Query processing using query-resource usage and node utilization data

• US 10,726,009 B2
• Filed: 07/31/2017
• Issued: 07/28/2020
• Est. Priority Date: 09/26/2016
• Status: Active Grant

• Current Assignee: Splunk Inc. (Cisco Systems, Inc.)
• Original Assignee: Splunk Inc. (Cisco Systems, Inc.)
• Inventors: Pal, Sourav, Bhattacharjee, Arindam, Pride, Christopher
• Primary Examiner(s): Cao, Phuong Thao
• Application Number:
  US15/665,148
• Publication Number:
  US 20180089269A1
• Time in Patent Office: 1,093 Days
• Field of Search: 707722
• CPC Class Codes: G06F 16/24542 Plan optimisation
• CPC Class Codes: G06F 16/24554 Unary operations; Data partitioning operations
• CPC Class Codes: G06F 16/258 Data format conversion from or to a database

Abstract

Systems and methods are disclosed for processing queries against one or more dataset sources. The system tracks query resource data and resource utilization data. The query-resource usage data can indicate resources used to execute queries. The node resource utilization data can indicate current utilization of nodes in the system. Upon receipt of a query that identifies a set of data to be processed and a manner of processing the set of data, the system can use the query-resource usage data and the resource utilization data to define a query processing scheme. The query can then be executed using the query processing scheme. In some cases, the query coordinator can dynamically allocate partitions operating on worker nodes to execute the query.

Claims

1. A method comprising:

tracking query-resource usage data corresponding to an indication of resources used to execute each of a plurality of previous queries and timing data corresponding to an execution time to obtain results for at least some of the plurality of previous queries;

tracking node resource utilization data related to a plurality of nodes, each node comprising one or more processors;

receiving, at a data intake and query system, a query identifying a set of data located in one or more data sources to be processed and a manner of processing the set of data;

defining, by the data intake and query system, a query processing scheme for obtaining and processing the set of data, wherein the query processing scheme specifies an amount of node resources to allocate to the query based at least in part on available node resources determined using the node resource utilization data and a comparison of the query with one or more of the plurality of previous queries associated with the query-resource usage data; and

executing the query based on the query processing scheme.

2. The method of claim 1, wherein defining the query processing scheme comprises determining a number of transformations to be performed on the set of data, determining an amount of time to perform each transformation based on the query-resource usage data, and allocating processors based on the amount of time to perform each transformation and the number of transformations.

3. The method of claim 1, wherein defining the query processing scheme comprises allocating a plurality of processors to execute the query based on a determined number of available processors wherein the number of available processors is determined using the node resource utilization data.

4. The method of claim 1, wherein the node resource utilization data indicates a number of processors available for use among the plurality of nodes.

5. The method of claim 1, wherein the node resource utilization data indicates a number of processors available for use among at least one node of the plurality of nodes.

6. The method of claim 1, wherein the node resource utilization data indicates a number of partitions unavailable for use among at least one node of the plurality of nodes.

7. The method of claim 1, wherein the timing data corresponds to data received after execution of at least one previous query of the plurality of previous queries.

8. The method of claim 1, wherein the timing data corresponds to an amount of time used to execute at least one previous query of the plurality of previous queries.

9. The method of claim 1, wherein the timing data corresponds to an amount of time used to execute at least one transformation on data as part of at least one previous query of the plurality of previous queries.

10. The method of claim 1, wherein the query-resource usage data corresponds to data received after execution of at least one previous query of the plurality of previous queries.

11. The method of claim 1, wherein the node resource utilization data corresponds to data received concurrently with the query.

12. The method of claim 1, wherein tracking query-resource usage data comprises receiving the query-resource usage data from at least one node of the plurality of nodes based on the at least one node executing at least a portion of the query.

13. The method of claim 1, wherein tracking query-resource usage data comprises storing the query-resource usage data in a data store.

14. The method of claim 1, wherein tracking node resource utilization data comprises receiving the node resource utilization data from at least one node of the plurality of nodes based on the at least one node executing at least a portion of the query.

15. The method of claim 1, wherein tracking node resource utilization data comprises storing the node resource utilization data in a data store.

16. The method of claim 1, wherein the indication of resources used comprises data indicating a quantity of processors used to execute at least one previous query of the plurality of previous queries.

17. The method of claim 1, wherein indication of resources used comprises data indicating a quantity of processors used to execute a transformation on data as part of at least one previous query of the plurality of previous queries.

18. The method of claim 1, wherein the query-resource usage data comprises data related to each transformation on data of at least a portion of a previous query of the plurality of previous queries.

19. The method of claim 1, wherein the query-resource usage data comprises data indicating an amount of data in a dataset source.

20. The method of claim 1, wherein the query-resource usage data comprises data indicating a rate of growth of data in a dataset source.

21. The method of claim 1, wherein executing the query comprises monitoring the plurality of nodes.

22. The method of claim 1, wherein executing the query comprises allocating additional processors based on a determination that the execution of the query will not satisfy a timing threshold.

23. The method of claim 1, wherein defining the query processing scheme comprises generating instructions for execution by the one or more processors, and wherein executing the query comprises communicating the instructions to the one or more processors.

24. The method of claim 1, wherein defining the query processing scheme comprises allocating a plurality of processors to execute the query based on an identification of the one or more data sources.

25. The method of claim 1, wherein defining the query processing scheme comprises allocating multiple layers of processors to obtain the set of data from one or more dataset sources and process the set of data.

26. The method of claim 1, wherein defining the query processing scheme comprises determining processing requirements of the query based on commands in the query and the query-resource usage data.

27. A computing system, comprising:

one or more processing devices configured to;

track query-resource usage data corresponding to an indication of resources used to execute each of a plurality of previous queries and timing data corresponding to an execution time to obtain results for at least some of the plurality of previous queries;

track node resource utilization data related to a plurality of nodes, each node comprising one or more processors;

receive a query identifying a set of data located in one or more data sources to be processed and a manner of processing the set of data;

define a query processing scheme for obtaining and processing the set of data, wherein the query processing scheme specifies an amount of node resources to allocate to the query based at least in part on available node resources determined using the node resource utilization data and a comparison of the query with one or more of the plurality of previous queries associated with the query-resource usage data; and

execute the query based on the query processing scheme.

28. The computing system of claim 27, wherein to define the query processing scheme, the one or more processing devices are configured to determine a number of transformations to be performed on the set of data, determine an amount of time to perform each transformation based on the query-resource usage data, and allocate processors based on the amount of time to perform each transformation and the number of transformations.

29. The computing system of claim 27, wherein to define the query processing scheme, the one or more processing devices are configured to allocate a plurality of processors to execute the query based on a determined number of available processors, partitions, wherein the number of available processors are determined using the node resource utilization data.

30. Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:

track query-resource usage data corresponding to an indication of resources used to execute each of a plurality of previous queries and timing data corresponding to an execution time to obtain results for at least some of the plurality of previous queries;

track node resource utilization data related to a plurality of nodes, each node comprising one or more processors;

receive a query identifying a set of data located in one or more data sources to be processed and a manner of processing the set of data;

define a query processing scheme for obtaining and processing the set of data, wherein the query processing scheme specifies an amount of node resources to allocate to the query based at least in part on available node resources determined using the node resource utilization data and a comparison of the query with one or more of the plurality of previous queries associated with the query-resource usage data; and

execute the query based on the query processing scheme.