2008.12.03
Overview
A method, a system, a computer program product, and a computer-readable recording medium for event correlation analysis are provided. The method is used in the system. The system includes a plurality of processing units and each processing unit runs a plurality of instruction sequences. The method includes the following steps: Dispatch an event to one of the processing units according to an equivalent class ID corresponding to the event. Next, dispatch the event to one of the instruction sequences of the processing unit for analysis according to a rule type corresponding to the event. The aforementioned equivalent class ID and rule type are determined according to the source ID and event type of the event.Category
發明
Patented
2.01E+11
第1029008號
Filing Date
2008.12.03Expired Date
2028.12.02Notification
2026.11.20