COLLATION DEVICE, COLLATION PROGRAM AND COLLATION METHOD

摘要

A collation device generates an NFA by generating an automaton corresponding to an event pattern, replicating an automaton part corresponding to the same series part in which events are connected in the same series in the generated automaton for a plurality of series, substituting each replicated automaton part with a transition that is received in an event of each series, and combining each substituted automaton part through an epsilon transition. In addition, the collation device collates whether or not the event pattern is included in an event stream by comparing the event stream and the NFA and receiving an event included in the event stream in an NFA part corresponding to a series in which the event occurs out of the replicated NFA parts and operating the NFA part.