{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T17:02:31Z","timestamp":1757610151761,"version":"3.44.0"},"reference-count":103,"publisher":"Association for Computing Machinery (ACM)","issue":"8","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2025,4]]},"abstract":"<jats:p>Timeseries monitoring systems such as Prometheus play a crucial role in gaining observability of the underlying system infrastructure. These systems collect timeseries metrics from various system components and perform monitoring queries over periodic window-based aggregations (i.e., rule queries). However, despite wide adoption, the operational costs and query latency of rule queries remain high. In this paper, we identify major bottlenecks associated with repeated data scans and query computations concerning window overlaps in rule queries, and present PromSketch, an approximation-first query framework as intermediate caches for monitoring systems. It enables low operational costs and query latency, by combining approximate window-based query frameworks and sketch-based precomputation. PromSketch is implemented as a standalone module that can be integrated into Prometheus and VictoriaMetrics, covering 70% of Prometheus' aggregation over time queries. Our evaluation shows that PromSketch achieves up to a two-order-of-magnitude reduction in query latency over Prometheus and VictoriaMetrics, while lowering operational dollar costs of query processing by three orders of magnitude compared to Prometheus and by at least 4\u00d7 compared to VictoriaMetrics with at most 5% average errors across statistics.<\/jats:p>","DOI":"10.14778\/3742728.3742732","type":"journal-article","created":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T13:32:53Z","timestamp":1756906373000},"page":"2348-2361","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Approximation-First Timeseries Query At Scale"],"prefix":"10.14778","volume":"18","author":[{"given":"Zeying","family":"Zhu","sequence":"first","affiliation":[{"name":"University of Maryland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jonathan","family":"Chamberlain","sequence":"additional","affiliation":[{"name":"Boston University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kenny","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Starobinski","sequence":"additional","affiliation":[{"name":"Boston University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zaoxing","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,9,3]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"2015. Prometheus: Monitoring at SoundCloud. Retrieved 2025\/05\/23 from https:\/\/github.com\/pingcap\/docs\/blob\/master\/tidb-monitoring-framework.md"},{"key":"e_1_2_1_2_1","unstructured":"2022. Amazon EC2 On-Demand Pricing. Retrieved 2025\/05\/23 from https:\/\/aws.amazon.com\/ec2\/pricing\/on-demand\/"},{"key":"e_1_2_1_3_1","unstructured":"2022. Kubernetes. Retrieved 2025\/05\/23 from https:\/\/kubernetes.io\/"},{"key":"e_1_2_1_4_1","unstructured":"2022. Prometheus handling out-of-order samples. Retrieved 2025\/05\/23 from https:\/\/promlabs.com\/blog\/2022\/12\/15\/understanding-duplicate-samples-and-out-of-order-timestamp-errors-in-prometheus\/"},{"key":"e_1_2_1_5_1","unstructured":"2022. VictoriaMetrics. Retrieved 2025\/05\/23 from https:\/\/victoriametrics.com"},{"key":"e_1_2_1_6_1","unstructured":"2024. Amazon Managed Service for Prometheus pricing. Retrieved 2025\/05\/23 from https:\/\/aws.amazon.com\/prometheus\/pricing\/"},{"key":"e_1_2_1_7_1","unstructured":"2024. Cluster VictoriaMetrics. Retrieved 2025\/05\/23 from https:\/\/docs.victoriametrics.com\/cluster-victoriametrics\/"},{"key":"e_1_2_1_8_1","unstructured":"2024. DataDog Anomaly Detection. https:\/\/docs.datadoghq.com\/monitors\/types\/anomaly\/."},{"key":"e_1_2_1_9_1","unstructured":"2024. Fastcache used by VictoriaMetrics. https:\/\/github.com\/VictoriaMetrics\/fastcache"},{"key":"e_1_2_1_10_1","unstructured":"2024. Google Cloud scales based on Monitoring metrics. https:\/\/cloud.google.com\/compute\/docs\/autoscaler\/scaling-cloud-monitoring-metrics"},{"key":"e_1_2_1_11_1","unstructured":"2024. Google Kubernetes Engine Quotas and Limits. https:\/\/cloud.google.com\/kubernetes-engine\/quotas"},{"key":"e_1_2_1_12_1","unstructured":"2024. Grafana Dashboards. https:\/\/grafana.com\/grafana\/dashboards\/."