Distributed log condition query method and system based on cuckoo filter

Abstract

The invention discloses a distributed log condition query method and system based on a cuckoo filter, which comprises the following steps of: acquiring a condition query request sent by a client, performing data query in a pre-constructed hot database according to the condition query request, and judging whether the total amount of queried data is lower than the data amount corresponding to the condition query request or not; if yes, processing the condition query request to obtain an identification character string, taking the identification character string as a key (Key), and carrying out data query in the unpopular condition cache layer to judge whether a value (Value) corresponding to the key exists in the unpopular condition cache layer; if not, executing query operation in a pre-constructed cold database data sub-table according to the condition query request to obtain a condition query result, processing the condition query data result to generate a JSON character string, taking the identification character string as a key, taking the JSON character string as a value to form a key-value pair, and storing the key-value pair in the unpopular condition cache layer.

Description

technical field [0001] The invention belongs to the field of computer technology, and more specifically relates to a distributed log condition query method and system based on a cuckoo filter. Background technique [0002] With the rapid popularization of Internet of Things technology, terminal equipment in the field of industrial control will generate a huge amount of log data every day for security analysis, evaluation and statistical management of terminal equipment. How to conveniently and quickly perform targeted conditional query in the huge industrial control log data set that exists for several months or even years has become a common and severe problem that the industrial control management system needs to face. [0003] The existing log condition query methods include pre-distributed sub-databases or sub-tables of the database and then query operations, caching of data, and the like. Database sharding refers to dividing a single database into multiple databases ac...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the above defects or improvement needs of the prior art, the present invention provides a distributed log condition query method and system based on a cuckoo filter. The technical problem of query time consumption, and the existing method of pre-segmenting tables for the database needs to face the technical problem of system performance degradation caused by too many sub-tables, and the existing method of adding data cache in the system cannot effectively solve the condition When querying, the query requirements of multi-field condition matching, spend a lot of time, and greatly affect the technical problems of the overall performance of the system

Images