SlideShare a Scribd company logo
idBigData Meetup #17
SQL Big Data Analytics
Open Source Solution for Big Data Analyst Workflow
Institut Teknologi Bandung, 28 September 2017
Sigit Prasetyo
sigit.prasetyo@idbigdata.com
@sigitpras303
linkedin.com/in/sigitprasetyo303
flikr.com/photografer-kw3
Sigit Prasetyo
Open Source Solution for Data Analyst Workflow
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Data-Driven Company
A data-driven company is an organization where every person who can
use data to make better decisions, has access to the data they need
when they need it.
Being data-driven is not about seeing a few canned reports at the
beginning of every day or week; it's about giving the business
decision makers the power to explore data independently, even
if they're working with big or disparate data sources.
https://www.infoworld.com/article/3074322/big-data/what-is-a-data-driven-company.html
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Moneyball
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Data Journey
Data Collection
01
Data Preparation
02
Data Exploration
03
Data Formatting
04
Data Presentation
05
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
What is Data Analysts ?
Data Analysts are experienced data professionals in their organization who
can query and process data, provide reports, summarize and
visualize data.
They have a strong understanding of how to leverage existing tools and
methods to solve a problem, and help people from across the company
understand specific queries with ad-hoc reports and charts.
Skills: Data Analysts need to have a baseline
understanding of some core skills: statistics,
data munging, data visualization, exploratory
data analysis,
https://cognitiveclass.ai/blog/data-scientist-vs-data-engineer/
Tools: Microsoft Excel, SPSS, SPSS Modeler,
SAS, SAS Miner, SQL, Microsoft Access,
Tableau, SSAS
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Big Data Data Analyst Certification
Required Skills
Prepare the Data
Use Extract, Transfer, Load (ETL) processes to
prepare data for queries.
Provide Structure to the Data
Use Data Definition Language (DDL) statements
to create or alter structures in the metastore for
use by Hive and Impala.
Data Analysis
Use Query Language (QL) statements in Hive and
Impala to analyze data on the cluster.
Certification Exam Subject Areas
1. Extract, Transform, and Load Data with Apache
Pig
2. Manipulate Data with Apache Pig
3. Create tables and load data in Apache Hive
4. Query data with Apache Hive
5. SQL Queries with Drill
6. Working with Self-Describing Data
7. Advanced Topics including Troubleshooting
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Why SQL ?
SQL : Structured Query Language
A very high level language
(Almost) Every application use database
Easier to find a SQL developer
The easiest step to enter Hadoop
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
SQL On Hadoop
Schema-free SQL Query Engine
for Hadoop, NoSQL and Cloud
Storage
OLTP and operational analytics
for Apache Hadoop
Data warehouse software
facilitates reading, writing, and
managing large datasets residing
in distributed storage using SQL.
The open source, native analytic
database for Apache Hadoop*
A big data warehouse system on
Hadoop
Apache Hadoop Native SQL.
Advanced, MPP, elastic query
engine and analytic database for
enterprises*
Distributed SQL Query Engine for
Big Data
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Why not Excel ?
Easy to use
Flat database
(Almost) Complete tool for data analyst (formula, statistic, chart)
What if ..
Bigger data
Complex relational
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Let’s Play Lego
Read simple to complex data
Data exploration + Ad Hoc Query
Data visualization
Machine Learning
HDFS + MAPREDUCE + HIVE + ZEPPELIN
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
SQL Data Analytics Sandbox
VirtualBox
Linux Mint OS 18.2
Apache Hadoop Vanila
Single NodeYARN - Resource Management
HDFS HDFS HDFS
Hadoop Distributed File System
HDFS
MapReduce
Execution Engine
MapReduce
Execution Engine
Data Preparation
Data Exploration
Apache Zeppelin
https://github.com/project303/dasb
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Apache Hive
Initially developed by Facebook
Included in most Hadoop distro (Cloudera, Hortonworks, MapR, Yava)
Built In Function and User Defined Function
Transactional (ACID)
Has Index
Support Procedural Language
Machine Learning - HiveMall*
Supported Execution Engine
- MapReduce
- Apache Tez
- Spark
JDBC connection support
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Apache Zeppelin
Interactive Notebook
Web Front End
Multiple Interpreter
Built-in Visualization
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Proof Of Concept
Perform Squid Access Log Data Analysis.
