Patent ID: 8082342

Claim:
A computer-implemented method for caching currently dominant computer network events in a computer system, the computer system including a computer network and a plurality of computers connected by the computer network, the method comprising: monitoring live computer network traffic on the computer network, the live computer network traffic including a plurality of current events in the computer system; selecting a subset of the monitored events; creating an event record for each event in the subset of monitored events, the event records including a timestamp T′ indicating the most recent time an event record was adjusted, the event records further including a count N′ indicating a popularity of an event at the time the event record was most recently adjusted, the count being generated through applying the following mathematical formula: N′=N/Df (T′−T)/Ti where Ti is a discount-time interval, Df is a discount factor that is applied after time Ti, N is a previous count, and T is a previous timestamp indicating the last time the event record was adjusted; assigning priorities to the events in the subset of monitored events at least in part based on the counts in the event records; and caching a first set of priorities in a first priority queue in a cache on one or more computers, the first set of priorities identifying the currently dominant events in the subset of monitored events.