Event ingestion management

A computer-implemented method comprising:

• identifying a monitoring function as having a lower priority than a service function on a network communication device, the service function relating to processing network traffic;
• obtaining an event associated with a first event queue from a plurality of event queues associated with the monitoring function on the network communication device, the event responsive to a local database change on the network communication device;
• determining if an event queue entry is available for the first event queue;
• based on a determination that no event queue entry is available, determining if the first event queue is full;
• based on a determination that the first event queue is full, setting a first indication to initiate throttling of events;
• determining if a total of in-use queue entries across the plurality of event queues is higher than a threshold;
• based on a determination that the total of in-use queue entries is above the threshold, setting a second indication to initiate throttling of events;
• and
• providing the first indication and the second indication to an event scheduler monitor function, wherein the event scheduler monitor function determines whether or not to initiate throttling of events for the monitor function in favor of the service function based on a combination of the first indication and the second indication.

A network communication device, comprising:

• one or more processing units having multiple cores;
• a first memory storing a local database representing state information about the computer device;
• and
• a second memory storing instructions, that when executed by the one or more processing units, cause the one or more processing units to provide an event ingestion throttling method, the method comprising:
• identifying a monitoring function as having a lower priority than a service function on the network communication device, the service function relating to processing network traffic;
• obtaining an event associated with a first event queue from a plurality of event queues associated with the monitoring function on the network communication device, the event responsive to a change in the local database;
• determining if an event queue entry is available for the first event queue;
• based on a determination that no event queue entry is available, determining if the first event queue is full;
• based on a determination that the first event queue is full, setting a first indication to initiate throttling of events;
• determining if a total of in-use queue entries across the plurality of event queues is higher than a threshold;
• based on a determination that the total of in-use queue entries is above the threshold, setting a second indication to initiate throttling of events;
• and
• providing the first indication and the second indication to an event scheduler monitor function, wherein the event scheduler monitor function determines whether or not to initiate throttling of events for the monitor function in favor of the service function based on a combination of the first indication and the second indication.