Index traversals utilizing alternate in-memory search structure and system memory costing

    公开(公告)号:US09996569B2

    公开(公告)日:2018-06-12

    申请号:US14660948

    申请日:2015-03-18

    发明人: Robert W. Lyle

    IPC分类号: G06F17/30

    摘要: In searching an index in an original search structure for a database, portion(s) of the index are determined to be stored in a memory in an alternate search structure. The alternate search structure with the portion(s) is created and stored in the memory. The index is searched by traversing the alternate search structure and possibly the original search structure. The alternate search structure may be traversed more efficiently than the original search structure. The number of portions of the index may be a tunable parameter or selected based on a performance improvement/expense ratio. The search of the index begins at the alternate search structure. During traversal of the one or more portions in the alternate search structure, if traversal is to continue at a portion in the original search structure, the identity of this portion is obtained. The traversal is continued at this identified portion in the original search structure.

    Generating and storing summarization tables for sets of searchable events

    公开(公告)号:US09990386B2

    公开(公告)日:2018-06-05

    申请号:US14815973

    申请日:2015-08-01

    申请人: Splunk Inc.

    IPC分类号: G06F17/30

    摘要: Embodiments are directed are towards the transparent summarization of events. Queries directed towards summarizing and reporting on event records may be received at a search head. Search heads may be associated with one more indexers containing event records. The search head may forward the query to the indexers the can resolve the query for concurrent execution. If a query is a collection query, indexers may generate summarization information based on event records located on the indexers. Event record fields included in the summarization information may be determined based on terms included in the collection query. If a query is a stats query, each indexer may generate a partial result set from previously generated summarization information, returning the partial result sets to the search head. Collection queries may be saved and scheduled to run and periodically update the summarization information.

    System and method for fast query response

    公开(公告)号:US09870415B2

    公开(公告)日:2018-01-16

    申请号:US14057712

    申请日:2013-10-18

    IPC分类号: G06F17/30

    摘要: The disclosure generally describes computer-implemented methods, software, and systems for handling data access request, including: receiving a request submitted by a user to access data entries stored at a primary data server; determining whether the received request is supported by a fast query service engine, the fast query service engine being different from the primary data server; in response to determining that the received request is supported by the fast query service engine, directing the request to the fast query service engine; receiving query results from the fast query service engine, the query results composed from more than one answer sets maintained in in-memory data store at the fast query service engine, the answer sets the in-memory data-store being synchronized with the primary data server; and providing the query results to the user submitting the request.

    Reducing update conflicts when maintaining views

    公开(公告)号:US09852174B2

    公开(公告)日:2017-12-26

    申请号:US15255327

    申请日:2016-09-02

    IPC分类号: G06F17/30

    摘要: Aspects of the subject matter described herein relate to reducing update conflicts when maintaining views. In aspects, a transaction in snapshot isolation may update a materialized view. Instead of being able to view the update within the transaction, the update is hidden to prevent the transaction from obtaining inconsistent data. When a transaction is not supposed to see an update to a materialized view that occurs within the transaction, additional information associated with the materialized view may indicate this. When a query of the materialized view is made within the transaction, the query engine may use the additional information to exclude data from the update in the result.