Abstract: Systems and methods for processing structured queries over clusters are provided herein. An example system includes a plurality of clusters, wherein a local cluster is configured to receive, from a client, a structured query language (SQL) structured query, determine, based on the SQL structured query, a list of remote clusters of the plurality of clusters, process the SQL structured query to generate a local query executable by a local search engine of the local cluster and remote queries executable by remote search engines of the remote clusters, send the remote queries to the remote clusters to obtain remote results, execute the local query to obtain local results, combine the remote results and the local results to obtain an aggregated result, and return the aggregated result to the client.

Abstract: Provided are methods and systems for searching event sequences. An example method includes receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence; executing the first query over a first dataset to determine a first event; executing the second query over a second dataset to determine a second event, the second event occurring after the first event; and generating, in response to the request, a further sequence including the first event and the second event. The method may include executing the first query over the first dataset to determine a third event and verifying that the third event has occurred after the second event.

Abstract: Provided are methods and systems for searching event sequences. An example method includes receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence; executing the first query over a first dataset to determine a first event; executing the second query over a second dataset to determine a second event, the second event occurring after the first event; and generating, in response to the request, a further sequence including the first event and the second event. The method may include executing the first query over the first dataset to determine a third event and verifying that the third event has occurred after the second event.

Abstract: Provided are methods and systems for searching event sequences. An example method includes receiving a request including a sequence of queries, the sequence of queries including a first query and a second query, the second query succeeding the first query in the sequence; executing the first query over a first dataset to determine a first event; executing the second query over a second dataset to determine a second event, the second event occurring after the first event; and generating, in response to the request, a further sequence including the first event and the second event. The method may include executing the first query over the first dataset to determine a third event and verifying that the third event has occurred after the second event.

Abstract: Systems and methods for processing structured queries over clusters are provided herein. An example system includes a plurality of clusters, wherein a local cluster is configured to receive, from a client, a structured query language (SQL) structured query, determine, based on the SQL structured query, a list of remote clusters of the plurality of clusters, process the SQL structured query to generate a local query executable by a local search engine of the local cluster and remote queries executable by remote search engines of the remote clusters, send the remote queries to the remote clusters to obtain remote results, execute the local query to obtain local results, combine the remote results and the local results to obtain an aggregated result, and return the aggregated result to the client.

Abstract: Systems and methods for processing structured queries as search queries are provided herein. An example system includes a structured query language (SQL) parser that parses a SQL structured query into a tree structure; an analyzer module that generates a logical plan from the tree structure; a planner module that generates an optimized logical plan from the logical plan; and an execution module that: generates a physical plan from the optimized logical plan, the physical plan comprising a search query that can be executed by a search engine; and returns results of the search query to a client.

Abstract: Systems and methods for processing structured queries as search queries are provided herein. An example system includes a structured query language (SQL) parser that parses a SQL structured query into a tree structure; an analyzer module that generates a logical plan from the tree structure; a planner module that generates an optimized logical plan from the logical plan; and an execution module that: generates a physical plan from the optimized logical plan, the physical plan comprising a search query that can be executed by a search engine; and returns results of the search query to a client.