Flexible event data content management for relevant event and alert analysis within a distributed processing system
First Claim
1. A method of flexible event data content management for relevant event and alert analysis within a distributed processing system, the method comprising:
- capturing, by each of a plurality of interface connectors, one or more events from a resource of the distributed processing system, wherein each of the one or more events is a notification of an error occurring in a component of the distributed computing system, wherein each event is identified by an event identifier, wherein each event identifier is unique such that no two interface connectors capture events with identical event identifiers;
inserting, by each of the plurality of interface connectors, one or more of the events into an event database, wherein no two interface connectors insert events with identical event identifiers into the event database;
receiving from the plurality of interface connectors, by a notifier, a notification of insertion of the event into the event database;
based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database;
receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database;
in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database;
processing, by the monitor, the retrieved events; and
identifying, by the event analyzer, at least one alert based on the retrieved events.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods, systems, and computer program products for flexible event data content management for relevant event and alert analysis within a distributed processing system are provided. Embodiments include capturing, by an interface connector, an event from a resource of the distributed processing system; inserting, by the interface connector, the event into an event database; receiving from the interface connector, by a notifier, a notification of insertion of the event into the event database; based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database; receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database; in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database; and processing, by the monitor, the retrieved events.
-
Citations
8 Claims
-
1. A method of flexible event data content management for relevant event and alert analysis within a distributed processing system, the method comprising:
-
capturing, by each of a plurality of interface connectors, one or more events from a resource of the distributed processing system, wherein each of the one or more events is a notification of an error occurring in a component of the distributed computing system, wherein each event is identified by an event identifier, wherein each event identifier is unique such that no two interface connectors capture events with identical event identifiers; inserting, by each of the plurality of interface connectors, one or more of the events into an event database, wherein no two interface connectors insert events with identical event identifiers into the event database; receiving from the plurality of interface connectors, by a notifier, a notification of insertion of the event into the event database; based on the received notification, tracking, by the notifier, the number of events indicated as inserted into the event database; receiving from the notifier, by a monitor, a cumulative notification indicating the number of events that have been inserted into the event database; in response to receiving the cumulative notification, retrieving, by the monitor, from the event database, events inserted into the event database; processing, by the monitor, the retrieved events; and identifying, by the event analyzer, at least one alert based on the retrieved events. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
Specification