Unified event processing and log management over multiple domains

A computer system including one or more computing devices configured to execute instructions stored in memory of the one or more computing devices to provide unified event monitoring and log processing, by performing the following steps:

• receiving from a plurality of domains, streaming event data comprising a plurality of event entries, wherein the domains include a process or an application, running in one or more containers of a cloud platform;
• processing the streaming event data into a normalized, domain-independent format;
• evaluating a plurality of policy rules on the processed streaming event data, wherein the policy rules are defined with a unified syntax, and each of the policy rules specifies a condition, an action to be executed when the condition is satisfied, and data for executing the action;
• and
• in response to the evaluating satisfying a condition specified in a policy rule of the policy rules, transmitting to a remote device:
• (1) information indicating an action specified in the policy rule for execution by the remote device, and (2) data specified in the policy rule for executing the action.