},{"key":"e_1_2_1_13_1","unstructured":"2024. Grafana Mimir. Retrieved 2025\/05\/23 from https:\/\/grafana.com\/docs\/mimir\/latest\/"},{"key":"e_1_2_1_14_1","unstructured":"2024. Grafana Mimir uses Redis or Memcached as chunks-cache index-cache results-cache and metadata-cache. https:\/\/grafana.com\/docs\/helm-charts\/mimir-distributed\/latest\/configure\/configure-redis-cache\/"},{"key":"e_1_2_1_15_1","unstructured":"2024. InfluxDB. Retrieved 2025\/05\/23 from https:\/\/www.influxdata.com\/"},{"key":"e_1_2_1_16_1","unstructured":"2024. Kubernetes monitoring with Prometheus. Retrieved 2025\/05\/23 from https:\/\/prometheus.io\/docs\/prometheus\/latest\/configuration\/configuration\/#kubernetes_sd_config"},{"key":"e_1_2_1_17_1","unstructured":"2024. Memcached. https:\/\/memcached.org."},{"key":"e_1_2_1_18_1","unstructured":"2024. Monitoring Juniper Networks with Prometheus. Retrieved 2025\/05\/23 from https:\/\/github.com\/czerwonk\/junos_exporter"},{"key":"e_1_2_1_19_1","unstructured":"2024. Open5GS Metrics with Prometheus. Retrieved 2025\/05\/23 from https:\/\/open5gs.org\/open5gs\/docs\/tutorial\/04-metrics-prometheus\/"},{"key":"e_1_2_1_20_1","unstructured":"2024. Prometheus Configurations. Retrieved 2025\/05\/23 from https:\/\/prometheus.io\/docs\/prometheus\/latest\/coniguration\/coniguration\/"},{"key":"e_1_2_1_21_1","unstructured":"2024. Prometheus functions. Retrieved 2025\/05\/23 from https:\/\/prometheus.io\/docs\/prometheus\/latest\/querying\/functions\/"},{"key":"e_1_2_1_22_1","unstructured":"2024. Prometheus Query Language. Retrieved 2025\/05\/23 from https:\/\/prometheus.io\/docs\/prometheus\/latest\/querying\/basics\/"},{"key":"e_1_2_1_23_1","unstructured":"2024. Prometheus SNMP exporter. Retrieved 2025\/05\/23 from https:\/\/github.com\/prometheus\/snmp_exporter"},{"key":"e_1_2_1_24_1","unstructured":"2024. Thanos. Retrieved 2025\/05\/23 from https:\/\/thanos.io\/"},{"key":"e_1_2_1_25_1","unstructured":"2024. VictoriaMetrics Anomaly Detection. Retrieved 2025\/05\/23 from https:\/\/victoriametrics.com\/blog\/victoriametrics-anomaly-detection-handbook-chapter-2\/index.html"},{"key":"e_1_2_1_26_1","unstructured":"2024. VictoriaMetrics backfilling support for out-of-order samples. Retrieved 2025\/05\/23 from https:\/\/docs.victoriametrics.com\/#backfilling"},{"key":"e_1_2_1_27_1","unstructured":"2024. VictoriaMetrics Deduplication. Retrieved 2025\/05\/23 from https:\/\/docs.victoriametrics.com\/#deduplication"},{"key":"e_1_2_1_28_1","unstructured":"2024. VictoriaMetrics parallel query in vm-select. https:\/\/github.com\/VictoriaMetrics\/VictoriaMetrics\/issues\/2886."},{"key":"e_1_2_1_29_1","unstructured":"2024. VictoriaMetrics Pricing compared to Prometheus. Retrieved 2025\/05\/23 from https:\/\/victoriametrics.com\/blog\/managed-prometheus-pricing\/"},{"key":"e_1_2_1_30_1","unstructured":"2024. VictoriaMetrics rollup functions. Retrieved 2025\/05\/23 from https:\/\/docs.victoriametrics.com\/metricsql\/#rollup-functions"},{"key":"e_1_2_1_31_1","doi-asserted-by":"crossref","first-page":"1057","DOI":"10.14778\/2536222.2536231","article-title":"Scuba: Diving into data at facebook","volume":"6","author":"Abraham Lior","year":"2013","unstructured":"Lior Abraham, John Allen, Oleksandr Barykin, Vinayak Borkar, Bhuwan Chopra, Ciprian Gerea, Daniel Merl, Josh Metzler, David Reiss, Subbu Subramanian, et al. 2013. Scuba: Diving into data at facebook. Proceedings of the VLDB Endowment 6, 11 (2013), 1057\u20131067.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_32_1","volume-title":"Proceedings of the 1999 ACM SIGMOD international conference on Management of data. 574\u2013576","author":"Acharya Swarup","year":"1999","unstructured":"Swarup Acharya, Phillip B Gibbons, Viswanath Poosala, and Sridhar Ramaswamy. 1999. The aqua approximate query answering system. In Proceedings of the 1999 ACM SIGMOD international conference on Management of data. 574\u2013576."},{"key":"e_1_2_1_33_1","volume-title":"Proceedings of the 8th ACM European conference on computer systems. 29\u201342","author":"Agarwal Sameer","year":"2013","unstructured":"Sameer Agarwal, Barzan Mozafari, Aurojit Panda, Henry Milner, Samuel Madden, and Ion Stoica. 2013. BlinkDB: queries with bounded errors and bounded response times on very large data. In Proceedings of the 8th ACM European conference on computer systems. 29\u201342."},{"key":"e_1_2_1_34_1","volume-title":"Proceedings of the 26th Symposium on Operating Systems Principles. 647\u2013664","author":"Agrawal Nitin","year":"2017","unstructured":"Nitin Agrawal and Ashish Vulimiri. 2017. Low-latency analytics on colossal data streams with summarystore. In Proceedings of the 26th Symposium on Operating Systems Principles. 647\u2013664."},{"key":"e_1_2_1_35_1","unstructured":"Manos Antonakakis Tim April Michael Bailey Matt Bernhard Elie Bursztein Jaime Cochran Zakir Durumeric J Alex Halderman Luca Invernizzi Michalis Kallitsis et al. 2017. Understanding the mirai botnet. In 26th USENIX security symposium (USENIX Security 17). 1093\u20131110."