US 8,510,284 B2 · Large-scale event evaluation using realtime processors

Abstract

Large-scale event processing systems are often designed to perform data mining operations by storing a large set of events in a massive database, applying complex queries to the records of the events, and generating reports and notifications. However, because such queries are performed on very large data sets, the processing of the queries often introduces a significant delay between the occurrence of the events and the reporting or notification thereof. Instead, a large-scale event processing system may be devised as a large state machine organized according to an evaluation plan, comprising a graph of event processors that, in realtime, evaluate each event in an event stream to update an internal state of the event processor, and to perform responses when response conditions are met. The continuous monitoring and evaluation of the stream of events may therefore enable the event processing system to provide realtime responses and notifications of complex queries.

Claims20

Dependent claims

A method of evaluating events received from an event source according to an evaluation plan on a computer having a processor, the method comprising:

executing on the computer instructions configured to:
for respective evaluation stages of the evaluation plan, generate at least one event processor having a state and at least one response having a response condition and configured to:
upon receiving an event, update the state of the at least one event processor;
and
upon the state of the at least one event processor satisfying a response condition, perform the response;
interconnect all of the generated event processors to generate an event processor set covering the evaluation plan;
connect the event processor set to the event source;
upon receiving an event through the event source:
store the event in a historic event set, and
evaluate the events with the event processor set;
and
upon receiving an updated evaluation plan:
reconfigure the event processor set according to the updated evaluation plan;
and
connect the reconfigured event processor set to at least a portion of the historic event set.

12 more elements

A nonvolatile computer-readable storage device comprising instructions that, when executed by a processor of a computer having access to a data store, evaluate events received from an event source by:

mining the data store to identify at least one evaluation goal;
suggesting the evaluation goal to a user;
generating an evaluation plan using at least one evaluation goal selected by the user;
for respective evaluation stages of the evaluation plan, generating at least one event processor having a state and at least one response having a response condition and configured to:
upon receiving an incoming event set comprising at least one event:
process the incoming event set according to the evaluation plan;
and
update the state of at least one of the event processors;
and
upon the state of at least one of the event processors satisfying a response condition:
perform the response including generating an outgoing event set that is smaller than the incoming event set;
and
store at least one event in the data store;
interconnecting all of the generated event processors to generate an event processor set covering the evaluation plan;
upon receiving an updated evaluation plan:
identifying at least one updated event processor that is updated by the updated evaluation plan;
and
reconfiguring the updated event processors according to the updated evaluation plan;
after reconfiguring the event processor set:
generating a historic event set comprising historic events selected from the data store matching at least one historic event parameter and associated with at least one updated event processor;
estimating a computational cost arising from connecting the at least one event processor set to the historic event set;
verifying the computational cost with the user;
connecting the reconfigured event processor set to a historic event set comprising at least one historic event;
upon receiving from a user a presentation request to present a state of at least one of the event processors in response to an event involving the user, present the state of the event processor;
upon receiving from a user an adjustment request to adjust the state of the at least one event processor, adjusting the state of the at least one event processor;
and
storing an event processor set snapshot comprising the states at least one of the event processors of the event processor set.

24 more elements

Dependencies are inferred from the claim text.

Large-scale event evaluation using realtime processors

Life of this patent

Large-scale event evaluation using realtime processors

Life of this patent

Abstract

Claims20