Method and system for managing events using automated rule generation

A system for managing a plurality of events, the system comprising:

• an input module for collecting event information of the plurality of events as an input from a plurality of resources, wherein
• the event information is collected in real-time,
• the event information of the plurality of events is collected in a first period of time,
• the collected event information is in a heterogeneous format, and
• the heterogeneous format comprises a percentage format, a log value format, and a metric quantity format;
• a memory;
• and
• a processor in communication with the memory, the processor further comprising:
• a conversion module for converting the collected event information into a homogeneous format, wherein the homogeneous format is a percentile format;
• an event checking module for checking whether the collected event information is corresponding to a genuine event activity;
• an event analyzer for analyzing the homogeneous collected event event information for a predefined time period, wherein
• the analysis is performed through moving percentile computation of the event information over the predefined period of time, and
• the moving percentile computation is performed using machine learning techniques;
• a rule generation module generating a set of rules based on the analysis, wherein the generated set of rules are stored in a rule database;
• an event pattern classifier for evaluating the homogeneous collected event information across the generated set of rules,
• an alert generator for generate an alert corresponding to a corresponding event, when the corresponding event violates the generated set of rules based on the evaluation of the plurality of events, wherein the generated alert is stored in an alert database, wherein the generated alert is converted into notifications, if a set of criteria is satisfied, wherein the generated alert has a priority, and the priority indicates a criticality of the generated alert;
• an alert resolver for:
• upgrading the criticality of the generated alert, when the generated alert left unattended beyond a scheduled time-period;
• resolving the generated alert using a manual or an automatic process, wherein the event pattern classifier is further for:
• revising the stored set of rules in the rule database, based on specific event information of a plurality of specific events, wherein
• the specific event information of the plurality of specific events is collected in a second period of time,
• the second period of time is later than the first period of time, and
• the event information is different from the specific event information;
• and
• updating the rule database based on the revision of the stored set of rules.

One or more non-transitory machine readable information storage mediums comprising one or more instructions which when executed by one or more hardware processors cause managing a plurality of events, the instructions cause:

• collecting event information of the plurality of events as an input from a plurality of resources, wherein
• the event information is collected in real-time,
• the event information of the plurality of events is collected in a first period of time,
• the collected event information is in a heterogeneous format, and
• the heterogeneous format comprises a percentage format, a log value format, and a metric quantity format;
• converting the collected event information into a homogeneous format, wherein the homogeneous format is a percentile format;
• checking whether the collected event information is corresponding to a genuine event activity;
• analyzing the homogeneous collected event information for a predefined period of time, wherein
• the analysis is performed through moving percentile computation of the event information over the predefined period of time, and
• the moving percentile computation is performed using machine learning techniques;
• generating a set of rules based on the analysis, wherein the generated set of rules are stored in a rule database;
• evaluating the homogeneous collected event information across the generated set of rules;
• generating an alert to a corresponding event of the plurality events, when the corresponding event violates the generated set of rules based on the evaluation of the plurality of events, wherein the generated alert is stored in an alert database, wherein the generated alert is converted into notifications, if a set of criteria is satisfied, wherein the generated alert has a priority, and the priority indicates a criticality of the generated alert;
• upgrading the criticality of the generated alert, when the generated alert left unattended beyond a scheduled time-period;
• resolving the generated alert using a manual or an automatic process;
• revising the stored set of rules in the rule database, based on specific event information of a plurality of specific events, wherein
• the specific event information of the plurality of specific events is collected in a second period of time,
• the second period of time is later than the first period of time, and
• the event information is different from the specific event information;
• and
• updating the rule database based on the revision of the stored set of rules.