},{"key":"e_1_2_1_36_1","volume-title":"Proceedings of the twenty-third ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems. 286\u2013296","author":"Arasu Arvind","year":"2004","unstructured":"Arvind Arasu and Gurmeet Singh Manku. 2004. Approximate counts and quantiles over sliding windows. In Proceedings of the twenty-third ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems. 286\u2013296."},{"key":"e_1_2_1_37_1","unstructured":"Awesome Prometheus alerts 2024. Awesome Prometheus alerts. Retrieved 2025\/05\/23 from https:\/\/samber.github.io\/awesome-prometheus-alerts\/"},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the 14th International Conference on Emerging Networking EXperiments and Technologies. 254\u2013266","author":"Basat Ran Ben","year":"2018","unstructured":"Ran Ben Basat, Gil Einziger, Isaac Keslassy, Ariel Orda, Shay Vargaftik, and Erez Waisbard. 2018. Memento: Making sliding windows efficient for heavy hitters. In Proceedings of the 14th International Conference on Emerging Networking EXperiments and Technologies. 254\u2013266."},{"key":"e_1_2_1_39_1","volume-title":"IEEE INFOCOM 2016-The 35th Annual IEEE International Conference on Computer Communications. IEEE, 1\u20139.","author":"Ben-Basat Ran","year":"2016","unstructured":"Ran Ben-Basat, Gil Einziger, Roy Friedman, and Yaron Kassner. 2016. Heavy hitters in streams and sliding windows. In IEEE INFOCOM 2016-The 35th Annual IEEE International Conference on Computer Communications. IEEE, 1\u20139."},{"key":"e_1_2_1_40_1","doi-asserted-by":"crossref","first-page":"2072","DOI":"10.1007\/s00453-018-0524-4","article-title":"Succinct summing over sliding windows","volume":"81","author":"Basat Ran Ben","year":"2019","unstructured":"Ran Ben Basat, Gil Einziger, Roy Friedman, and Yaron Kassner. 2019. Succinct summing over sliding windows. Algorithmica 81 (2019), 2072\u20132091.","journal-title":"Algorithmica"},{"key":"e_1_2_1_41_1","volume-title":"Kolmogorov-smirnov test: Overview","author":"Berger Vance W","year":"2014","unstructured":"Vance W Berger and YanYan Zhou. 2014. Kolmogorov-smirnov test: Overview. Wiley statsref: Statistics reference online (2014)."},{"key":"e_1_2_1_42_1","doi-asserted-by":"crossref","first-page":"422","DOI":"10.1145\/362686.362692","article-title":"Space\/time trade-offs in hash coding with allowable errors","volume":"13","author":"Bloom Burton H","year":"1970","unstructured":"Burton H Bloom. 1970. Space\/time trade-offs in hash coding with allowable errors. Commun. ACM 13, 7 (1970), 422\u2013426.","journal-title":"Commun. ACM"},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of the 35th ACM SIGMOD-SIGACT-SIGAI Symposium on Principles of Database Systems. 261\u2013276","author":"Braverman Vladimir","year":"2016","unstructured":"Vladimir Braverman, Stephen R Chestnut, David P Woodruff, and Lin F Yang. 2016. Streaming space complexity of nearly all functions of one variable on frequency vectors. In Proceedings of the 35th ACM SIGMOD-SIGACT-SIGAI Symposium on Principles of Database Systems. 261\u2013276."},{"key":"e_1_2_1_44_1","volume-title":"48th Annual IEEE Symposium on Foundations of Computer Science (FOCS'07)","author":"Braverman Vladimir","year":"2007","unstructured":"Vladimir Braverman and Rafail Ostrovsky. 2007. Smooth histograms for sliding windows. In 48th Annual IEEE Symposium on Foundations of Computer Science (FOCS'07). IEEE, 283\u2013293."},{"key":"e_1_2_1_45_1","volume-title":"Proceedings of the forty-second ACM symposium on Theory of computing. 281\u2013290","author":"Braverman Vladimir","year":"2010","unstructured":"Vladimir Braverman and Rafail Ostrovsky. 2010. Zero-one frequency laws. In Proceedings of the forty-second ACM symposium on Theory of computing. 281\u2013290."},{"key":"e_1_2_1_46_1","volume-title":"2010 IEEE International Conference on Data Mining Workshops. IEEE, 1297\u20131303","author":"Chabchoub Yousra","year":"2010","unstructured":"Yousra Chabchoub and Georges He\u00e9brail. 2010. Sliding hyperloglog: Estimating cardinality in a data stream over a sliding window. In 2010 IEEE International Conference on Data Mining Workshops. IEEE, 1297\u20131303."},{"key":"e_1_2_1_47_1","volume-title":"Proceedings of the 26th international conference on world wide web. 381\u2013389","author":"Chang Shiyu","year":"2017","unstructured":"Shiyu Chang, Yang Zhang, Jiliang Tang, Dawei Yin, Yi Chang, Mark A Hasegawa-Johnson, and Thomas S Huang. 2017. Streaming recommender systems. In Proceedings of the 26th international conference on world wide web. 381\u2013389."},{"volume-title":"International Colloquium on Automata, Languages, and Programming","author":"Charikar Moses","key":"e_1_2_1_48_1","unstructured":"Moses Charikar, Kevin Chen, and Martin Farach-Colton. 