GEM: a generalized event monitoring language for distributed systems

Event-based monitoring is critical for managing and debugging networks and distributed systems. This paper presents GEM - an interpreted generalized event monitoring language. It allows high-level, abstract events to be specified in terms of combinations of lower-level events from different nodes in a loosely coupled distributed system. Event monitoring components can thus be distributed within the system to perform filtering, correlation and notification of events close to where they occur and thus reduce network traffic. GEM is a declarative rule-based language in which the notion of real time has been closely integrated and various temporal constraints can be specified for event composition. The paper discusses the effect of communication delays on composite event detection and presents a tree-based solution for dealing with out-of-order event arrivals at event monitors.

[1]  Klaus R. Dittrich,et al.  Detecting composite events in active database systems using Petri nets , 1994, Proceedings of IEEE International Workshop on Research Issues in Data Engineering: Active Databases Systems.

[2]  Yossi A. Nygate,et al.  Event correlation using rule and object based techniques , 1995, Integrated Network Management.

[3]  M. Mansouri-Samani,et al.  Monitoring distributed systems , 1993, IEEE Network.

[4]  Dieter Haban,et al.  A Hybrid Monitor for Behavior and Performance Analysis of Distributed Systems , 1990, IEEE Trans. Software Eng..

[5]  Kenneth P. Birman,et al.  Tools for distributed application management , 1991, Computer.

[6]  Narain H. Gehani,et al.  Composite Event Specification in Active Databases: Model & Implementation , 1992, VLDB.

[7]  Sharma Chakravarthy,et al.  Snoop: An Expressive Event Specification Language for Active Databases , 1994, Data Knowl. Eng..

[8]  Yechiam Yemini,et al.  Managing Communication Networks by Monitoring Databases , 1991, IEEE Trans. Software Eng..

[9]  Umeshwar Dayal,et al.  Active Database Management Systems , 1988, JCDKB.

[10]  Naranker Dulay,et al.  Regis: a constructive development environment for distributed programs , 1994, Distributed Syst. Eng..

[11]  Dan C. Marinescu,et al.  Specification and identification of events for debugging and performance monitoring of distributed multiprocessor systems , 1990, Proceedings.,10th International Conference on Distributed Computing Systems.

[12]  Richard J. LeBlanc,et al.  Event-Driven Monitoring of Distributed Programs , 1985, ICDCS.

[13]  Hendrik Segers,et al.  Composite event specification in active databases: model and implementation , 1992 .

[14]  M. Spezialetti,et al.  A general approach to recognizing event occurrences in distributed computations , 1988, [1988] Proceedings. The 8th International Conference on Distributed.

[15]  Madalene Spezialetti,et al.  EVEREST: an event recognition testbed , 1995, Proceedings of 15th International Conference on Distributed Computing Systems.

[16]  Peter C. Bates.  Debugging Heterogeneous Distributed Systems Using Event-Based Models of Behavior , 1995, ACM Trans. Comput. Syst..

[17]  Mark Weissman,et al.  Real-time telecommunication network management: extending event correlation with temporal constraints , 1995, Integrated Network Management.

[18]  Sharma Chakravarthy,et al.  Anatomy of a Composite Event Detector , 1993 .

[19]  Morris Sloman,et al.  A configurable event service for distributed systems , 1996, Proceedings of International Conference on Configurable Distributed Systems.

[20]  C. V. Ramamoorthy,et al.  Monitoring and control of distributed systems , 1990, Systems Integration '90. Proceedings of the First International Conference on Systems Integration.

[21]  Salvatore J. Stolfo,et al.  A coding approach to event correlation , 1995, Integrated Network Management.

[22]  Jean Bacon,et al.  Using events to build distributed applications , 1995, Second International Workshop on Services in Distributed and Networked Environments.

[23]  Morris Sloman,et al.  Implementation of a Management Agent fo r Interpreting Obligation Policy , 1996 .