Query summary generation using row-column data storage
First Claim
Patent Images
1. A method of generating a query summary from data stored in a column store and a row store in a data storage system, the method comprising:
- receiving a query;
determining query summary fields comprised of a subset of fields from a schema used to store data in the row store;
determining if all the query summary fields are stored in the column store;
if all the query summary fields are stored in the column store, searching the column store for query results in the query summary fields;
if one of the query summary fields is not stored in the column store, searching the row store instead of the column store for the query results in the query summary fields;
generating, by a processor, a query summary from the query results in the query summary fields;
receiving a drill down request pertaining to the query summary, the drill down request identifying a query summary field;
determining that the query summary field is not a field of the schema used to store data in the row store;
in response to determining that the query summary field is not a field of the schema, creating a discovered field and adding the discovered field to the row store; and
searching the row store using tokens associated with the discovered field to retrieve events matching the query for the query summary field, to satisfy the drill down request.
8 Assignments
0 Petitions
Accused Products
Abstract
A data storage system includes a column store and a row store. The data storage system may generate a query summary. The data storage system determines query summary fields comprised of a subset of fields from a schema used to store data in the row store. The data storage system searches the column store or the row store for query results in the query summary fields. A query summary field is generated from the query results in the query summary fields.
14 Citations
14 Claims
-
1. A method of generating a query summary from data stored in a column store and a row store in a data storage system, the method comprising:
-
receiving a query; determining query summary fields comprised of a subset of fields from a schema used to store data in the row store; determining if all the query summary fields are stored in the column store; if all the query summary fields are stored in the column store, searching the column store for query results in the query summary fields; if one of the query summary fields is not stored in the column store, searching the row store instead of the column store for the query results in the query summary fields; generating, by a processor, a query summary from the query results in the query summary fields; receiving a drill down request pertaining to the query summary, the drill down request identifying a query summary field; determining that the query summary field is not a field of the schema used to store data in the row store; in response to determining that the query summary field is not a field of the schema, creating a discovered field and adding the discovered field to the row store; and searching the row store using tokens associated with the discovered field to retrieve events matching the query for the query summary field, to satisfy the drill down request. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A non-transitory computer readable medium including machine readable instructions that when executed by a processor perform a method of generating a query summary from data stored in a column store and a row store in a data storage system, the instructions comprising instructions to:
-
receive a query; determine query summary fields comprised of a subset of fields from a schema used to store data in the row store; determine if all the query summary fields are stored in the column store; if all the query summary fields are stored in the column store, search the column store for query results in the query summary fields; if one of the query summary fields is not stored in the column store, search the row store instead of the column store for the query results in the query summary fields; generate a query summary from the query results in the query summary fields; receive a drill down request pertaining to the query summary, the drill down request identifying a query summary field; determine that the query summary field is not a field of the schema used to store data in the row store; in response to determining that the query summary field is not a field of the schema, create a discovered field and adding the discovered field to the row store; and search the row store using tokens associated with the discovered field to retrieve events matching the query for the query summary field, to satisfy the drill down request. - View Dependent Claims (10, 11, 12, 13)
-
-
14. A data storage system comprising:
-
a processor to receive a query; determine query summary fields comprised of a subset of fields from a schema used to store data in the row store; determine if all the query summary fields are stored in the column store; if all the query summary fields are stored in the column store, search the column store for query results in the query summary fields; if one of the query summary fields is not stored in the column store, search the row store instead of the column store for the query results in the query summary fields; generate a query summary from the query results in the query summary fields; receive a drill down request pertaining to the query summary, the drill down request identifying a query summary field; determine that the query summary field is not a field of the schema used to store data in the row store; in response to determining that the query summary field is not a field of the schema, create a discovered field and adding the discovered field to the row store; and search the row store using tokens associated with the discovered field to retrieve events matching the query for the query summary field, to satisfy the drill down request; and a memory to store the query summary.
-
Specification