Patent ID: 11966797
Assignee: SPLUNK INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method, comprising:
based on a determination by computing device in communication with an indexing node of a distributed data processing system that the indexing node satisfies a node capacity threshold, receiving, at the indexing node, an instruction to request a message payload from a remote message bus;
based on receiving the instruction to request the message payload from the remote message bus requesting, by the indexing node, the message payload from the remote message bus;
receiving the message payload from the remote message bus;
extracting a plurality of events using the message payload, wherein each of the plurality of events comprises machine data generated by one or more computing devices in an information technology environment;
adding the plurality of events to a data bucket; and
storing at least one copy of the data bucket to a remote shared storage system.