Comparison of RDBMS and document oriented database in audit log analysis

Chanankorn Jandaeng

DOI: https://doi.org/10.1109/iciteed.2015.7408967

2015-10-01

Abstract:The network monitoring system (NMS) monitors network service and system, resource capacity plan, statistics and accounting, fault management and performance; such as throughput, latency and round trip time. Audit log is a importance data source that are used for network behaviour analysis. There are a terabyte of traffic and event log that needed any database system to store and reply any query. This paper study the traditional log database (text file), MySQL and MongoDB to be implemented in network monitoring system. The storage growth and execution time are the performance metrics of this experimental. The result show that MongoDB consume storage more that other database system. However, the storage grown as stepwise function. In the execution time perspective, MongoDB process and reply query result within $\mu s$ that less than MySQL and text file. Because MongoDB file management is B-Tree, it result in searching time grown as $O(log(n)$). Whereas big O of searching in MySQL without indexing is $O(n)$.