Patent ID: 7251829

Claim:
A system for collecting and analyzing data from system events and/or messages as they occur in real time, comprising: computer processor means for processing data; storage means for storing data on a storage medium; means for collecting Operating System event-data utilizing a System Management Facility (SMF) interface; means for collecting computer program-generated Messages, utilizing a SubSystem Interface (SSI); means for collecting Operating System event-data utilizing an Event Notification Facility (ENF); means for reformatting SMF records by Queue Manager, and messages and ENF event-records by Message Manager into a proprietary layout; means for retaining only those event-data and messages requested by an administrator, and filtering out non-requested event-data and messages; means for evaluating whether those retained event-data and messages are to generate an alert message; means for distribution of an alert message to a client/server/graphical user interface or to a TCP/IP port or other device such as a UDP port; means for developing, adding, changing, deleting rules which are used to evaluate event-data and messages; means for evaluating whether historical event-data should have generated an alert message; and means for specifying what qualifies as event-data and messages.