Reporting results of processing of continuous event streams
First Claim
1. A method of reporting results of processing of continuous event streams, said method being executed by one or more processors, said method comprising:
- receiving a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams, wherein occurrences of said pattern of interest are desirable to be reported as corresponding alert instances;
receiving a suppression condition associated with said pattern of interest, wherein said suppression condition indicates the specific occurrences of said pattern of interest that are not to be reported as corresponding alert instances;
determining, in said set of continuous event streams, a sequence of occurrences of said pattern of interest; and
for each occurrence in said sequence of occurrences, generating an alert instance corresponding to the occurrence only if said suppression condition is not satisfied for the occurrence.
1 Assignment
0 Petitions
Accused Products
Abstract
An aspect of the present disclosure facilitates reporting results of processing of continuous event streams. In one embodiment, a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams is received, with the occurrences of said pattern of interest being desirable to be reported as corresponding alert instances. Also, a suppression condition associated with the pattern of interest is received, with the suppression condition indicating the specific occurrences of the pattern of interest that are not to be reported as corresponding alert instances. Accordingly, a sequence of occurrences of the pattern of interest is determined in the set of continuous event streams. For each occurrence in the sequence of occurrences, an alert instance corresponding to the occurrence is generated only if the suppression condition is not satisfied for the occurrence.
-
Citations
20 Claims
-
1. A method of reporting results of processing of continuous event streams, said method being executed by one or more processors, said method comprising:
-
receiving a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams, wherein occurrences of said pattern of interest are desirable to be reported as corresponding alert instances; receiving a suppression condition associated with said pattern of interest, wherein said suppression condition indicates the specific occurrences of said pattern of interest that are not to be reported as corresponding alert instances; determining, in said set of continuous event streams, a sequence of occurrences of said pattern of interest; and for each occurrence in said sequence of occurrences, generating an alert instance corresponding to the occurrence only if said suppression condition is not satisfied for the occurrence. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A non-transitory machine readable medium storing one or more sequences of instructions for enabling a system to report results of processing of continuous event streams, wherein execution of said one or more instructions by one or more processors contained in said system enables said system to perform the actions of:
-
receiving a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams, wherein occurrences of said pattern of interest are desirable to be reported as corresponding alert instances; receiving a suppression condition associated with said pattern of interest, wherein said suppression condition indicates the specific occurrences of said pattern of interest that are not to be reported as corresponding alert instances; determining, in said set of continuous event streams, a sequence of occurrences of said pattern of interest; and for each occurrence in said sequence of occurrences, generating an alert instance corresponding to the occurrence only if said suppression condition is not satisfied for the occurrence. - View Dependent Claims (10, 11, 12, 13, 14, 15)
-
-
16. A digital processing system comprising:
-
a processor; a random access memory (RAM); a machine readable medium to store one or more instructions, which when retrieved into said RAM and executed by said processor causes said digital processing system to report results of processing of continuous event streams, said digital processing system performing the actions of; receiving a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams, wherein occurrences of said pattern of interest are desirable to be reported as corresponding alert instances; receiving a suppression condition associated with said pattern of interest, wherein said suppression condition indicates the specific occurrences of said pattern of interest that are not to be reported as corresponding alert instances; determining, in said set of continuous event streams, a sequence of occurrences of said pattern of interest; and for each occurrence in said sequence of occurrences, generating an alert instance corresponding to the occurrence only if said suppression condition is not satisfied for the occurrence. - View Dependent Claims (17, 18, 19, 20)
-
Specification