Smart query layer with rolled up data
- Dominant language
- Java
- Stars
- 6.1k
- Forks
- 1.5k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 189
Description
Our use case is to provide users with capability to slice and dice data over varying time intervals. The user may look at certain metric over last month and then zoom in to a specific week, day or hour to further analyze the data.
For this we plan to store raw segments, as well have rollup jobs (using minion) to have aggregated data for day, month etc. With this, we will only lose the granularity of the time column but will not lose any of the old dimensions.
To take an example:
-------------------------------
Event Timestamp | Org | Device | Rule Id | Process Name | Process Hash | Count
-- | -- | -- | -- | -- | -- | --
2020/05/01 00:13:11 | Coke | Amit-01 | 111 | cmd.exe | 12345678 | 3
2020/05/01 00:20:11 | Pepsi | Rahul-01 | 222 | java.exe | 98765432 | 1
2020/05/01 00:30:11 | Coke | Amit-01 | 111 | cmd.exe | 12345678 | 1
2020/05/01 00:44:11 | Coke | Amit-01 | 111 | cmd.exe | 12345678 | 1
2020/05/01 00:55:11 | Coke | Amit-01 | 222 | java.exe | 98765432 | 1
But if we rollup the data to hour granularity from second granularity in the above example, we will have the following data in rolled up segment. As you can see, no loss of dimensions, only loss of granularity of time:
Event Timestamp | Org | Device | Rule Id | Process Name | Process Hash | Count
-- | -- | -- | -- | -- | -- | --
2020/05/01 0000 | Coke | Amit-01 | 111 | cmd.exe | 12345678 | 5
2020/05/01 0000 | Pepsi | Rahul-01 | 222 | java.exe | 98765432 | 1
2020/05/01 0000 | Coke | Amit-01 | 222 | java.exe | 98765432 | 1
Now, given these raw as well rolled up segments (for day, week, hour), it would be great if the broker can understand and decide which segment to use, depending on the query time interval.
Also attached a diagram to show the rollup and smart query pictorially
Contributor guide
Research direction
The issue names no files, tests, or concrete entry points. Begin by tracing the broker query path and the Minion rollup jobs, then determine how raw, hourly, daily, and weekly segments are represented and selected. Done means queries choose an appropriate segment for the requested interval without losing the listed dimensions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100