PREVENTION OF EVENT FLOODING

• US 20120260251A1
• Filed: 04/04/2012
• Published: 10/11/2012
• Est. Priority Date: 04/05/2011
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Wharmby, Andrew Dean, Collins, Ann Eleanor, He, Jenny Jing, Papageorgiou, Anthony Philip
• Application Number:
  US13/439,714
• Publication Number:
  US 20120260251A1
• Time in Patent Office: Days
• US Class Current: 718/100
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3072 where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
• CPC Class Codes: H04L 41/147 for predicting network behaviour
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/16 Threshold monitoring

Abstract

An apparatus and method for preventing event flooding in an event processing system, the apparatus comprising: responsive to receiving, by an analysis component, monitored activity data, an analysis component for analysing the monitored activity data, to determine a potential event; responsive to determining a potential event, an analysis component identifying a set of threshold values and determining whether the potential event has met a threshold value of the set of threshold values; responsive to a positive determination, an analysis component for determining if the met threshold value is an identical threshold value met by a previous potential event; and responsive to a second positive determination, a disregard component for disregarding the potential event.

Claims

1. An apparatus for preventing event flooding in an event processing system, the apparatus comprising:

responsive to receiving, by an analysis component, monitored activity data, an analysis component for analysing the monitored activity data, to determine a potential event;

responsive to determining a potential event, an analysis component identifying a set of threshold values and determining whether the potential event has met a threshold value of the set of threshold values;

responsive to a positive determination, an analysis component for determining if the met threshold value is an identical threshold value met by a previous potential event; and

responsive to a second positive determination, a disregard component for disregarding the potential event.

2. The apparatus of claim 1 wherein, responsive to determining that the met threshold value is not an identical threshold value met by a previously potential event, a communication component communicating the potential event to a filtering component for determining whether the potential event is an event which is to be communicated to an event consumer.

3. The apparatus claim 1, wherein an event is a number of changing activities over a time period.

4. The apparatus of claim 3, wherein, the numerical measurement scale is a scalar value.

5. The apparatus of claim 1, wherein an event is a number of active transactions for a determined time period.

6. The apparatus of claim 5, wherein, the numerical measurement scale is a scalar value.

7. The apparatus of claim 1, wherein the set of threshold values comprise an ascending set of numerical threshold values for a potential event which is identified as ascending a numerical measurement scale.

8. The apparatus of claim 1, wherein the set of threshold values comprise a descending set of numerical threshold value for potential events which are identified as descending a numerical measurement scale.

9. A method for preventing event flooding in an event processing system, the method comprising:

responsive to receiving monitored activity data, analysing the monitored activity data, to determine a potential event;

responsive to determining a potential event, identifying a set of threshold values and determining whether the potential event has met a threshold value of the set of threshold values;

responsive to a positive determination, determining if the met threshold value, is an identical threshold value met by a previous potential event; and

responsive to a second positive determination, disregarding the potential event.

10. The method of claim 9 wherein, responsive to determining that the met threshold value is not an identical threshold value met by a previously potential event, communicating the potential event, to a filtering component, for determining whether the potential event is an event which is to be communicated to an event consumer.

11. The method of claim 9, wherein an event is a number of changing activities over a time period.

12. The method of claim 9, wherein an event is a number of active transactions for a determined time period.

13. The method of claim 9, wherein the set of threshold values comprise an ascending set of numerical threshold values for a potential event which is identified as ascending a numerical measurement scale.

14. The method of claim 9, wherein the set of threshold values comprise a descending, set of numerical threshold value for potential events which are identified as descending a numerical measurement scale.

15. The method of claim 13 wherein, the numerical measurement scale is a scalar value.

16. A computer program comprising computer program code to, when loaded into a computer system and executed:

responsive to receiving, by an analysis component, monitored activity data, an analysis component for analysing the monitored activity data, to determine a potential event;

responsive to determining a potential event, an analysis component identifying a set of threshold values and determining whether the potential event has met a threshold value of the set of threshold values;

responsive to a positive determination, an analysis component for determining if the met threshold value is an identical threshold value met by a previous potential event; and

responsive to a second positive determination, a disregard component for disregarding the potential event.

17. The computer program of claim 16 wherein, responsive to determining that the met threshold value is not an identical threshold value met by a previously potential event, a communication component communicating the potential event to a filtering component for determining whether the potential event is an event which is to be communicated to an event consumer.

18. The computer program of claim 16, wherein an event is a number of active transactions for a determined time period.

19. The computer program of claim 16, wherein the set of threshold values comprise an ascending set of numerical threshold values for a potential event which is identified as ascending a numerical measurement scale.

20. The computer program of claim 16, wherein the set of threshold values comprise a descending set of numerical threshold value for potential events which are identified as descending a numerical measurement scale.