Browse Prior Art Database

Graphical notation for assignment of rule sets in a distributed rule base. Disclosure Number: IPCOM000023770D
Original Publication Date: 2004-Mar-31
Included in the Prior Art Database: 2004-Mar-31
Document File: 2 page(s) / 65K

Publishing Venue



Disclosed is a graphical notation for the assignment of rule sets to a distributed rule base.

This text was extracted from a PDF file.
At least one non-text object (such as an image or picture) has been suppressed.
This is the abbreviated version, containing approximately 51% of the total text.

Page 1 of 2

Graphical notation for assignment of rule sets in a distributed rule base .

An event management system captures events from a variety of sources and correlates them together so that their relationships with each other may be discovered and some action may be performed. The subject matter expert, or "correlation rules writer", writes rules for the event management system that define these relationships and actions to be taken. As events arrive, they are evaluated by the event management system to determine the cause and effect relationship between event instances so that it can take appropriate action for each event, if any action is required.

In the user's environment today, rules are developed and saved to a local rule base on the event management server where they are executed by a rules engine. In most large IT environments, customers have several event management servers distributed throughout the enterprise for the purpose of workload distribution or to perform different tasks at different levels in the enterprise. Often, each of these servers must be able to evaluate correlation rules in the appropriate context, taking different actions according to its function in the enterprise, including forwarding events to other event management servers for further processing.

Some vendors of event management systems have introduced the concept of a distributed rule base to help manage such environments. A distributed rule base may contain rule base targets, which are representations of remote event management servers which may have rule sets assigned to them. All rule base targets in a distributed rule base usually share a single set of event class definitions. When rule sets in a distributed rule base are deployed to remote event management servers, the rule base target defines which rule sets are sent. This greatly improves on the manual process of trying to cobble together independent rule bases that really need to function as one. However, this is still a manual process. It would help greatly if the rules developer could visualize the hierarchy of event management servers, the flow of events as they are forwarded to other event manageme...