Patent ID: 8806550

Claim:
A rules filter operative on a controller, the rules filter for detection and presentation of error conditions, the rules filter having: a plurality of rules, each rule having a log identifier specifying a log or event source for application of the rule, one or more match conditions, each said match condition comparing one or more log or event fields with associated match values, and an action to be performed if said rule match condition comparison is satisfied; a rules processing thread for applying said plurality of rules to a merged queue of log and event messages, said merged queue of log and event messages generated by a plurality of message log threads, each said log thread operative on a different message log source; each said message log thread detecting the arrival of a new log or event messages from a particular source and forwarding said new log or event message to said merged log and event message queue; said merged queue of log and event messages sequentially ordered by timestamp prior to application of said rules; at least one of said rules comprising a first subset of rules verifying network connectivity, a second subset of rules verifying server configuration, said second subset of rules identifying a non-responsive server, said first subset of rules and said second subset of rules executed prior to a third subset of rules which identifies a failure which requires said first subset of rules and said second subset of rules identify correct operation prior to application of said third subset of rules; where said action includes the generation of a message which contains information extracted from the associated said log or event which generated said match condition.