US 12,169,498 B1
Creating and searching tiered metric time series object storage
Uday Sagar Shiramshetty, Fremont, CA (US); Mitchell Grayer Eisenstat, Menlo Park, CA (US); and Chowie Chunyan Lin, San Jose, CA (US)
Assigned to SPLUNK Inc., San Francisco, CA (US)
Filed by SPLUNK Inc., San Francisco, CA (US)
Filed on Jan. 26, 2023, as Appl. No. 18/160,250.
Int. Cl. G06F 16/00 (2019.01); G06F 16/2458 (2019.01); G06F 16/248 (2019.01); G06F 16/28 (2019.01)
CPC G06F 16/2477 (2019.01) [G06F 16/248 (2019.01); G06F 16/285 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
identifying, by a computer system, a query for metric time series (MTS) objects stored within the computer system, the query including an indication of one or more characteristics of the MTS objects and a result threshold indicating a maximum number of matching MTS objects to be returned in response to the query;
searching, by the computer system, one or more in-memory tables of the computer system to determine a first group of matches to the query;
comparing, by the computer system, a number of matches within the first group of matches to the result threshold;
in response to determining that the number of matches within the first group of matches is equal to or greater than the result threshold, returning, by the computer system, the first group of matches as results of the query; and
in response to determining that the number of matches within the first group of matches is less than the result threshold:
searching, by the computer system, one or more on-disk tables of the computer system to determine a second group of matches to the query,
combining, by the computer system, the first group of matches and the second group of matches to create a combined group of matches to the query, and
returning, by the computer system, the combined group of matches as results of the query.