US 12,393,472 B2
Unified event processing and log management over multiple domains
Loris Degioanni, San Francisco, CA (US)
Assigned to Sysdig, Inc., San Francisco, CA (US)
Filed by Sysdig, Inc., San Francisco, CA (US)
Filed on Jul. 5, 2024, as Appl. No. 18/764,996.
Application 18/764,996 is a continuation of application No. 18/092,332, filed on Jan. 1, 2023, granted, now 12,056,542.
Application 18/092,332 is a continuation of application No. 17/672,624, filed on Feb. 15, 2022, granted, now 11,544,124, issued on Jan. 3, 2023.
Prior Publication US 2024/0362090 A1, Oct. 31, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 9/54 (2006.01); G06F 9/445 (2018.01); G06F 9/50 (2006.01)
CPC G06F 9/542 (2013.01) [G06F 9/44526 (2013.01); G06F 9/5016 (2013.01); G06F 9/5072 (2013.01); G06F 9/541 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method of providing unified event monitoring and log processing, the method comprising:
receiving from a plurality of domains, streaming event data comprising a plurality of event entries, wherein the domains include a process or an application, running in one or more containers of a cloud platform;
processing the streaming event data into a normalized, domain-independent format;
evaluating a plurality of policy rules on the processed streaming event data, wherein the policy rules are defined with a unified syntax, and each of the policy rules specifies a condition, an action to be executed when the condition is satisfied, and data for executing the action; and
in response to the evaluating satisfying a condition specified in a policy rule of the policy rules, transmitting to a remote device: (1) information indicating an action specified in the policy rule for execution by the remote device, and (2) data specified in the policy rule for executing the action.