System, method and computer program product for event correlation in a distributed computing environment
US6336139B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 3, 1998 |
| Grant date | Jan 1, 2002 |
| Priority date | — |
| Expiry date | Jun 3, 2018 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2209/546
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method of event correlation implemented within a distributed environment having a management server and a set of managed machines. The preferred event correlation method begins by establishing a discrete set of correlation rules. One preferred implementation of a correlation rule is a software-based state machine. Each correlation rule is adapted to recognize a given pattern of one or more events indicative of a given condition. A set of correlation rules comprise a set of efficiently-coupled state machines, each of which is optimized for a particular, low-level logical function. Then, as events are received and/or generated at the machine, the events are examined by the state machines comprising the correlator to search for the defined event patterns. If a given event pattern is recognized, a given condition sought to be monitored has occurred, and the event correlator may then be used to take a given action.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.