299 results about "Complex event processing" patented technology

A system for characterizing malicious activity in an intelligent utility grid system includes a system storage in which to store a database including a plurality of rules. A collector is operable to collect and store in the system storage information-technology (IT) data including IT-related activity from the intelligent grid system. A complex event processing (CEP) bus is operable to receive non-IT data including location-specific event data from a plurality of electronic sources, the CEP bus further operable to disregard the non-IT data failing to meet a predetermined level of relevance to one of a plurality of risk-related events. A processor is operable to apply the plurality of rules to the relevant non-IT data to: associate an undesired event with reference to the IT-related activity; and determine a probability that the undesired event is indicative of malicious activity. The processor further applies a risk characterization to the undesired event based on the probability and the IT-related activity.

Methods, systems, and computer-readable media are disclosed for event processing with a query based on a reusable XML query template. A particular method includes receiving a plurality of events from a source and generating a plurality of event objects based on the plurality of events. A query represented by an XML file based on a reusable XML query template is executed with respect to the plurality of event objects to produce a plurality of result objects. Each result object is produced based on an application of at least one operator of the query. A plurality of results is generated based on the plurality of result objects, and the plurality of results is transmitted to a sink.

The invention provides a system for providing services of an event-driven service-oriented internet of things and a working method of the system. The system is composed of a plurality of parts of an internet of things service system, an access agent, a unified message distribution network based on a publish-subscribe mechanism, a complex event processing engine, a resource descriptive model base and a sensor system. The system and the working method solve the problems that an existing system for providing the services of the internet of things can not process large-scale sensing information in a distributed mode, events in a physical world can not be processed, effective cross-business-domain and cross-organization coordination is difficult to achieve by different enterprise business processes. According to the system, sensing information is effectively distributed in the open and distributed computing environment, various pieces of sensing information can be conveniently and quickly distributed as required among different internet of things heterogeneous service systems, event-driven cross-business-domain and cross-organization service dynamic coordination is achieved, time, space and control flow uncoupled network services are provided, and quick response to change of the physical world can be flexibly and dynamically achieved in real time.

A system comprising a plurality of complex event processing engines including a first complex event processing engine set at a first tier and a second complex event processing engine set at a second tier. Each of the plurality of complex event processing engines executes on at least one hardware computer processor. The plurality of complex event processing engines are configured such that at least one complex event processing engine in the second set communicates with only some of the other complex event processing engines in the second set. The plurality of complex event processing engines further are configured such that at least one complex event processing engine in the first set communicates with each complex event processing engine in the second set.

A system for conducting real-time and historical analysis of complex customer care processes, comprising an event collector software module, a complex event processing software module adapted to receive events from the event collector software module, a distributed data storage layer, a business analytics software module adapted to receive and process data from the distributed data storage layer, a distributed configuration software module, and a user interface software module adapted to receive analytics results from the business analytics software module.

Upon receiving an event from an event source, the event collector software module at least converts the event into a standard event data format suitable for use by the complex event processing software module and extracts or masks sensitive data from the event based on privacy rules maintained by the distributed configuration software module.

A system and method for implementing a service oriented architecture that supports complex event processing and business activity monitoring. An enterprise service bus (ESB) generates a first list of one or more devices, receives a selection from a user associated with a first device of a second device in the first list, generates a second list that includes functions associated with the selection from the first user, receives a request from the first device to perform one of the functions in the second list, translates a first communication protocol of the request received from the first device into a second communication protocol used by the second device to create a translated request, translates a first message format of the request into a second message format and transmits the translated request to the second device.

A system and method for replicating a distributed computer system state among a plurality of deterministic event processing engines are disclosed. A sender module receives a plurality of input events or input event streams and generates a serialized message sequence describing an order in which input events are processed. The serialized message sequence is then transmitted to a plurality of deterministic event processing engines for processing. As the event processing engines are deterministic, each event processing engine produces the same ordered sequence responsive to the received serialized message sequence. The ordered sequences from each deterministic event processing engine are transmitted to a merger module which generates an output from the plurality of ordered sequences. The merger module removes one or more redundant ordered sequences and associates the resulting output with a client device.

