Patent ID: 7831705

Claim:
A method comprising: receiving an event; determining at least one classification of said event; appending said classification to said event to create a tagged event; determining a destination rule computer system for said tagged event, said destination rule computer system being one of a plurality of horizontally partitioned rule computer systems comprising rulesets, each of said plurality of horizontally partitioned rule computer systems comprising a ruleset that is different than rulesets of the other of said plurality of horizontally partitioned rule computer systems, said determining a destination rule computer system for said tagged event comprising determining that said destination rule computer system comprises a rule context corresponding to said classification, said rule context being conditions related to a ruleset of said destination rule computer system; receiving said tagged event with said destination rule computer system; determining said classification of said tagged event; determining whether said classification corresponds with said rule context of said ruleset of said destination rule computer system, wherein upon a determination that said classification does not correspond with said rule context, said method further comprising dropping said tagged event, wherein upon a determination that said classification does correspond with said rule context, said method further comprising inspecting said tagged event; determining whether a rule of said ruleset should be fired based upon said inspecting said tagged event; wherein upon a determination that said rule should be fired, said method further comprising firing said rule; and sharing said firing with other computer systems.