Modulation and regulation of system event monitoring streams
AssigneeInternational Business Machines Corporation
InventorsFrederico Araujo, Teryl Paul Taylor
Life of this patent
Estimating the term…
Abstract
An approach is disclosed that receives system events corresponding to event occurrences that occur at an information handling system. The system events are combined into a set of one or more coalesced events, wherein the combining is based on a root node associated with the system events. The coalesced events are then transmitted to a security information and event management (SIEM) system.
Claims20
A method implemented by an information handling system that includes a processor and a memory accessible by the processor, the method comprising:
- receiving a plurality of system events corresponding to event occurrences at the information handling system;
- combining the plurality of system events into a set of one or more coalesced events, wherein the combining is based on a root node associated with the system events;
- and
- transmitting the coalesced events to a security information and event management (SIEM) system.
An information handling system comprising:
- one or more processors;
- a memory coupled to at least one of the processors;
- and
- a set of instructions stored in the memory and executed by at least one of the processors to perform steps comprising:
- receiving a plurality of system events corresponding to event occurrences at the information handling system;
- combining the plurality of system events into a set of one or more coalesced events, wherein the combining is based on a root node associated with the system events;
- and
- transmitting the coalesced events to a security information and event management (SIEM) system.
A computer program product comprising:
- a computer readable storage medium comprising a set of computer instructions, the computer instructions effective to perform steps comprising:
- receiving a plurality of system events corresponding to event occurrences at the information handling system;
- combining the plurality of system events into a set of one or more coalesced events, wherein the combining is based on a root node associated with the system events;
- and
- transmitting the coalesced events to a security information and event management (SIEM) system.
Dependencies are inferred from the claim text.