Patent ID: 11882054
Assignee: SPLUNK INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 16:
17. An apparatus comprising:
one or more processors; and
a memory storing instructions, which when executed by the one or more processors, causes the one or more processors to:
create a plurality of time-stamped, searchable events from machine data;
execute in parallel a plurality of data server nodes that service messages across one or more portions of the plurality of time-stamped, searchable events, wherein each portion assigned to each data server node of the plurality of data server nodes is unique among the plurality of data server nodes;
for each message received, send the message to a data server node, of the plurality of data server nodes, to cause the receiving data server node to perform a data operation associated with the received message;
determine that a particular data server node, of the plurality of data server nodes, has failed to process any messages sent to the particular data server node within a certain amount of time;
initiate termination of the particular data server node to terminate processes or threads executed by the particular data server node;
upon terminating the particular data server node, receive a new message indicating a data operation to perform with respect to a particular data collection, identified via a collection identifier, assigned to the particular data server node;
for the new message, determine that each data server node, of the plurality of data server nodes, is unassigned to the particular data collection identified via the collection identifier in association with the new message; and
based on the determination that each data server node is unassigned to the particular data collection, initiate a new data server node and assigning the new data server node to the particular data collection.