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and
more. It reduces bandwidth and improves response times by caching and
reusing frequently-requested web pages.
Scenario :
Load data access.log into HDFS
Analyze whether there is something uncommon in it by using Hive
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Know Your Data
Data Format : text file that contain 10 fields and separated by space for each field
remotehost rfc931 authuser [date] "request" status size referer agent tcp_code
Field Description :
1. Remotehost
Remote hostname (or IP number if DNS hostname is not
available, or if DNSLookup is Off.
2. Rfc931
The remote logname of the user.
3. User ID
The username as which the user has authenticated himself.
Always NULL ("-") for Squid logs.
4. [date]
Date and time of the request.
5. "Request"
The request line exactly as it came from the client. GET,
HEAD, POST, etc. for HTTP requests. ICP_QUERY for ICP
requests.
6. Status
The HTTP status code returned to the client. See the HTTP
status codes for a complete list.
7. Size
The content-length of data transferred in byte.
8. Referer
9. Agent
Application that access the internet
10. TCP Code
The ``cache result'' of the request. This describes if the
request was a cache hit or miss, and if the object was
refreshed
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Know Your Data
Sample Data :
192.168.6.129 - - [17/Sep/2017:00:00:21 +0700] "GET
http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1" 200 862 "-"
"Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)" TCP_MISS:DIRECT
192.168.6.103 - - [17/Sep/2017:00:01:14 +0700] "POST http://netmarbleslog.netmarble.com/
HTTP/1.0" 200 299 "-" "okhttp/2.5.0" TCP_MISS:DIRECT
Remotehost : 192.168.129
[date] : [17/Sep/2017:00:00:21 +0700]
"Request" :
"GET http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1"
Status : 200
Size : 862
Agent :
"Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)"
TCP Code : TCP_MISS:DIRECT
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Starting Apache Zeppelin
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Accessing Zeppelin
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Preparation
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Load Data To HDFS
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Create External Table
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
RegexSerDe
Sample Data :
192.168.6.129 - - [17/Sep/2017:00:00:21 +0700] "GET
http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1" 200 862 "-"
"Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)" TCP_MISS:DIRECT
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
View Table Content
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Create View
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Let’s Tell The Story
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Monday Traffic Behaviour
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
IP Traffic Behaviour
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Agent Name
Status → 403 Forbidden
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
The Most Used Agent
idBigData.com IDBigData idBigData @idBigData hub.idBigData.com
Thank You & Stay Connected
s.id/idbigdata
Credit for icon
Gregor Cresnar
www.flaticon.com/authors/gregor-cresnar
Prosymbols
www.flaticon.com/authors/prosymbols
Freepik
www.freepik.com
Pavel Kozlov
www.flaticon.com/authors/pavel-kozlov
Yannick
www.flaticon.com/authors/yannick
Dave Gandy
www.flaticon.com/authors/dave-gandy
SimpleIcon
www.flaticon.com/authors/simpleicon

More Related Content

PDF
Apache Druid Vision and Roadmap
PDF
MongoDB .local Toronto 2019: Keep your Business Safe and Scaling Holistically...
PDF
Apache Druid®: A Dance of Distributed Processes
PPTX
Why data warehouses cannot support hot analytics
PDF
Db2 event store
PPT
Migrating legacy ERP data into Hadoop
PPTX
The convergence of reporting and interactive BI on Hadoop
PDF
Big SQL: Powerful SQL Optimization - Re-Imagined for open source
Apache Druid Vision and Roadmap
MongoDB .local Toronto 2019: Keep your Business Safe and Scaling Holistically...