2002. Finding frequent items in data streams. In International Colloquium on Automata, Languages, and Programming. Springer, 693\u2013703."},{"key":"e_1_2_1_49_1","volume-title":"how we validate our Prometheus alert rules","author":"Cloudflare Blog","year":"2024","unstructured":"Cloudflare Blog - Monitoring our monitoring: how we validate our Prometheus alert rules 2024. Cloudflare Blog - Monitoring our monitoring: how we validate our Prometheus alert rules. Retrieved 2025\/05\/23 from https:\/\/blog.cloudflare.com\/monitoring-our-monitoring\/"},{"key":"e_1_2_1_50_1","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1016\/j.jalgor.2003.12.001","article-title":"An improved data stream summary: the count-min sketch and its applications","volume":"55","author":"Cormode Graham","year":"2005","unstructured":"Graham Cormode and Shan Muthukrishnan. 2005. An improved data stream summary: the count-min sketch and its applications. Journal of Algorithms 55, 1 (2005), 58\u201375.","journal-title":"Journal of Algorithms"},{"key":"e_1_2_1_51_1","volume-title":"Proceedings of the 2003 ACM SIGMOD international conference on Management of data. 647\u2013651","author":"Cranor Chuck","year":"2003","unstructured":"Chuck Cranor, Theodore Johnson, Oliver Spataschek, and Vladislav Shkapenyuk. 2003. Gigascope: A stream database for network applications. In Proceedings of the 2003 ACM SIGMOD international conference on Management of data. 647\u2013651."},{"key":"e_1_2_1_52_1","series-title":"SIAM journal on computing 31, 6","volume-title":"Maintaining stream statistics over sliding windows","author":"Datar Mayur","year":"2002","unstructured":"Mayur Datar, Aristides Gionis, Piotr Indyk, and Rajeev Motwani. 2002. Maintaining stream statistics over sliding windows. SIAM journal on computing 31, 6 (2002), 1794\u20131813."},{"volume-title":"Kubernetes Auto-Scaling: YoYo attack vulnerability and mitigation. Master's thesis","author":"David Ronen Ben","key":"e_1_2_1_53_1","unstructured":"Ronen Ben David. 2021. Kubernetes Auto-Scaling: YoYo attack vulnerability and mitigation. Master's thesis. Reichman University (Israel)."},{"key":"e_1_2_1_54_1","volume-title":"Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications. 323\u2013336","author":"Estan Cristian","year":"2002","unstructured":"Cristian Estan and George Varghese. 2002. New directions in traffic measurement and accounting. In Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications. 323\u2013336."},{"key":"e_1_2_1_55_1","doi-asserted-by":"crossref","first-page":"2174","DOI":"10.14778\/3407790.3407817","article-title":"Coopstore: Optimizing precomputed summaries for aggregation","volume":"13","author":"Gan Edward","year":"2020","unstructured":"Edward Gan, Peter Bailis, and Moses Charikar. 2020. Coopstore: Optimizing precomputed summaries for aggregation. Proceedings of the VLDB Endowment 13, 12 (2020), 2174\u20132187.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_56_1","unstructured":"Google ClusterData 2019 traces 2020. Google ClusterData 2019 traces. Retrieved 2025\/05\/23 from https:\/\/github.com\/google\/cluster-data\/blob\/master\/ClusterData2019.md"},{"key":"e_1_2_1_57_1","volume-title":"Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. 1015\u20131025","author":"Gou Xiangyang","year":"2020","unstructured":"Xiangyang Gou, Long He, Yinda Zhang, Ke Wang, Xilai Liu, Tong Yang, Yi Wang, and Bin Cui. 2020. Sliding sketches: A framework using time zones for data stream processing in sliding windows. In Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. 1015\u20131025."},{"key":"e_1_2_1_58_1","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1145\/376284.375670","article-title":"Space-efficient online computation of quantile summaries","volume":"30","author":"Greenwald Michael","year":"2001","unstructured":"Michael Greenwald and Sanjeev Khanna. 2001. Space-efficient online computation of quantile summaries. ACM SIGMOD Record 30, 2 (2001), 58\u201366.","journal-title":"ACM SIGMOD Record"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.24432\/C58K54"},{"key":"e_1_2_1_60_1","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1145\/253262.253274","article-title":"Range queries in OLAP data cubes","volume":"26","author":"Ho Ching-Tien","year":"1997","unstructured":"Ching-Tien Ho, Rakesh Agrawal, Nimrod Megiddo, and Ramakrishnan Srikant. 1997. Range queries in OLAP data cubes. ACM SIGMOD Record 26, 2 (1997), 73\u201388.","journal-title":"ACM SIGMOD Record"},{"key":"e_1_2_1_61_1","volume-title":"Proceedings of the 16th Workshop on Hot Topics in Operating Systems. 150\u2013155","author":"Huang Peng","year":"2017","unstructured":"Peng Huang, Chuanxiong Guo, Lidong Zhou, Jacob R Lorch, Yingnong Dang, Murali Chintalapati, and Randolph Yao. 2017. Gray failure: The achilles' heel of cloud-scale systems. In Proceedings of the 16th Workshop on Hot Topics in Operating Systems. 