US 12,124,441 B1
Utilizing shared search queries for defining multiple key performance indicators
Nicholas Matthew Tankersley, Seattle, WA (US); Fang I. Hsiao, Berkeley, CA (US); and Arun Ramani, Bellevue, WA (US)
Assigned to Splunk Inc., San Francisco, CA (US)
Filed by SPLUNK INC., San Francisco, CA (US)
Filed on Dec. 6, 2022, as Appl. No. 18/075,970.
Application 18/075,970 is a continuation of application No. 17/473,435, filed on Sep. 13, 2021, granted, now 11,526,511.
Application 17/473,435 is a continuation of application No. 16/528,137, filed on Jul. 31, 2019, granted, now 11,144,545, issued on Oct. 12, 2021.
Application 16/528,137 is a continuation of application No. 15/088,075, filed on Mar. 31, 2016, granted, now 10,417,225, issued on Sep. 17, 2019.
Application 15/088,075 is a continuation in part of application No. 15/014,017, filed on Feb. 3, 2016, granted, now 10,152,561, issued on Oct. 20, 2018.
Application 15/088,075 is a continuation in part of application No. 14/859,243, filed on Sep. 18, 2015, granted, now 10,474,680, issued on Nov. 12, 2019.
Int. Cl. G06F 16/24 (2019.01); G06F 3/04847 (2022.01); G06F 11/30 (2006.01); G06F 16/2452 (2019.01); G06F 16/2457 (2019.01); G06Q 10/0639 (2023.01); G06Q 10/10 (2023.01); G06T 11/20 (2006.01)
CPC G06F 16/24528 (2019.01) [G06F 3/04847 (2013.01); G06F 11/30 (2013.01); G06F 16/24573 (2019.01); G06Q 10/06393 (2013.01); G06Q 10/10 (2013.01); G06T 11/206 (2013.01); G06T 2200/24 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method performed by one or more processing devices of a service monitoring system, the method comprising:
receiving input specifying one or more service definitions, each service definition of the one or more service definitions specifying an entity definition for an entity providing a service of one or more services executing in an information technology (IT) environment being monitored by the service monitoring system, wherein the service monitoring system uses (i) first machine data of a first entity specified by a first service definition of the one or more service definitions to determine a first KPI for a first service of the one or more services and (ii) second machine data of a second entity specified by a second service definition of the one or more service definitions to determine a second KPI for a second service of the one or more services;
determining that the first machine data and the second machine data include common machine data;
defining, based on the first machine data and the second machine data including the common machine data, a shared base search query for the first KPI and the second KPI, wherein the first KPI is defined based on a first event field of the common machine data, the second KPI is defined based on a second event field of the common machine data, and the second KPI is directed to a different performance measurement than the first KPI;
executing the shared based search query to generate shared base search query results for the first KPI and the second KPI; and
generating, using the shared base search query results, a first value for the first KPI and a second value for the second KPI.