Apache Druid®: A Dance of Distributed Processes
Why data warehouses cannot support hot analytics
Db2 event store
Migrating legacy ERP data into Hadoop
The convergence of reporting and interactive BI on Hadoop
Big SQL: Powerful SQL Optimization - Re-Imagined for open source

What's hot (20)

PPTX
The rise of big data governance: insight on this emerging trend from active o...
PPTX
Continuous Data Ingestion pipeline for the Enterprise
PPTX
Securing your Big Data Environments in the Cloud
PDF
Benefits of Hadoop as Platform as a Service
PPTX
Journey to the Data Lake: How Progressive Paved a Faster, Smoother Path to In...
PDF
Azure Big data
PDF
Neo4j – The Fastest Path to Scalable Real-Time Analytics
PDF
Review on Big Data Security in Hadoop
PPTX
Enterprise large scale graph analytics and computing base on distribute graph...
PDF
How To Use Kafka and Druid to Tame Your Router Data (Rachel Pedreschi, Imply ...
PPTX
Hadoop Journey at Walgreens
PPTX
BI on Big Data with instant response times at Verizon
PPTX
Democratizing data science Using spark, hive and druid
PDF
Risk Management Framework Using Intel FPGA, Apache Spark, and Persistent RDDs...
PPTX
Practical advice to build a data driven company
PPTX
Navigating the World of User Data Management and Data Discovery
PPTX
Beyond Kerberos and Ranger - Tips to discover, track and manage risks in hybr...
PPTX
Security, ETL, BI & Analytics, and Software Integration
PPTX
Big Data Application Architectures - IoT
The rise of big data governance: insight on this emerging trend from active o...
Continuous Data Ingestion pipeline for the Enterprise
Securing your Big Data Environments in the Cloud
Benefits of Hadoop as Platform as a Service
Journey to the Data Lake: How Progressive Paved a Faster, Smoother Path to In...
Azure Big data
Neo4j – The Fastest Path to Scalable Real-Time Analytics
Review on Big Data Security in Hadoop
Enterprise large scale graph analytics and computing base on distribute graph...
How To Use Kafka and Druid to Tame Your Router Data (Rachel Pedreschi, Imply ...
Hadoop Journey at Walgreens
BI on Big Data with instant response times at Verizon
Democratizing data science Using spark, hive and druid
Risk Management Framework Using Intel FPGA, Apache Spark, and Persistent RDDs...
Practical advice to build a data driven company
Navigating the World of User Data Management and Data Discovery
Beyond Kerberos and Ranger - Tips to discover, track and manage risks in hybr...
Security, ETL, BI & Analytics, and Software Integration
Big Data Application Architectures - IoT
Ad

Similar to Open Source Solution for Data Analyst Workflow (20)

PDF
Big Data Analytics from Azure Cloud to Power BI Mobile
PDF
Microsoft Ignite AU 2017 - Orchestrating Big Data Pipelines with Azure Data F...
PDF
Ibm db2 big sql
PPTX
Big Data with hadoop, Spark and BigQuery (Google cloud next Extended 2017 Kar...
PPTX
Gimel and PayPal Notebooks @ TDWI Leadership Summit Orlando
PDF
Ibm db2update2019 icp4 data
PPTX
Data Con LA 2018 - A tale of two BI standards: Data warehouses and data lakes...
