Sponsored Content
Special Forums News, Links, Events and Announcements Complex Event Processing RSS News Plan-based Complex Event Detection across Distributed Sources Post 302240353 by Linux Bot on Thursday 25th of September 2008 01:00:03 PM
Old 09-25-2008
Plan-based Complex Event Detection across Distributed Sources

Tim Bass
09-25-2008 09:49 AM
Here is an interesting 2008 paper, Plan-based Complex Event Detection across Distributed Sources.

Abstract
Complex Event Detection (CED) is emerging as a key capability for many monitoring applications such as intrusion detection, sensorbased activity & phenomena tracking, and network monitoring. Existing CED solutions commonly assume centralized availability and processing of all relevant events, and thus incur significant overhead in distributed settings. In this paper, we present and evaluate communication efficient techniques that can efficiently perform CED across distributed event sources.

Our techniques are plan-based: we generate multi-step event acquisition and processing plans that leverage temporal relationships among events and event occurrence statistics to minimize event transmission costs, while meeting application-specific latency expectations. We present an optimal but exponential-time dynamic programming algorithm and two polynomial-time heuristic algorithms, as well as their extensions for detecting multiple complex events with common sub-expressions. We characterize the behavior and performance of our solutions via extensive experimentation on synthetic and real-world data sets using our prototype implementation.

Source...
 
kacpimon(8)						      System Manager's Manual						       kacpimon(8)

NAME
kacpimon - Kernel ACPI Event Monitor SYNOPSIS
kacpimon DESCRIPTION
kacpimon is a monitor program that connects to three sources of ACPI events: 1. /proc/acpi/event 2. netlink 3. the input layer (/dev/input/event*) kacpimon then reports on what it sees while it is connected. Use kacpimon to make sure your kernel is sending acpi-related events via the three sources mentioned above. Since both acpid and kacpimon connect to the same sources, be sure to kill acpid before running kacpimon: sudo killall acpid Also be sure to run kacpimon as root or else it won't be able to open /proc/acpi/event or the input layer: sudo ./kacpimon If you want to pipe the output of kacpimon to a file, be sure to use the "Esc" key to exit rather than Ctrl-C. Using Ctrl-C will cause output to be lost. FILES
/proc/acpi/event kernel ACPI event file /dev/input/event* input layer event files SEE ALSO
acpi_listen(8), acpid(8) AUTHOR
Ted Felix <www.tedfelix.com> TODO
- Make kacpimon something that actually gets installed? LICENSE
kacpimon - Kernel ACPI Event Monitor Copyright (C) 2009 Ted Felix (www.tedfelix.com) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MER- CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Or visit www.gnu.org. Nov 2009 kacpimon(8)
All times are GMT -4. The time now is 08:13 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy