PARALLEL INCIDENT PROCESSING

摘要

Methods, apparatuses, and computer program products for parallel incident processing are provided. Embodiments include an incident analyzer identifying a pool of incidents and distributing the incidents across a plurality of threads of the incident analyzer. One or more threads of the plurality of threads of the incident analyzer generate a tuple indicating a rule identification and a rule state. The incident analyzer also identifies from the generated tuples, tuples that have the same rule identification and generates a merged tuple by merging the rule state of each of the identified tuples that have the same rule identification.

主权项

1. A method of parallel incident processing in a distributed processing system, the method comprising:
identifying, by an incident analyzer, a pool of incidents; distributing, by the incident analyzer, the incidents across a plurality of threads of the incident analyzer, each thread having a set of incident processing rules; generating by one or more threads of the plurality of threads of the incident analyzer, a tuple, each tuple indicating a rule identification and a rule state; identifying from the generated tuples, by the incident analyzer, tuples that have the same rule identification; and generating, by the incident analyzer, a merged tuple including merging the rule state of each of the identified tuples that have the same rule identification.