Distributed network analytics

A non-transitory computer-readable data storage medium storing one or more sequences of instruction which, when executed by one or more processors, cause performing a method comprising:

• receiving, at any of one or more analytics engines each hosted on one or more computing devices, from a separate analytics application, an analytics query for data that is potentially available in one or more data streams of one or more networked computing devices;
• rewriting the analytics query into one or more sub-queries configured to operate on specific raw data streams to produce resulting raw or summarized data streams, and a super-query that is configured to consolidate the resulting raw or summarized data streams to produce results for the analytics query;
• initiating, at the analytics engine, execution of the super-query;
• sending, from the analytics engine to a distributed network analytics controller, the one or more sub-queries and one or more locations to send the one or more resulting raw or summarized data streams;
• determining, at the distributed network analytics controller, one or more distributed network analytics agents capable of executing each of the one or more sub-queries;
• sending, from the distributed network analytics controller to one or more of the analytics agents respectively hosted by the one or more networked computing devices, programming instructions to initiate the one or more sub-queries for the data and the one or more locations;
• in response to the programming instructions received at each particular one of the one or more analytics agents at the one or more networked computing devices, performing:
• initiating execution of the sub-queries on the one or more data streams that are locally available at one of the one or more networked computing devices at which that particular one of the analytics agents is running;
• forming one or more summarized data streams and zero or more raw data streams at the one of the one or more networked computing devices at which that particular one of the analytics agents is running;
• sending the one or more summarized data streams and the zero or more raw data streams to the desired location at the analytics engine.

A method comprising:

• receiving, at any of one or more analytics engines each hosted on one or more computing devices, from a separate analytics application, an analytics query for data that is potentially available in one or more data streams of one or more networked computing devices;
• sending, to a distributed network analytics controller, one or more sub-queries based on the analytics query;
• determining one or more distributed network analytics agents capable of executing each of the one or more sub-queries;
• sending instructions to the agents to initiate the one or more sub-queries for the data at one or more specified locations;
• initiating execution of the one or more sub-queries on one or more data streams that are locally available at one of the one or more networked computing devices at which the agents are running;
• forming one or more summarized data streams and zero or more raw data streams at the one of the one or more networked computing devices of the analytics agents;
• sending the one or more summarized data streams and the zero or more raw data streams to the analytics engine;
• wherein the method is performed by one or more computing devices.