CROSS-CUTTING EVENT CORRELATION

摘要

Embodiments of the present invention provide a method, system and computer program product for cross-cutting event correlation in an enterprise computing monitoring and management system. An enterprise computing monitoring and management system can include a hierarchy of nodes, where several of the nodes are each coupled to a corresponding embedded correlation engine and an event bus. The system further can include a root node among the nodes. The root node can be coupled to the event bus and to centralized correlation logic programmed to identify a high correspondence between events from a particular event source among the nodes and a particular set of correlation rules in that correlation engine. The identification of such correspondence can be used to move to the set of correlation rules to an embedded correlation engine closer to the particular event source.

主权项

1. An enterprise computing monitoring and management data processing system comprising:
a hierarchy of nodes, each of a plurality of the nodes being coupled to a corresponding embedded correlation engine and an event bus; a root node among the nodes, the root node being coupled to the event bus and to cross-cutting correlation logic, the cross-cutting correlation logic comprising program code enabled to identify a high frequency of events from a particular event source among the nodes and to move a corresponding correlation rule to an embedded correlation engine closer to the particular event source.