Data ingestion by distributed-computing systems

A non-transitory computer-readable storage medium storing one or more programs configured to be executed by one or more processors of a distributed-computing system, the distributed-computing system implementing a management plane and a data plane, the one or more programs including instructions for:

• processing log data received from one or more data sources, wherein the log data is generated by one or more components of an information processing system external to the distributed-computing system;
• storing the log data at a management node of the management plane;
• selecting, from a plurality of data cores, a data core to ingest the log data, wherein the plurality of data cores are stored across one or more data plane containers of the data plane;
• processing the log data to generate one or more event records corresponding to one or more log events that occurred at the information processing system;
• and
• providing the one or more event records to the selected data core, wherein the providing causes the data plane to store the one or more event records in the selected data core wherein the log data received from the information processing system includes time stamps indicating a time at which each of the one or more log events occurred at the information processing system.

A distributed-computing system for data ingestion, wherein the distributed-computing system implements a management plane and a data plane, the distributed-computing system comprising:

• one or more processors;
• and
• memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for:
• processing log data received from one or more data sources, the log data generated by one or more components of an information processing system external to the distributed-computing system;
• storing the data at a management node of the management plane;
• selecting, from a plurality of data cores, a data core to ingest the log data, wherein the plurality of data cores are stored across one or more data plane containers of the data plane;
• processing the log data to generate one or more event records corresponding to one or more log events that occurred at the information processing system;
• and
• providing the one or more event records to the selected data core, wherein the providing causes the data plane to store the one or more event records in the selected data core wherein the log data received from the information processing system includes time stamps indicating a time at which each of the one or more log events occurred at the information processing system.