US 11,722,538 B2
Intelligent and near real-time monitoring in a streaming environment
Elizabeth Fay Osborne, Kansas City, MO (US); Scott Gordon Siebers, Leawood, KS (US); Chad G. Hays, Overland Park, KS (US); Jason Andrew Komarek, Kearney, MO (US); and Todd Bechtel, Overland Park, KS (US)
Assigned to Cerner Innovation, Inc., Kansas City, MO (US)
Filed by CERNER INNOVATION, INC., Kansas City, MO (US)
Filed on May 5, 2022, as Appl. No. 17/737,553.
Application 17/737,553 is a continuation of application No. 17/146,925, filed on Jan. 12, 2021, granted, now 11,356,490.
Application 17/146,925 is a continuation of application No. 16/525,901, filed on Jul. 30, 2019, granted, now 10,917,447, issued on Jan. 20, 2021.
Application 16/525,901 is a continuation of application No. 15/389,578, filed on Dec. 23, 2016, granted, now 10,462,199, issued on Oct. 9, 2019.
Prior Publication US 2022/0272138 A1, Aug. 25, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 65/61 (2022.01); G06N 5/04 (2023.01); G06N 5/046 (2023.01); G06N 20/00 (2019.01); H04L 65/1083 (2022.01); G06N 7/01 (2023.01)
CPC H04L 65/61 (2022.05) [G06N 5/046 (2013.01); G06N 7/01 (2023.01); G06N 20/00 (2019.01); H04L 65/1083 (2013.01)] 30 Claims
OG exemplary drawing
 
1. A computerized method for real-time rule execution and event detection in a data streaming environment, the method comprising:
partitioning streamed data to create a plurality of concurrent sessions based on a plurality of identifiers in the streamed data, each session of the plurality of concurrent sessions being associated with a different corresponding identifier of the plurality of identifiers, and each session of the plurality of concurrent sessions comprising data items of the streamed data that are associated with the corresponding identifier;
for at least one session of the plurality of concurrent sessions:
executing a rule against the data items in the at least one session;
detecting an event in the at least one session based on a threshold associated with the rule;
adjusting the threshold associated with the rule in response to detecting the event in the at least one session; and
storing information regarding the data items in the at least one session, the rule that is executed, and the event that is detected; and
tearing down one or more of the plurality of concurrent sessions based on a predefined time period expiring since the creation of the one or more of the plurality of concurrent sessions.