CPC G06F 3/0629 (2013.01) [G06F 3/0604 (2013.01); G06F 3/0644 (2013.01); G06F 3/0673 (2013.01)] | 20 Claims |
1. A method, comprising:
receiving, by a system comprising a processor, a flush cycle for a flushing of expired events in a storage system, wherein the storage system comprises multiple events in a data stream, and wherein the flush cycle comprises a first amount of time that elapses between iterations of performing the flushing of the expired events in the storage system;
determining, based on the first amount of time, a time slice that comprises a second amount of time, wherein a slice index node is configured to store indications of events that occur during the second amount of time within an index of the storage system;
creating the slice index node for the time slice in response to determining that a first occurrence time of a first event of the events that enters the storage system in the data stream corresponds to the second amount of time, wherein the slice index node comprises a first index node of the first event in the storage system;
adding the slice index node to the index of the storage system; and
storing the indications of the events that occur during a time period that corresponds to the second amount of time within the slice index node.
|