The disclosed systems and methods can provide a closed-loop system that enables network
operators to perform streaming analytics for network monitoring applications at scale. The
disclosed systems and methods can allow operators to express network monitoring queries
as operations over tuples, and can allow them to partition the queries across both switches
and a stream processor, and, through iterative refinement, attempt to extract only the traffic
that pertains to the query, thus ensuring that the stream processor can scale to satisfy a large …