Event correlation system and method for monitoring resources

• US 20050138642A1
• Filed: 12/17/2004
• Published: 06/23/2005
• Est. Priority Date: 12/18/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Breiter, Gerd, Schneider, Juergen, Spatzier, Thomas, Frey, Jeffrey A., Breh, Jochen
• Application Number:
  US11/016,622
• Publication Number:
  US 20050138642A1
• Time in Patent Office: Days
• US Class Current: 719/318
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0627 by acting on the notification or alarm source

Abstract

An Event Correlation System and method for monitoring resources that send low-level events which are filtered and aggregated in accordance with event filtering and aggregation rules to detect high-level events. The resources are monitored by a General Event Service Application that can be used by any client application to perform event filtering and aggregation.

Claims

1. Apparatus for monitoring resources that send low-level events comprising:

means for filtering and aggregating events in accordance with event filtering and aggregation rules to detect high-level events; and

a general event service application for monitoring resources that can be used by a client application to perform event filtering and aggregation.

2. Apparatus in accordance with claim 1, further comprising means for event filtering and aggregation of events from resources that are implemented as stateful web services.

3. Apparatus in accordance with claim 1, wherein the general event service application comprises a rules base in which the event filtering and aggregation rules are stored.

4. Apparatus in accordance with claim 3, wherein the general event service application further comprises a deployment engine that inserts the event filtering and aggregation rules into the rules base.

5. Apparatus in accordance with claim 4, wherein the general event service application further comprises a resource registration engine that is triggered by the deployment engine to create necessary subscriptions with registered resources.

6. Apparatus in accordance with claim 5, wherein the resource registration engine cooperates with the rules base.

7. Apparatus in accordance with claim 1, wherein the general event service application is a stand-alone application hosted by an event server.

8. Method for monitoring resources that send low-level events to an application that can perform event filtering and event aggregation in accordance with event filtering and aggregation rules to detect higher-level events, comprising:

a) implementing resources as stateful web services;

b) monitoring the resources by a general event service application that can be used by a client application to perform event filtering and aggregation in stateful web service environments;

c) the general event service application acting as a notification sink with respect to the monitored resources;

d) the client application deploying filtering and aggregation rules into the general event service application and subscribing for receiving notification when higher-level events are detected;

d) the general event service application acting as a notification source with respect to said client application.

9. Method in accordance with claim 8, further comprising:

notifying the client application whenever a high-level event it has subscribed for is detected and not notifying the client application whenever a high-level event it has not subscribed for is detected.

10. Computer program product stored in the internal memory of a digital computer, containing software code to execute the method of claim 8.

11. Computer program product stored in the internal memory of a digital computer, containing software code to execute the method of claim 9.