US 12,072,939 B1
Federated data enrichment objects
Alexandros Batsakis, San Francisco, CA (US); Nir Frenkel, Santa Clara, CA (US); Nitilaksha Halakatti, San Jose, CA (US); Balaji Rao, San Jose, CA (US); Anish Shrigondekar, Sunnyvale, CA (US); Ruochen Zhang, Milipitas, CA (US); and Steve Yu Zhang, San Francisco, CA (US)
Assigned to Splunk Inc., San Francisco, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Jan. 31, 2022, as Appl. No. 17/589,712.
Claims priority of provisional application 63/227,719, filed on Jul. 30, 2021.
Int. Cl. G06F 16/00 (2019.01); G06F 16/23 (2019.01); G06F 16/2458 (2019.01); G06F 16/903 (2019.01); G06F 16/9032 (2019.01)
CPC G06F 16/90335 (2019.01) [G06F 16/23 (2019.01); G06F 16/2471 (2019.01); G06F 16/9032 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
generating, by a local data intake and query system, at least one local data enrichment object based on at least one first user interaction with the local data intake and query system;
receiving at least one external data enrichment object, wherein the at least one external data enrichment object is generated by an external data intake and query system, and wherein the external data intake and query system generates the at least one external data enrichment object based on at least one second user interaction with the external data intake and query system;
receiving, at the local data intake and query system, a request to execute a first local query;
determining, based on at least one of an origin of the first local query or a destination for query results of the first local query, that the first local query is a subquery of an external query received by the external data intake and query system; and
based on the determining that the first local query is a subquery of the external query:
retrieving the at least one external data enrichment object, and
executing the first local query using the at least one external data enrichment object.