Patent ID: 9449072
Filing Date: 2016-09-20
CPC Classification: G06F,H04L,H04Q

Claim Text:
1. A method comprising: identifying first machine data from a first enterprise component by a first sensor in a collection framework, the first sensor tuned to a first setting for identifying the first machine data; processing a portion of the first machine data by a first collector in the collection framework, having a first configuration, to generate first collected machine data, the first collector programmed to distribute the first collected machine data to a search cluster; responsive to an alert condition, generating a piped HTTP request for performing analytics on a set of collected machine data in the search cluster including the first collected machine data; receiving a single threaded piped HTTP response to the piped HTTP request as analytics output; determining a second configuration for the first collector responsive to the analytics output; executing a sync instruction to the first collector to replace the first configuration of the first collector with the second configuration; receiving a second machine data from the first sensor; and processing a portion of the second machine data according to the second configuration of the first collector to generate second collected machine data; wherein: the second collected machine data includes event-specific data determined to be relevant by the performing analytics on the set of collected machine data.