F 16/2477 (2019.01); H04L 43/08 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
implementing a detector for a client, the detector configured to process a stream of data points and provide alert messages responsive to determining that the stream of data points correspond with a series of trigger parameters;
receiving, via a stream of data points, a first plurality of data points at a first data resolution, each data point in the stream of data points associated with a time stamp, wherein the first data resolution corresponds to an inter-arrival time between the data points in the first plurality of data points;
setting an output resolution to a first value;
generating a first set of output data points based upon the data points in the first plurality of data points received via the stream of data points;
based on determining, at an interval corresponding with the first value, the first set of output data points correspond with any of the series of trigger parameters, generating a first alert message;
based upon monitoring of the stream of data points, detecting a change in data resolution of the data points received via the stream of data points from the first value to a second value that is different from the first value, wherein the first value corresponds to a first frequency at which the first plurality of data points is received, wherein the second value corresponds to a second frequency at which the data points received via the stream of data points are received, wherein the first frequency and the second frequency are different such that the change in data resolution corresponds to a change in a frequency at which the data points are received;
responsive to detecting the change in data resolution for the stream of data points from the first value to the second value, setting the output resolution to the second value;
generating a second set of output data points based upon the data points in a second plurality of data points received via the stream of data points; and
based on determining, at an interval corresponding with the second value, the second set of output data points correspond with any of the series of trigger parameters, generating a second alert message.