Patent ID: 11924021
Assignee: SPLUNK INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 16:
17. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processor to perform operations including:
pulling, by a plurality of harvesters and from a plurality of event sources, data for a plurality of actionable event instances for a plurality of actionable event occurrences in a server cluster,
wherein the plurality of harvesters comprises a subset that are each specific to a single event source or single event source type of the plurality of event sources,
wherein at least one of the plurality of harvesters is a universal harvester configured to receive data from a plurality of disparate sources, and
wherein the plurality of harvesters reformats information to obtain representations of the plurality of actionable event instances;

receiving, by an actionable event collector in the server cluster, the information specifying an actionable event instance regarding an actionable event occurrence in the server cluster, wherein the plurality of actionable event instances comprises the actionable event instance;
transmitting, by the actionable event collector, a representation of the actionable event instance to an actionable event queue builder;
inserting, by the actionable event queue builder, the representation as an entry into an actionable event queue; and
processing, by an event action dispatcher, the entry from the actionable event queue,
wherein processing the entry comprises:
determining a responsive action for the entry, and
causing performance of the responsive action.