150\u2013155."},{"key":"e_1_2_1_62_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3366709","article-title":"I know what you did last summer: Network monitoring using interval queries","volume":"3","author":"Ivkin Nikita","year":"2019","unstructured":"Nikita Ivkin, Ran Ben Basat, Zaoxing Liu, Gil Einziger, Roy Friedman, and Vladimir Braverman. 2019. I know what you did last summer: Network monitoring using interval queries. Proceedings of the ACM on Measurement and Analysis of Computing Systems 3, 3 (2019), 1\u201328.","journal-title":"Proceedings of the ACM on Measurement and Analysis of Computing Systems"},{"key":"e_1_2_1_63_1","doi-asserted-by":"crossref","first-page":"797","DOI":"10.14778\/2732951.2732953","article-title":"M4: a visualization-oriented time series data aggregation","volume":"7","author":"Jugel Uwe","year":"2014","unstructured":"Uwe Jugel, Zbigniew Jerzak, Gregor Hackenbroich, and Volker Markl. 2014. M4: a visualization-oriented time series data aggregation. Proceedings of the VLDB Endowment 7, 10 (2014), 797\u2013808.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_64_1","volume-title":"Proceedings of the twenty-ninth annual ACM symposium on Theory of computing. 654\u2013663","author":"Karger David","year":"1997","unstructured":"David Karger, Eric Lehman, Tom Leighton, Rina Panigrahy, Matthew Levine, and Daniel Lewin. 1997. Consistent hashing and random trees: Distributed caching protocols for relieving hot spots on the world wide web. In Proceedings of the twenty-ninth annual ACM symposium on Theory of computing. 654\u2013663."},{"volume-title":"Optimal quantile approximation in streams. In 2016 ieee 57th annual symposium on foundations of computer science (focs)","author":"Karnin Zohar","key":"e_1_2_1_65_1","unstructured":"Zohar Karnin, Kevin Lang, and Edo Liberty. 2016. Optimal quantile approximation in streams. In 2016 ieee 57th annual symposium on foundations of computer science (focs). IEEE, 71\u201378."},{"key":"e_1_2_1_66_1","volume-title":"Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining. 447\u2013456","author":"Koren Yehuda","year":"2009","unstructured":"Yehuda Koren. 2009. Collaborative filtering with temporal dynamics. In Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining. 447\u2013456."},{"key":"e_1_2_1_67_1","doi-asserted-by":"crossref","first-page":"145","DOI":"10.1145\/1140103.1140295","article-title":"Data streaming algorithms for estimating entropy of network traffic","volume":"34","author":"Lall Ashwin","year":"2006","unstructured":"Ashwin Lall, Vyas Sekar, Mitsunori Ogihara, Jun Xu, and Hui Zhang. 2006. Data streaming algorithms for estimating entropy of network traffic. ACM SIGMETRICS Performance Evaluation Review 34, 1 (2006), 145\u2013156.","journal-title":"ACM SIGMETRICS Performance Evaluation Review"},{"key":"e_1_2_1_68_1","volume-title":"Proceedings of the 2021 International Conference on Management of Data. 1129\u20131141","author":"Liang Xi","year":"2021","unstructured":"Xi Liang, Stavros Sintos, Zechao Shang, and Sanjay Krishnan. 2021. Combining aggregation and sampling (nearly) optimally for approximate query processing. In Proceedings of the 2021 International Conference on Management of Data. 1129\u20131141."},{"key":"e_1_2_1_69_1","doi-asserted-by":"publisher","unstructured":"Xi Liang Stavros Sintos Zechao Shang and Sanjay Krishnan. 2021. Combining Aggregation and Sampling (Nearly) Optimally for Approximate Query Processing. 10.48550\/ARXIV.2103.15994","DOI":"10.48550\/ARXIV.2103.15994"},{"key":"e_1_2_1_70_1","volume-title":"2020 IEEE 36th International Conference on Data Engineering (ICDE). IEEE","author":"Lim Gangmuk","year":"2020","unstructured":"Gangmuk Lim, Mohamed S Hassan, Ze Jin, Stavros Volos, and Myeongjae Jeon. 2020. Approximate quantiles for datacenter telemetry monitoring. In 2020 IEEE 36th International Conference on Data Engineering (ICDE). IEEE, 1914\u20131917."},{"key":"e_1_2_1_71_1","volume-title":"Proceedings of the 2016 ACM SIGCOMM Conference. 101\u2013114","author":"Liu Zaoxing","year":"2016","unstructured":"Zaoxing Liu, Antonis Manousis, Gregory Vorsanger, Vyas Sekar, and Vladimir Braverman. 2016. One sketch to rule them all: Rethinking network flow monitoring with univmon. In Proceedings of the 2016 ACM SIGCOMM Conference. 101\u2013114."},{"key":"e_1_2_1_72_1","volume-title":"Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating Volumetric DDoS Attacks with Programmable Switches. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Liu Zaoxing","year":"2021","unstructured":"Zaoxing Liu, Hun Namkung, Georgios Nikolaidis, Jeongkeun Lee, Changhoon Kim, Xin Jin, Vladimir Braverman, Minlan Yu, and Vyas Sekar. 