US 12,135,710 B2
Artifact life tracking storage
Jagmohan Singh, Milpitas, CA (US); Michael Bach Soohoo, Santa Clara, CA (US); Hongxun Liu, Palo Alto, CA (US); and Manu Jose, Jr., Milpitas, CA (US)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Splunk Inc., San Francisco, CA (US)
Filed on Jan. 27, 2022, as Appl. No. 17/586,634.
Prior Publication US 2023/0237049 A1, Jul. 27, 2023
Int. Cl. G06F 16/23 (2019.01); G06F 16/2458 (2019.01)
CPC G06F 16/2379 (2019.01) [G06F 16/2474 (2019.01); G06F 16/2477 (2019.01)] 17 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
receiving a search request for an artifact by a secondary processing node;
sending the search request to an originating processing node responsive to determining that the artifact is not stored at the secondary processing node;
determining that the artifact is not stored at the originating processing node;
sending, by the originating processing node, an artifact request for the artifact from an artifact storage node responsive to determining that the artifact is not stored at the originating processing node;
at the artifact storage node, responsive to the artifact request:
identifying a current time value, and
determining whether a time to live (TTL) tag of the artifact should be incremented, wherein determining whether the TTL tag of the artifact should be incremented comprises:
obtaining a TTL extender list for the artifact, the TTL extender list comprising a plurality of time values, wherein adjacent time values of the plurality of time values in the TTL extender list are separated by an interval of time,
identifying, within the TTL extender list, a current interval of time in which the current time value is located, and
determining, from a TTL modified tag value, that the TTL tag of the artifact should be incremented because the TTL tag has previously not been incremented in the current interval of time;
responsive to determining that the TTL tag should be incremented, incrementing the TTL tag to a subsequent time value in the TTL extender list;
responsive to incrementing the TTL tag, setting the TTL modified tag value of the artifact to the current time value;
obtaining, by the originating processing node, the artifact from the artifact storage node responsive to the artifact request;
processing, by the originating processing node, the search request using the artifact from the artifact storage node; and
reclaiming memory of the artifact in the artifact storage node when the TTL tag is expired.