PDF
Democratization of Data @Indix
PPTX
Build Big Data Enterprise solutions faster on Azure HDInsight
PDF
CodeCamp Iasi - Creating serverless data analytics system on GCP using BigQuery
PDF
QuerySurge Slide Deck for Big Data Testing Webinar
PPTX
SQLSaturday #230 - Introduction to Microsoft Big Data (Part 1)
PPTX
Big Data on Azure Tutorial
PDF
Scaling and Modernizing Data Platform with Databricks
PDF
Big Data LDN 2018: A TALE OF TWO BI STANDARDS: DATA WAREHOUSES AND DATA LAKES
PDF
InfoSphere BigInsights - Analytics power for Hadoop - field experience
PPTX
Vmware Serengeti - Based on Infochimps Ironfan
DOCX
Nagarjuna_Damarla_Resume
PPTX
Data science big data and analytics
PPTX
Hd insight overview
Big Data Analytics from Azure Cloud to Power BI Mobile
Microsoft Ignite AU 2017 - Orchestrating Big Data Pipelines with Azure Data F...
Ibm db2 big sql
Big Data with hadoop, Spark and BigQuery (Google cloud next Extended 2017 Kar...
Gimel and PayPal Notebooks @ TDWI Leadership Summit Orlando
Ibm db2update2019 icp4 data
Data Con LA 2018 - A tale of two BI standards: Data warehouses and data lakes...
Democratization of Data @Indix
Build Big Data Enterprise solutions faster on Azure HDInsight
CodeCamp Iasi - Creating serverless data analytics system on GCP using BigQuery
QuerySurge Slide Deck for Big Data Testing Webinar
SQLSaturday #230 - Introduction to Microsoft Big Data (Part 1)
Big Data on Azure Tutorial
Scaling and Modernizing Data Platform with Databricks
Big Data LDN 2018: A TALE OF TWO BI STANDARDS: DATA WAREHOUSES AND DATA LAKES
InfoSphere BigInsights - Analytics power for Hadoop - field experience
Vmware Serengeti - Based on Infochimps Ironfan
Nagarjuna_Damarla_Resume
Data science big data and analytics
Hd insight overview
Ad

Recently uploaded (20)

PPTX
mbdjdhjjodule 5-1 rhfhhfjtjjhafbrhfnfbbfnb
PPT
ISS -ESG Data flows What is ESG and HowHow
PPTX
SAP 2 completion done . PRESENTATION.pptx
PPTX
IBA_Chapter_11_Slides_Final_Accessible.pptx
PDF
Mega Projects Data Mega Projects Data
PPTX
01_intro xxxxxxxxxxfffffffffffaaaaaaaaaaafg
PPTX
ALIMENTARY AND BILIARY CONDITIONS 3-1.pptx
PDF
Business Analytics and business intelligence.pdf
PPTX
oil_refinery_comprehensive_20250804084928 (1).pptx
PDF
Introduction to Data Science and Data Analysis
PPTX
STUDY DESIGN details- Lt Col Maksud (21).pptx
PPTX
DISORDERS OF THE LIVER, GALLBLADDER AND PANCREASE (1).pptx
PDF
Introduction to the R Programming Language
PPTX
IB Computer Science - Internal Assessment.pptx
PPTX
Supervised vs unsupervised machine learning algorithms
PPTX
Microsoft-Fabric-Unifying-Analytics-for-the-Modern-Enterprise Solution.pptx
PPTX
Data_Analytics_and_PowerBI_Presentation.pptx
PPT
Reliability_Chapter_ presentation 1221.5784
PPTX
Introduction to machine learning and Linear Models
PDF
BF and FI - Blockchain, fintech and Financial Innovation Lesson 2.pdf
mbdjdhjjodule 5-1 rhfhhfjtjjhafbrhfnfbbfnb
ISS -ESG Data flows What is ESG and HowHow
SAP 2 completion done . PRESENTATION.pptx
IBA_Chapter_11_Slides_Final_Accessible.pptx
Mega Projects Data Mega Projects Data
01_intro xxxxxxxxxxfffffffffffaaaaaaaaaaafg
ALIMENTARY AND BILIARY CONDITIONS 3-1.pptx
Business Analytics and business intelligence.pdf
oil_refinery_comprehensive_20250804084928 (1).pptx
Introduction to Data Science and Data Analysis
STUDY DESIGN details- Lt Col Maksud (21).pptx
DISORDERS OF THE LIVER, GALLBLADDER AND PANCREASE (1).pptx
Introduction to the R Programming Language
IB Computer Science - Internal Assessment.pptx
Supervised vs unsupervised machine learning algorithms
Microsoft-Fabric-Unifying-Analytics-for-the-Modern-Enterprise Solution.pptx
Data_Analytics_and_PowerBI_Presentation.pptx
Reliability_Chapter_ presentation 1221.5784
Introduction to machine learning and Linear Models
BF and FI - Blockchain, fintech and Financial Innovation Lesson 2.pdf

Open Source Solution for Data Analyst Workflow

  • 1. idBigData Meetup #17 SQL Big Data Analytics Open Source Solution for Big Data Analyst Workflow Institut Teknologi Bandung, 28 September 2017 Sigit Prasetyo
