| 摘要 |
A system and method for performing event analysis includes a plurality of logical components ( 102, 106, 110, 114, 118 ), each communicatively coupled to at least one other of the plurality of components. A transformer ( 114 ) receives from one or more of the logical components, one or more status messages describing a system state to form received status messages and transforms the received status messages into at least one transformed message such that the transformed message has at least one new substring which is not common with the received status messages. A processor ( 204 ) is coupled to the transformer ( 114 ) that receives one or more rules ( 104, 108, 112, 116, 120 ) and applies the one or more rules ( 104, 108, 112, 116, 120 ) to the one or more transformed status messages and an output ( 224 ) outputs at least one of a new rule and a new event.
|