2021. Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating Volumetric DDoS Attacks with Programmable Switches. In 30th USENIX Security Symposium (USENIX Security 21). 3829\u20133846."},{"key":"e_1_2_1_73_1","volume-title":"Database Systems for Advanced Applications: 15th International Conference, DASFAA 2010, Tsukuba, Japan, April 1\u20134, 2010, Proceedings, Part I 15","author":"Lu Xuesong","year":"2010","unstructured":"Xuesong Lu, Wee Hyong Tok, Chedy Raissi, and St\u00e9phane Bressan. 2010. A simple, yet effective and efficient, sliding window sampling algorithm. In Database Systems for Advanced Applications: 15th International Conference, DASFAA 2010, Tsukuba, Japan, April 1\u20134, 2010, Proceedings, Part I 15. Springer, 337\u2013351."},{"key":"e_1_2_1_74_1","volume-title":"Proceedings of the 2003 ACM SIGMOD international conference on Management of data. 491\u2013502","author":"Madden Samuel","year":"2003","unstructured":"Samuel Madden, Michael J Franklin, Joseph M Hellerstein, and Wei Hong. 2003. The design of an acquisitional query processor for sensor networks. In Proceedings of the 2003 ACM SIGMOD international conference on Management of data. 491\u2013502."},{"key":"e_1_2_1_75_1","volume-title":"Zaoxing Liu, and Vyas Sekar.","author":"Manousis Antonis","year":"2022","unstructured":"Antonis Manousis, Zhuo Cheng, Ran Ben Basat, Zaoxing Liu, and Vyas Sekar. 2022. Enabling efficient and general subpopulation analytics in multidimensional data streams. arXiv preprint arXiv:2208.04927 (2022)."},{"key":"e_1_2_1_76_1","doi-asserted-by":"crossref","first-page":"2091","DOI":"10.14778\/3659437.3659460","article-title":"Visualization-aware Time Series Min-Max Caching with Error Bound Guarantees","volume":"17","author":"Maroulis Stavros","year":"2024","unstructured":"Stavros Maroulis, Vassilis Stamatopoulos, George Papastefanatos, and Manolis Terrovitis. 2024. Visualization-aware Time Series Min-Max Caching with Error Bound Guarantees. Proceedings of the VLDB Endowment 17, 8 (2024), 2091\u20132103.","journal-title":"Proceedings of the VLDB Endowment"},{"volume-title":"Observability in kubernetes cluster: Automatic anomalies detection using prometheus. In 2020 IEEE 22nd International Conference on High Performance Computing and Communications","author":"Mart Octavian","key":"e_1_2_1_77_1","unstructured":"Octavian Mart, Catalin Negru, Florin Pop, and Aniello Castiglione. 2020. Observability in kubernetes cluster: Automatic anomalies detection using prometheus. In 2020 IEEE 22nd International Conference on High Performance Computing and Communications; IEEE 18th International Conference on Smart City; IEEE 6th International Conference on Data Science and Systems (HPCC\/SmartCity\/DSS). IEEE, 565\u2013570."},{"key":"e_1_2_1_78_1","volume-title":"2018 IEEE Symposium on Computers and Communications (ISCC). IEEE, 00813\u201300818","author":"Marzano Artur","year":"2018","unstructured":"Artur Marzano, David Alexander, Osvaldo Fonseca, Elverton Fazzion, Cristine Hoepers, Klaus Steding-Jessen, Marcelo HPC Chaves, \u00cdtalo Cunha, Dorgival Guedes, and Wagner Meira. 2018. The evolution of bashlite and mirai iot botnets. In 2018 IEEE Symposium on Computers and Communications (ISCC). IEEE, 00813\u201300818."},{"key":"e_1_2_1_79_1","volume-title":"DDSketch: A fast and fully-mergeable quantile sketch with relative-error guarantees. arXiv preprint arXiv:1908.10693","author":"Masson Charles","year":"2019","unstructured":"Charles Masson, Jee E Rim, and Homin K Lee. 2019. DDSketch: A fast and fully-mergeable quantile sketch with relative-error guarantees. arXiv preprint arXiv:1908.10693 (2019)."},{"key":"e_1_2_1_80_1","volume-title":"2012 Proceedings of the Fourteenth Workshop on Algorithm Engineering and Experiments (ALENEX). SIAM, 160\u2013174","author":"Mitzenmacher Michael","year":"2012","unstructured":"Michael Mitzenmacher, Thomas Steinke, and Justin Thaler. 2012. Hierarchical heavy hitters with the space saving algorithm. In 2012 Proceedings of the Fourteenth Workshop on Algorithm Engineering and Experiments (ALENEX). SIAM, 160\u2013174."},{"key":"e_1_2_1_81_1","volume-title":"2023 16th International Conference on Security of Information and Networks (SIN). IEEE, 1\u20139.","author":"Moosa Muhammad Aashiq","year":"2023","unstructured":"Muhammad Aashiq Moosa, Apurva K Vangujar, and Dnyanesh Pramod Mahajan. 2023. Detection and Analysis of DDoS Attack Using a Collaborative Network Monitoring Stack. In 2023 16th International Conference on Security of Information and Networks (SIN). IEEE, 1\u20139."