Techniques for extending the capabilities of an event processing system to support the processing of spatial data. In one set of embodiments, this extensibility can be provided via a plug-in extension component referred to herein as a spatial data cartridge. The spatial data cartridge can enable the event processing system to support spatial data types (e.g., point, polygon, etc.) and various operations related to such data types (e.g., proximity determinations, overlap determinations, etc.). The spatial data cartridge can also define an indexing scheme that can be integrated with the capabilities of the event processing system to support the indexing of spatial data. Using the spatial data cartridge, the event processing system can operate on spatial data even if spatial data formats are not natively supported by the system.

An invention is disclosed for improved computer system management by allowing complex computer-monitored events to be handled in different formats for correlation, analysis and action. Specifically, a method and system are disclosed for processing multiple heterogeneous event types in a complex event processing (CEP) engine.

A method for workflow management includes modeling a workflow as a set of nodes linked by transitions. At least one of the nodes is defined as an action triggered by a situation using a complex event processing (CEP) engine. During execution of the workflow, the CEP engine is invoked in order to detect the situation, and the action is performed responsively to detection of the situation by the CEP engine.

The present invention includes a method for providing parameterized queries in complex event processing (CEP). The method includes providing a query template which includes one or more bind variables, providing sets of parameters corresponding to the one or more bind variables, and parsing the query template to determine positions of the one or more bind variables. The method further includes scanning the provided sets of parameters to determine which of the sets of parameters are to be bound to the one or more bind variables, binding the one or more bind variables which are determined to be bound to the sets of parameters, and substituting the bound one or more bind variables with the corresponding sets of parameters. The method further includes injecting all incarnations of the parameterized queries into the system, and one template/parameterized query is configured to run them all.

A system and method for constructing and deploying a business activity monitoring (BAM) dashboard associated with an event-based process are disclosed. A configuration module receives an event-based process identifier for an event-based process and data, such as inputs or outputs, for the event-based process. A generation module then generates a dashboard description that includes the identifier and an associated dashboard template having one or more dashboard components. This dashboard description is used by a dashboard server to automatically generate a BAM dashboard for monitoring the event-based process by using the association between the dashboard template and the event-based process to display data associated with the event-based process using one or more dashboard components.

An enterprise application integration broker for managing a number of applications. The enterprise application integration broker includes a complex event processing engine. The complex event processing engine is adapted to monitor and analyze a first set of events in at least one of the plurality of applications. In addition, the enterprise application integration broker includes an integration engine. The integration engine is connected to the complex event processing engine and is connected to each of the applications. The integration engine is adapted to cause at least one application to react to a first set of events occurring in one or more of the plurality of applications. The integration engine is further adapted to cause at least one application to react to a second set of events generated by the complex event processing engine. The second set of events is correlated with the first set of events.

One embodiment of an event management system, operating on a computer system having event producers and event consumers, includes an initial event handler program and an event queue having a first event. The initial event handler program retrieves the first event from the event queue for event processing. This event processing returns a first response to the initial event handler program, wherein the initial event handler program manages the first event on the event queue based on the first response.

Techniques for embedded event processing are provided. In some examples, instructions for executing at least a subset of complex event processing features may be received. A stream of events received by the edge computing device may be identified. Additionally, the events of the stream utilizing the subset of complex event processing features may be processed. Further, in some aspects, the processed events may be provided to a complex event platform of a server.

An event processing system that can perform processing corresponding to event messages certainly, and improve efficiency of processing event messages.

To that end, the event processing system of the present invention holds event messages, which are received owing to state transitions of an IT service system, in an event message holding unit in order of issue. Among the event messages held in the event message holding unit, the event processing system searches for an event message for which a state of the IT service system after issue of the event message in question coincides with a state of the IT service system before issue of the oldest event message in the event message holding unit. When the event processing system can retrieve the event message in question, the event processing system deletes event messages ranging from the oldest event message to the retrieved event message from the event message holding unit.