Patent ID: 9576243
Date: 2017-02-21
CPC Classifications: G06F,G06N,H04L

Claim:
1. A method for use in monitoring one or more platforms of one or more data systems, comprising: receiving, at a processor, structured data generated by one or more platforms over at least one communications network; first evaluating, by the processor engine using one of first and second rule blocks, at least some of the data; first determining that a result of the first evaluating is a first of at least first and second outcomes, wherein the at least some of the data leading to the first outcome is identified by a time stamp that corresponds to a first time; accessing, by the processor, a linking relationship object contained within at least one of the first and second rule blocks to determine a specified time period relative to the first time; second evaluating, by the processor using the other of the first and second rule blocks, at least some of the data associated with one or more time stamps corresponding to a second time within the specified time period relative to the first time; second determining, from the second evaluating, whether a result is one of at least first and second outcomes; and analyzing the results of the first and second determining steps to determine an event of interest.