Cisco Systems, Inc.
Efficient time based correlation of data streams

Abstract:

Techniques for efficient data correlation are provided. A first data partition is received, and a first hash table of a plurality of hash tables is selected based on a timestamp associated with the first data partition. Additionally, a first hash bucket in the first hash table is identified based on the first data partition. It is determined that the first hash bucket includes a second data partition. Upon determining that the first hash bucket satisfies a predefined criterion, the second data partition is removed from the first hash bucket, and the first and second data partitions are associated.