},{"key":"e_1_2_1_82_1","volume-title":"IEEE Global Telecommunications Conference, 2004. GLOBECOM '04.","volume":"4","author":"Ohsita Y.","year":"2043","unstructured":"Y. Ohsita, S. Ata, and M. Murata. 2004. Detecting distributed denial-of-service attacks by analyzing TCP SYN packets statistically. In IEEE Global Telecommunications Conference, 2004. GLOBECOM '04., Vol. 4. 2043\u20132049 Vol.4. 10.1109\/GLOCOM.2004.1378371"},{"key":"e_1_2_1_83_1","unstructured":"Packets-per-second limits in EC2 2019. Packets-per-second limits in EC2. Retrieved 2025\/05\/23 from https:\/\/stressgrid.com\/blog\/pps_limits_in_ec2\/"},{"key":"e_1_2_1_84_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2930659","article-title":"PEAS: A performance evaluation framework for auto-scaling strategies in cloud applications","volume":"1","author":"Papadopoulos Alessandro Vittorio","year":"2016","unstructured":"Alessandro Vittorio Papadopoulos, Ahmed Ali-Eldin, Karl-Erik \u00c5rz\u00e9n, Johan Tordsson, and Erik Elmroth. 2016. PEAS: A performance evaluation framework for auto-scaling strategies in cloud applications. ACM Transactions on Modeling and Performance Evaluation of Computing Systems (TOMPECS) 1, 4 (2016), 1\u201331.","journal-title":"ACM Transactions on Modeling and Performance Evaluation of Computing Systems (TOMPECS)"},{"key":"e_1_2_1_85_1","volume-title":"Sketch-based querying of distributed sliding-window data streams. arXiv preprint arXiv:1207.0139","author":"Papapetrou Odysseas","year":"2012","unstructured":"Odysseas Papapetrou, Minos Garofalakis, and Antonios Deligiannakis. 2012. Sketch-based querying of distributed sliding-window data streams. arXiv preprint arXiv:1207.0139 (2012)."},{"key":"e_1_2_1_86_1","volume-title":"Proceedings of the 2018 International Conference on Management of Data. 1461\u20131476","author":"Park Yongjoo","year":"2018","unstructured":"Yongjoo Park, Barzan Mozafari, Joseph Sorenson, and Junhao Wang. 2018. Verdictdb: Universalizing approximate query processing. In Proceedings of the 2018 International Conference on Management of Data. 1461\u20131476."},{"key":"e_1_2_1_87_1","doi-asserted-by":"crossref","first-page":"1816","DOI":"10.14778\/2824032.2824078","article-title":"Gorilla: A fast, scalable, in-memory time series database","volume":"8","author":"Pelkonen Tuomas","year":"2015","unstructured":"Tuomas Pelkonen, Scott Franklin, Justin Teller, Paul Cavallaro, Qi Huang, Justin Meza, and Kaushik Veeraraghavan. 2015. Gorilla: A fast, scalable, in-memory time series database. Proceedings of the VLDB Endowment 8, 12 (2015), 1816\u20131827.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_88_1","volume-title":"Proceedings of the 2018 International Conference on Management of Data. 1477\u20131492","author":"Peng Jinglin","year":"2018","unstructured":"Jinglin Peng, Dongxiang Zhang, Jiannan Wang, and Jian Pei. 2018. Aqp++ connecting approximate query processing with aggregate precomputation for interactive analytics. In Proceedings of the 2018 International Conference on Management of Data. 1477\u20131492."},{"key":"e_1_2_1_89_1","volume-title":"Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems. 532\u2013536","author":"Pope James","year":"2021","unstructured":"James Pope, Francesco Raimondo, Vijay Kumar, Ryan McConville, Rob Piechocki, George Oikonomou, Thomas Pasquier, Bo Luo, Dan Howarth, Ioannis Mavromatis, et al. 2021. Container escape detection for edge devices. In Proceedings of the 19th ACM Conference on Embedded Networked Sensor Systems. 532\u2013536."},{"key":"e_1_2_1_90_1","volume-title":"2021 IEEE International Mediterranean Conference on Communications and Networking (MeditCom). IEEE, 519\u2013524","author":"Priovolos Athanasios","year":"2021","unstructured":"Athanasios Priovolos, Dimitris Lioprasitis, Georgios Gardikis, and Socrates Costicoglou. 2021. Using anomaly detection techniques for securing 5G infrastructure and applications. In 2021 IEEE International Mediterranean Conference on Communications and Networking (MeditCom). IEEE, 519\u2013524."},{"key":"e_1_2_1_91_1","unstructured":"PromCon 2023 - Yet Another Streaming PromQL Engine 2023. PromCon 2023 - Yet Another Streaming PromQL Engine. Retrieved 2025\/05\/23 from https:\/\/www.youtube.com\/watch?v=3kM2Asj6hcg"},{"key":"e_1_2_1_92_1","unstructured":"Prometheus Metrics based autoscaling in Kubernetes 2023. Prometheus Metrics based autoscaling in Kubernetes. Retrieved 2025\/05\/23 from https:\/\/gcore.com\/learning\/prometheus-metrics-based-autoscaling-in-kubernetes\/"},{"key":"e_1_2_1_93_1","doi-asserted-by":"crossref","first-page":"3715","DOI":"10.14778\/3611540.3611559","article-title":"Lindorm TSDB: A Cloud-Native Time-Series Database for Large-Scale Monitoring Systems","volume":"16","author":"Shen Chunhui","year":"2023","unstructured":"Chunhui Shen, Qianyu Ouyang, Feibo Li, Zhipeng Liu, Longcheng Zhu, Yujie Zou, Qing Su, Tianhuan Yu, Yi Yi, Jianhong Hu, et al. 2023. Lindorm TSDB: A Cloud-Native Time-Series Database for Large-Scale Monitoring Systems. Proceedings of the VLDB Endowment 16, 12 (2023), 3715\u20133727.