Method and system for correlating a plurality of events within a data processing system

A computer program product within a computer readable media for causing a data processing system to correlate a plurality of events to determine an action to be performed, said computer program product comprising:

• instruction means for causing said data processing system to permit provision of a plurality of rule networks, each of said plurality of rule networks including a plurality of program objects arranged in a tree structure having at least one parent program object and a plurality of child program objects, wherein said at least one parent program object is logically linked to said plurality of child program objects by passing input events received by said at least one parent program object to said plurality of child program objects, wherein at least one of said plurality of program objects invokes an action in response to receiving a particular input event;
• instruction means, responsive to two rule networks among said plurality of rule networks both including identical program objects, for causing said data processing system to minimize said plurality of rule networks by sharing one of said identical program objects between said two rule networks;
• instruction means for causing said data processing system to register at a first application program with a rule processor that passes events within said data processing system to particular rule networks among a plurality of rule networks, wherein said first application program has associated therewith one or more of said plurality of rule networks;
• instruction means, responsive to receipt of said series of events at said rule processor, for causing said data processing system to pass said series of events to each rule network associated with said first registered application program;
• instruction means, responsive to receipt of said series of events by one of said one or more associated rule networks, for causing said data processing system to evaluate said series of events through said tree structure;
• and
• instruction means, responsive to said evaluation, for causing said data processing system to invoke an action at one of said plurality of program objects, wherein event correlation efficiency is enhanced.

A system for correlating a plurality of events within a data processing system to determine an action to be performed, said system comprising;

• means for providing a plurality of rule networks, each of said plurality of rule networks including a plurality of program objects arranged in a tree structure having at least one parent program object and a plurality of child program objects, wherein said at least one parent program object is logically linked to said plurality of child program objects by passing input events received by said at least one parent program object to said plurality of child program objects, wherein at least one of said plurality of program objects invokes an action in response to receiving a particular input event;
• means, responsive to two rule networks among said plurality of rule networks both including identical program objects, for minimizing said plurality of rule networks by sharing one of said identical program objects;
• means for registering at least a first application program with a rule processor that passes events within said data processing system to particular rule networks among said plurality of rule networks, wherein said first application program has associated therewith one or more of said plurality of rule networks;
• means, responsive to receipt of said series of events at a rule processor, for passing said series of events to each rule network associated with said first registered application program;
• means, responsive to receipt of said series of events by one of said one or more associated rule networks, for evaluating said series of events through said tree structure;
• and
• means, responsive to said evaluation, for invoking an action at one of said plurality of program objects, wherein event correlation efficiency is enhanced.