2008.11.27
Overview
A method, a system, a computer program product, and a computer-readable recording medium for event correlation analysis are provided. The method is used in the system. The system includes a plurality of processing units and each processing unit runs a plurality of instruction sequences. The method includes the following steps: Dispatch an event to one of the processing units according to an equivalent class ID corresponding to the event. Next, dispatch the event to one of the instruction sequences of the processing unit for analysis according to a rule type corresponding to the event. The aforementioned equivalent class ID and rule type are determined according to the source ID and event type of the event.Category
發明
Patented
97146036
發明第I372355號
Filing Date
2008.11.27Expired Date
2028.11.26Notification
2026.11.20