Thx for all help... I'm getting closer
Quote:
Originally posted by jmismas
You want to be able to write the log entry quickly- without slowing down the application. You want to avoid executing a bunch of lookups, updating indexes, etc.
The features necessary for quickly handling logging are the exact opposite of the features needed for efficient searching.
So I would ask:
How many events (average) per hour? Are there any "peak" times when a large number of events occur? How many/how often for the peak times?
Do you need to query on events that happened 2 seconds ago? two hours ago? two days ago? two years ago?
|
yes, insert is more critical than search
searching may take a while, but not too long, a few sec.s
A1: I've been trying to do a little data analysis but I've only been given logs from an hour, but I'm pretty sure the peak:s won't be much more than the avarage insertion.
A2: hm... about half an hour ago I think but minutes whould be much better
good questions btw! i should have thought of them and included them in my first post.
EDIT: A1 continued: I can't check how many insertions it isin the log-samlpe i've got right now, I'll add it as soon as I can!