  • 4. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Data-Driven Company A data-driven company is an organization where every person who can use data to make better decisions, has access to the data they need when they need it. Being data-driven is not about seeing a few canned reports at the beginning of every day or week; it's about giving the business decision makers the power to explore data independently, even if they're working with big or disparate data sources. https://www.infoworld.com/article/3074322/big-data/what-is-a-data-driven-company.html
  • 5. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Moneyball
  • 6. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Data Journey Data Collection 01 Data Preparation 02 Data Exploration 03 Data Formatting 04 Data Presentation 05
  • 7. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com What is Data Analysts ? Data Analysts are experienced data professionals in their organization who can query and process data, provide reports, summarize and visualize data. They have a strong understanding of how to leverage existing tools and methods to solve a problem, and help people from across the company understand specific queries with ad-hoc reports and charts. Skills: Data Analysts need to have a baseline understanding of some core skills: statistics, data munging, data visualization, exploratory data analysis, https://cognitiveclass.ai/blog/data-scientist-vs-data-engineer/ Tools: Microsoft Excel, SPSS, SPSS Modeler, SAS, SAS Miner, SQL, Microsoft Access, Tableau, SSAS
  • 8. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Big Data Data Analyst Certification Required Skills Prepare the Data Use Extract, Transfer, Load (ETL) processes to prepare data for queries. Provide Structure to the Data Use Data Definition Language (DDL) statements to create or alter structures in the metastore for use by Hive and Impala. Data Analysis Use Query Language (QL) statements in Hive and Impala to analyze data on the cluster. Certification Exam Subject Areas 1. Extract, Transform, and Load Data with Apache Pig 2. Manipulate Data with Apache Pig 3. Create tables and load data in Apache Hive 4. Query data with Apache Hive 5. SQL Queries with Drill 6. Working with Self-Describing Data 7. Advanced Topics including Troubleshooting
  • 9. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Why SQL ? SQL : Structured Query Language A very high level language (Almost) Every application use database Easier to find a SQL developer The easiest step to enter Hadoop
  • 10. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com SQL On Hadoop Schema-free SQL Query Engine for Hadoop, NoSQL and Cloud Storage OLTP and operational analytics for Apache Hadoop Data warehouse software facilitates reading, writing, and managing large datasets residing in distributed storage using SQL. The open source, native analytic database for Apache Hadoop* A big data warehouse system on Hadoop Apache Hadoop Native SQL. Advanced, MPP, elastic query engine and analytic database for enterprises* Distributed SQL Query Engine for Big Data
  • 11. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Why not Excel ? Easy to use Flat database (Almost) Complete tool for data analyst (formula, statistic, chart) What if .. Bigger data Complex relational
  • 12. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Let’s Play Lego Read simple to complex data Data exploration + Ad Hoc Query Data visualization Machine Learning HDFS + MAPREDUCE + HIVE + ZEPPELIN
  • 13. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com SQL Data Analytics Sandbox VirtualBox Linux Mint OS 18.2 Apache Hadoop Vanila Single NodeYARN - Resource Management HDFS HDFS HDFS Hadoop Distributed File System HDFS MapReduce Execution Engine MapReduce Execution Engine Data Preparation Data Exploration Apache Zeppelin https://github.com/project303/dasb
  • 14. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Apache Hive Initially developed by Facebook Included in most Hadoop distro (Cloudera, Hortonworks, MapR, Yava) Built In Function and User Defined Function Transactional (ACID) Has Index Support Procedural Language Machine Learning - HiveMall* Supported Execution Engine - MapReduce - Apache Tez - Spark JDBC connection support
