Patent ID: 8560689

Claim:
A system for administering incident pools for event and alert analysis in a distributed processing system, the system comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions capable, when executed by the computer processor, of causing the system to carry out the steps of: receiving, by an incident analyzer from an incident queue, a plurality of incidents from one or more components of the distributed processing system; creating, by the incident analyzer, a pool of incidents; assigning, by the incident analyzer, each received incident to the pool; assigning, by the incident analyzer, to each incident a predetermined minimum time for inclusion in a pool; determining, by the incident analyzer, whether conditions have been met to close the pool; and if conditions have been met to close the pool, determining for each incident in the pool whether the incident has been in the pool for its predetermined minimum time for inclusion in a pool; and if the incident has not been in the pool for its predetermined minimum time, evicting the incident from the closed pool and including the incident in a next pool.