Systems and methods for processing log data are provided. A set of data chunks is determined. Each data chunk is associated with a set of events, which are grouped according to a primary time dimension field of each event of the set of events. A metadata structure is determined for each of the data chunks. The metadata structure includes comprises a range of the primary time dimension field of all of the events in the data chunk and a range of a secondary time dimension field of all of the events in the data chunk. A subset of the data chunks is selected. A data chunk associated with at least one event of the plurality of events is generated according to the secondary time dimension field of the at least one event.
申请公布号
WO2013081650(A1)
申请公布日期
2013.06.06
申请号
WO2012US22775
申请日期
2012.01.26
申请人
HEWLETT-PACKARD DEVELOPMENT COMPANY, L. P.;DASH, DEBABRATA;TANG, WENTING;ORYANI, MARYLOU