  • 15. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Apache Zeppelin Interactive Notebook Web Front End Multiple Interpreter Built-in Visualization
  • 16. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Proof Of Concept Perform Squid Access Log Data Analysis. Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Scenario : Load data access.log into HDFS Analyze whether there is something uncommon in it by using Hive
  • 17. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Know Your Data Data Format : text file that contain 10 fields and separated by space for each field remotehost rfc931 authuser [date] "request" status size referer agent tcp_code Field Description : 1. Remotehost Remote hostname (or IP number if DNS hostname is not available, or if DNSLookup is Off. 2. Rfc931 The remote logname of the user. 3. User ID The username as which the user has authenticated himself. Always NULL ("-") for Squid logs. 4. [date] Date and time of the request. 5. "Request" The request line exactly as it came from the client. GET, HEAD, POST, etc. for HTTP requests. ICP_QUERY for ICP requests. 6. Status The HTTP status code returned to the client. See the HTTP status codes for a complete list. 7. Size The content-length of data transferred in byte. 8. Referer 9. Agent Application that access the internet 10. TCP Code The ``cache result'' of the request. This describes if the request was a cache hit or miss, and if the object was refreshed
  • 18. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Know Your Data Sample Data : 192.168.6.129 - - [17/Sep/2017:00:00:21 +0700] "GET http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1" 200 862 "-" "Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)" TCP_MISS:DIRECT 192.168.6.103 - - [17/Sep/2017:00:01:14 +0700] "POST http://netmarbleslog.netmarble.com/ HTTP/1.0" 200 299 "-" "okhttp/2.5.0" TCP_MISS:DIRECT Remotehost : 192.168.129 [date] : [17/Sep/2017:00:00:21 +0700] "Request" : "GET http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1" Status : 200 Size : 862 Agent : "Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)" TCP Code : TCP_MISS:DIRECT
  • 19. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Starting Apache Zeppelin
  • 20. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Accessing Zeppelin
  • 21. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Preparation
  • 22. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Load Data To HDFS
  • 23. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Create External Table
  • 24. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com RegexSerDe Sample Data : 192.168.6.129 - - [17/Sep/2017:00:00:21 +0700] "GET http://api.account.xiaomi.com/pass/v2/safe/user/coreInfo? HTTP/1.1" 200 862 "-" "Dalvik/2.1.0 (Linux; U; Android 5.1.1; 2014817 MIUI/V8.5.1.0.LHJMIED)" TCP_MISS:DIRECT
  • 25. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com View Table Content
  • 26. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Create View
  • 27. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Let’s Tell The Story
  • 28. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Monday Traffic Behaviour
  • 29. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com IP Traffic Behaviour
  • 30. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Agent Name Status → 403 Forbidden
  • 31. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com The Most Used Agent
  • 32. idBigData.com IDBigData idBigData @idBigData hub.idBigData.com Thank You & Stay Connected s.id/idbigdata Credit for icon Gregor Cresnar www.flaticon.com/authors/gregor-cresnar Prosymbols www.flaticon.com/authors/prosymbols Freepik www.freepik.com Pavel Kozlov www.flaticon.com/authors/pavel-kozlov Yannick www.flaticon.com/authors/yannick Dave Gandy www.flaticon.com/authors/dave-gandy SimpleIcon www.flaticon.com/authors/simpleicon