Stephen P Sorkin, 45Sonoma, CA

7424735, Sep 9, 2008

Nov 9, 2004

10/985749

Stephen Sorkin - Menlo Park CA, US
Michael Lyle - San Jose CA, US
Robert F. Ross - Mountain View CA, US
James R. Maricondo - Palo Alto CA, US

Symantec Corporation - Cupertino CA

G06F 11/30
H04L 9/00

726 4, 707 3, 707 9, 726 6, 726 7, 726 29

A system and method are disclosed for providing security for a computer network. Content sets are generated for a computer associated with the network. It is determined whether a user should be routed to the generated content sets. If it is determined that the user should be routed to the generated content sets, a generated content set is selected and the user is so routed. Various actions and events may be recorded in a logfile, and the logfile is analyzed using regular expressions.

7937344, May 3, 2011

Jul 24, 2006

11/459632

Michael J. Baum - Ross CA, US
David Carasso - San Rafael CA, US
Robin K. Das - Redwood City CA, US
Brad Hall - Burlingame CA, US
Brian Murphy - San Francisco CA, US
Stephen Sorkin - San Francisco CA, US
Andre Stechert - Millbrea CA, US
Erik M. Swan - Piedmont CA, US

Splunk Inc. - San Francisco CA

G06F 15/18

706 20, 706 25, 706 48, 719318

Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e. g. , activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.

7945545, May 17, 2011

Oct 13, 2005

11/250136

Stephen P. Sorkin - San Francisco CA, US
Rajan M. Lukose - Oakland CA, US
Joshua R. Tyler - Mountain View CA, US

Hewlett-Packard Development Company, L.P. - Houston TX

G06F 7/00
G06F 17/00

707705, 707732, 715206, 715745, 715811

A method and system for utilizing user information to provide a network address. The method collects user information about a user from at least one electronic device that is associated with the user. In addition, a network address activity pattern is identified based on a combination of a network browsing activity and the user information. A list of network addresses that have been viewed in context of the activity pattern is then accessed. At least one network address on the list of network addresses is scored. Then, the at least one network address having a highest score is provided to the user.

7945585, May 17, 2011

Oct 13, 2005

11/250064

Stephen P. Sorkin - San Francisco CA, US
Rajan M. Lukose - Oakland CA, US
Joshua R. Tyler - Mountain View CA, US

Hewlett-Packard Development Company, L.P. - Houston TX

G06F 17/30

707784, 707734, 707748

A method and system for improving targeted data delivery. One method accesses a user profile based on information about a user from at least one electronic device from a set of electronic devices that is associated with the user. A targeted data offer is received, wherein the targeted data offer defines selection criteria for targeted user profiles. A determination is made as to whether the user profile satisfies the selection criteria. A non-user selected relevancy criteria based on the user profile is then utilized to characterize the targeted data offer.

8015117, Sep 6, 2011

Apr 27, 2006

11/414287

Mark David Lillibridge - Palo Alto CA, US
Stephen Sorkin - Palo Alto CA, US

Hewlett-Packard Development Company, L.P. - Houston TX

G06Q 20/00

705 74, 705 64, 705 75

A system and method for anonymous reporting. Specifically, the method includes collecting user information about a user and generating a user profile based on the user information. The user profile is stored such that the user profile is used to achieve delivery of data that is targeted to the user based on the user profile without requiring a release of user information in the user profile. A signed authorization number is generated. The signed authorization number is signed by the third party but unknown to the third party. The signed authorization number is attached to a report detailing activities of the user. The report along with the signed authorization number is sent to the third party to preserve reporting privacy of the user. The third party is able to authenticate the report using the signed authorization number.

8112425, Feb 7, 2012

Oct 5, 2007

11/868370

Michael J. Baum - Ross CA, US
David Carasso - San Rafael CA, US
Robin K. Das - Redwood City CA, US
Rory Greene - San Francisco CA, US
Brad Hall - Burlingame CA, US
Nick Mealy - San Francisco CA, US
Brian Murphy - San Francisco CA, US
Stephen Sorkin - San Francisco CA, US
Andre Stechert - Millbrae CA, US
Erik M. Swan - Piedmont CA, US

Splunk Inc. - San Francisco CA

G06F 17/30

707746

Methods and apparatus consistent with the invention provide the ability to organize, index, search, and present time series data based on searches. Time series data are sequences of time stamped records occurring in one or more usually continuous streams, representing some type of activity. In one embodiment, time series data is organized into discrete events with normalized time stamps and the events are indexed by time and keyword. A search is received and relevant event information is retrieved based in whole or in part on the time indexing mechanism, keyword indexing mechanism, or statistical indices calculated at the time of the search.

8412696, Apr 2, 2013

Jan 31, 2011

13/018236

Steve Y. Zhang - San Francisco CA, US
Stephen P. Sorkin - San Francisco CA, US
Vishal Patel - San Francisco CA, US

Splunk Inc. - San Francisco CA

G06F 17/30

707706

A system arranged to search machine data to generate reports in real time. A search query is provided that includes a plurality of search commands. The search query is parsed to form a main search query and a remote search query. Machine data is collected from remote data sources and evaluated against one of the main and remote search queries to generate a set of search results. The main search query is then evaluated against at least a partial set of the search result to generate at least one report regarding the collected machine data. Each report can be provided for display to a user.

8515963, Aug 20, 2013

Oct 26, 2012

13/662337

Leonid Budchenko - San Jose CA, US
R. David Carasso - San Rafael CA, US
Micah James Delfino - San Francisco CA, US
Johnvey Hwang - San Francisco CA, US
Stephen Phillip Sorkin - San Francisco CA, US
Eric Timothy Woo - San Francisco CA, US

Splunk Inc. - San Francisco CA

G06F 7/00
G06F 17/30

707741

Embodiments are directed towards previewing results generated from indexing data raw data before the corresponding index data is added to an index store. Raw data may be received from a preview data source. After an initial set of configuration information may be established, the preview data may be submitted to an index processing pipeline. A previewing application may generate preview results based on the preview index data and the configuration information. The preview results may enable previewing how the data is being processed by the indexing application. If the preview results are not acceptable, the configuration information may be modified. The preview application enables modification of the configuration information until the generated preview results may be acceptable. If the configuration information is acceptable, the preview data may be processed and indexed in one or more index stores.