REPORTING RESULTS OF PROCESSING OF CONTINUOUS EVENT STREAMS

摘要

An aspect of the present disclosure facilitates reporting results of processing of continuous event streams. In one embodiment, a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams is received, with the occurrences of said pattern of interest being desirable to be reported as corresponding alert instances. Also, a suppression condition associated with the pattern of interest is received, with the suppression condition indicating the specific occurrences of the pattern of interest that are not to be reported as corresponding alert instances. Accordingly, a sequence of occurrences of the pattern of interest is determined in the set of continuous event streams. For each occurrence in the sequence of occurrences, an alert instance corresponding to the occurrence is generated only if the suppression condition is not satisfied for the occurrence.

主权项

1. A method of reporting results of processing of continuous event streams, said method being executed by one or more processors, said method comprising:
receiving a matching condition indicating a pattern of interest as a part of an alert definition in relation to a set of continuous event streams, wherein occurrences of said pattern of interest are desirable to be reported as corresponding alert instances; receiving a suppression condition associated with said pattern of interest, wherein said suppression condition indicates the specific occurrences of said pattern of interest that are not to be reported as corresponding alert instances; determining, in said set of continuous event streams, a sequence of occurrences of said pattern of interest; and for each occurrence in said sequence of occurrences, generating an alert instance corresponding to the occurrence only if said suppression condition is not satisfied for the occurrence.