| 主权项 |
1. A method comprising:
in response to assigning, by a processor, a first score to a feature identified in a data stream,
determining, by the processor, a second score for the feature via the first score and a number of occurrences of the feature in the data stream, andidentifying, by the processor, an event candidate based on the second score satisfying a first threshold, wherein the event candidate is defined via the feature; and in response to comparing, by the processor, the feature against a first event model in a first data structure,
determining, by the processor, that the feature does not satisfy the first event model, comparing, by the processor, the feature against a second event model in a second data structure,storing, by the processor, the feature as a third event model in the second data structure based on the feature not satisfying the second event model, generating, by the processor, a third score for the third event model,determining, by the processor, a fourth score for the event candidate based on the feature representing an event model that is not in the first data structure and the second data structure,comparing, by the processor, the third score and the fourth score against a second threshold of the third event model, andstoring, by the processor, the third event model in the first data structure based on the third score and the fourth score being equal to or higher than the second threshold, wherein the first data structure differs from the second data structure based on event model data type. |
