发明名称 Report acceleration using intermediate summaries of events
摘要 A method and system for managing searches of a data set that is partitioned based on a plurality of events. A structure of a search query may be analyzed to determine if logical computational actions performed on the data set is reducible. Data in each partition is analyzed to determine if at least a portion of the data in the partition is reducible. In response to a subsequent or reoccurring search request, intermediate summaries of reducible data and reducible search computations may be aggregated for each partition. Next, a search result may be generated based on at least one of the aggregated intermediate summaries, the aggregated reducible search computations, and a query of adhoc non-reducible data arranged in at least one of the plurality of partitions for the data set.
申请公布号 US8682886(B2) 申请公布日期 2014.03.25
申请号 US201213664239 申请日期 2012.10.30
申请人 SPLUNK INC. 发明人 SORKIN STEPHEN PHILLIP;ZHANG STEVE YU;BITINCKA LEDION
分类号 G06F17/30 主分类号 G06F17/30
代理机构 代理人
主权项
地址