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_94_1","volume-title":"Proceedings of the 2015 ACM Conference on Special Interest Group on Data Communication. 103\u2013104","author":"Sides Mor","year":"2015","unstructured":"Mor Sides, Anat Bremler-Barr, and Elisha Rosensweig. 2015. Yo-Yo Attack: vulnerability in auto-scaling mechanism. In Proceedings of the 2015 ACM Conference on Special Interest Group on Data Communication. 103\u2013104."},{"key":"e_1_2_1_95_1","unstructured":"Thanos Downsampling Resolution and Retention 2024. Thanos Downsampling Resolution and Retention. Retrieved 2025\/05\/23 from https:\/\/thanos.io\/v0.8\/components\/compact\/"},{"key":"e_1_2_1_96_1","unstructured":"The CAIDA UCSD Anonymized Internet Traces 2024. The CAIDA UCSD Anonymized Internet Traces. https:\/\/www.caida.org\/catalog\/datasets\/passive_dataset\/. Online."},{"volume-title":"Monitoring with Prometheus","author":"Turnbull James","key":"e_1_2_1_97_1","unstructured":"James Turnbull. 2018. Monitoring with Prometheus. Turnbull Press."},{"key":"e_1_2_1_98_1","doi-asserted-by":"crossref","first-page":"1080","DOI":"10.14778\/3447689.3447710","article-title":"Heracles: an efficient storage model and data flushing for performance monitoring timeseries","volume":"14","author":"Wang Zhiqi","year":"2021","unstructured":"Zhiqi Wang, Jin Xue, and Zili Shao. 2021. Heracles: an efficient storage model and data flushing for performance monitoring timeseries. Proceedings of the VLDB Endowment 14, 6 (2021), 1080\u20131092.","journal-title":"Proceedings of the VLDB Endowment"},{"key":"e_1_2_1_99_1","volume-title":"Google Promethues: A practical guide to alerting at scale. Retrieved 2025\/05\/23 from https:\/\/docs.google.com\/presentation\/d\/1X1rKozAUuF2MVc1YXElFWq9wkcWv3Axdldl8LOH9Vik\/edit#slide=id.g598ef96a6_0_341","author":"Wilkinson Jamie","year":"2016","unstructured":"Jamie Wilkinson. 2016. Google Promethues: A practical guide to alerting at scale. Retrieved 2025\/05\/23 from https:\/\/docs.google.com\/presentation\/d\/1X1rKozAUuF2MVc1YXElFWq9wkcWv3Axdldl8LOH9Vik\/edit#slide=id.g598ef96a6_0_341"},{"key":"e_1_2_1_100_1","volume-title":"Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining. 2660\u20132671","author":"Wu Yuhan","year":"2023","unstructured":"Yuhan Wu, Shiqi Jiang, Siyuan Dong, Zheng Zhong, Jiale Chen, Yutong Hu, Tong Yang, Steve Uhlig, and Bin Cui. 2023. MicroscopeSketch: Accurate Sliding Estimation Using Adaptive Zooming. In Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining. 2660\u20132671."},{"key":"e_1_2_1_101_1","volume-title":"Proceedings of the 26th Annual International Conference on Mobile Computing and Networking. 1\u201314","author":"Yang Mingran","year":"2020","unstructured":"Mingran Yang, Junbo Zhang, Akshay Gadre, Zaoxing Liu, Swarun Kumar, and Vyas Sekar. 2020. Joltik: enabling energy-efficient\" future-proof\" analytics on low-power wide-area networks. In Proceedings of the 26th Annual International Conference on Mobile Computing and Networking. 1\u201314."},{"key":"e_1_2_1_102_1","volume-title":"Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. 2584\u20132593","author":"Yang Tong","year":"2018","unstructured":"Tong Yang, Junzhi Gong, Haowei Zhang, Lei Zou, Lei Shi, and Xiaoming Li. 2018. Heavyguardian: Separate and guard hot items in data streams. In Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. 2584\u20132593."},{"key":"e_1_2_1_103_1","volume-title":"Proceedings of ACM SIGKDD. 2285\u20132293","author":"Zhao Bohan","year":"2021","unstructured":"Bohan Zhao, Xiang Li, Boyu Tian, Zhiyu Mei, and Wenfei Wu. 2021. Dhs: Adaptive memory layout organization of sketch slots for fast and accurate data stream processing. In Proceedings of ACM SIGKDD. 2285\u20132293."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3742728.3742732","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T13:36:21Z","timestamp":1756906581000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3742728.3742732"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4]]},"references-count":103,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["10.14778\/3742728.3742732"],"URL":"https:\/\/doi.org\/10.14778\/3742728.3742732","relation":{},"ISSN":["2150-8097"],"issn-type":[{"type":"print","value":"2150-8097"}],"subject":[],"published":{"date-parts":[[2025,4]]},"assertion":[{"value":"2025-09-03","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}