Event Sequences Search
AssigneeElasticsearch B.V.
InventorStefan-Costin Leau
Life of this patent
Estimating the term…
Abstract
Provided are methods and systems for searching event sequences. An example method includes receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence; executing the first query over a first dataset to determine a first event; executing the second query over a second dataset to determine a second event, the second event occurring after the first event; and generating, in response to the request, a further sequence including the first event and the second event. The method may include executing the first query over the first dataset to determine a third event and verifying that the third event has occurred after the second event.
Claims18
A method for searching event sequences, the method comprising:
- receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence;
- executing the first query over a first dataset to determine a first event;
- executing the second query over a second dataset to determine a second event, the second event occurring after the first event;
- determining that the second event precedes an event A1 and event A2, wherein the event A1 and the event A2 are results of executing the first query and the event A1 occurring prior to the event A2;
- preventing the event A1 from generating the further sequence;
- and
- generating, in response to the request, a further sequence including the first event and the second event.
A system for event sequences search, the system comprising:
- at least one processor;
- and
- a memory communicatively coupled to the processor, the memory storing instructions executable by the at least one processor to perform a method comprising:
- receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence;
- executing the first query over a first dataset to determine a first event;
- executing the second query over a second dataset to determine a second event, the second event occurring after the first event;
- determining that the second event precedes an event A1 and event A2, wherein the event A1 and the event A2 are results of executing the first query and the event A1 occurring prior to the event A2;
- preventing the event A1 from generating the further sequence;
- and
- generating, in response to the request, a further sequence including the first event and the second event.
A non-transitory computer-readable storage medium having embodied thereon instructions, which when executed by at least one processor, perform steps of a method, the method comprising:
- receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence;
- executing the first query over a first dataset to determine a first event;
- executing the second query over a second dataset to determine a second event, the second event occurring after the first event;
- determining that the second event precedes an event A1 and event A2, wherein the event A1 and the event A2 are results of executing the first query and the event A1 occurring prior to the event A2;
- preventing the event A1 from generating the further sequence;
- and
- generating, in response to the request, a further sequence including the first event and the second event.
Dependencies are inferred from the claim text.