发明名称 |
CLUSTERING EVENT DATA BY MULTIPLE TIME DIMENSIONS |
摘要 |
Systems and methods for processing log data are provided. A set of data chunks is determined. Each data chunk is associated with a set of events, which are grouped according to a primary time dimension field of each event of the set of events. A metadata structure is determined for each of the data chunks. The metadata structure includes comprises a range of the primary time dimension field of all of the events in the data chunk and a range of a secondary time dimension field of all of the events in the data chunk. A subset of the data chunks is selected. A data chunk associated with at least one event of the plurality of events is generated according to the secondary time dimension field of the at least one event. |
申请公布号 |
EP2786284(A4) |
申请公布日期 |
2015.08.05 |
申请号 |
EP20120853508 |
申请日期 |
2012.01.26 |
申请人 |
HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. |
发明人 |
DASH, DEBABRATA;TANG, WENTING;ORYANI, MARYLOU |
分类号 |
G06F17/40;G06F21/00;H04L29/06 |
主分类号 |
G06F17/40 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|