US5867659A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for monitoring events in a system
Assignee: Intel Corp
•
Filing: 1996-06-28
•
Granted: 1999-02-02
•
Expires: 2016-06-28
Abstract
Abstract An event log forwarder accesses a set of one or more filters and checks whether a new event in one or more event logs satisfies the set of one or more filters. The event log forwarder also provides an indication if there is a new event which satisfies the set of one or more filters. Additionally, the event log forwarder automatically repeats, at periodic intervals, checking whether a new event in one or more event logs satisfies the set of one or more filters and providing an indication if there is a new event which satisfied the set of one or more filters.
Inventors
- 👤 Steven D. Otteson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 21:11
CPC Classifications
G; G06; G06F; G06F11/00; G06F11/30; G06F11/34; G06F11/3466; G06F11/32; G06F11/324; G06F11/327; G06F11/3495; G06F2201/00; G06F2201/86
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
93 words
A computer-implemented method of monitoring events in a computer system, the method comprising the steps of: (a) accessing a set of one or more filters; (b) checking whether a new event in one or more event logs updated as a function of an operating system executing on the computer system satisfies the set of one or more filters; (c) providing an indication if there is a new event which satisfies the set of one or more filters; and (d) automatically repeating the checking step (b) and the providing step (c) at periodic intervals.
Claim 2
Dependent Claim
93 words
A computer-implemented method of monitoring events in a computer system, the method comprising the steps of: (a) accessing a set of one or more filters; (b) checking whether a new event in one or more event logs updated as a function of an operating system executing on the computer system satisfies the set of one or more filters; (c) providing an indication if there is a new event which satisfies the set of one or more filters; and (d) automatically repeating the checking step (b) and the providing step (c) at periodic intervals.
Claim 3
Dependent Claim
19 words
The method of claim 1, wherein the set of one or more filters includes one or more inclusive filters.
Claim 4
Dependent Claim
19 words
The method of claim 1, wherein the set of one or more filters includes one or more exclusive filters.
Claim 5
Dependent Claim
22 words
The method of claim 1, wherein the providing step (c) comprises providing the indication to a simple network management protocol (SNMP) console.
Claim 6
Dependent Claim
33 words
The method of claim 1, wherein the system includes a plurality of computer systems and wherein the set of one or more filters indicates a particular one of the plurality of computer systems.
Claim 7
Dependent Claim
24 words
The method of claim 1, wherein the set of one or more filters indicates a particular one of multiple applications executing on the system.
Claim 8
Dependent Claim
30 words
The method of claim 1, further comprising the steps of: receiving an indication of the set of one or more filters; and storing the set of one or more filters.
Claim 9
Dependent Claim
71 words
A computer-implemented method of identifying events to be monitored in a computer system, the method comprising the steps of: (a) receiving an indication of an event log updated as a function of an operating system executing on the computer system; (b) receiving an indication of an application; (c) receiving an indication of an event; and (d) storing the event log, the application, and the event as a filter in the system.
Claim 10
Dependent Claim
71 words
A computer-implemented method of identifying events to be monitored in a computer system, the method comprising the steps of: (a) receiving an indication of an event log updated as a function of an operating system executing on the computer system; (b) receiving an indication of an application; (c) receiving an indication of an event; and (d) storing the event log, the application, and the event as a filter in the system.
Claim 11
Dependent Claim
16 words
The method of claim 8, further comprising the step of repeating steps (a)-(c) for subsequent filters.
Claim 12
Dependent Claim
101 words
A computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, result in: (a) accessing a set of one or more filters; (b) checking whether a new event in one or more event logs updated as a function of an operating system executing on a computer system satisfies the set of one or more filters; (c) providing an indication if there is a new event which satisfies the set of one or more filters; and (d) automatically repeating the checking step (b) and the providing step (c) at periodic intervals.
Claim 13
Dependent Claim
101 words
A computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, result in: (a) accessing a set of one or more filters; (b) checking whether a new event in one or more event logs updated as a function of an operating system executing on a computer system satisfies the set of one or more filters; (c) providing an indication if there is a new event which satisfies the set of one or more filters; and (d) automatically repeating the checking step (b) and the providing step (c) at periodic intervals.
Claim 14
Dependent Claim
23 words
The computer-readable medium of claim 10, wherein the providing step (c) comprises providing the indication to a simple network management protocol (SNMP) console.
Claim 15
Dependent Claim
37 words
The computer-readable medium of claim 10, wherein the computer-readable medium is coupled to a plurality of computer systems, and wherein the set of one or more filters indicates a particular one of the plurality of computer systems.
Claim 16
Dependent Claim
31 words
The computer-readable medium of claim 10, wherein the set of one or more filters indicates a particular one of multiple applications executing on a computer system coupled to the computer-readable medium.
Claim 17
Dependent Claim
34 words
The computer-readable medium of claim 10, further comprising instructions which, when executed, result in: receiving an indication of the set of one or more filters; and storing the set of one or more filters.
Claim 18
Independent Claim
95 words
An apparatus comprising: a storage device which stores a set of one or more filters; and a processor, coupled to the storage device, to access the set of one or more filters, to check whether a new event in one or more event logs updated as a function of the apparatus satisfies the set of one or more filters, to provide an indication if there is a new event which satisfies the set of one or more filters, and to automatically re-check the one or more event logs for the new event at periodic intervals.
Claim 19
Independent Claim
95 words
An apparatus comprising: a storage device which stores a set of one or more filters; and a processor, coupled to the storage device, to access the set of one or more filters, to check whether a new event in one or more event logs updated as a function of the apparatus satisfies the set of one or more filters, to provide an indication if there is a new event which satisfies the set of one or more filters, and to automatically re-check the one or more event logs for the new event at periodic intervals.
Claim 20
Dependent Claim
22 words
The apparatus of claim 15, wherein the processor is also to provide the indication to a simple network management protocol (SNMP) console.
Claim 21
Dependent Claim
35 words
The apparatus of claim 15, wherein the apparatus is coupled to a plurality of computer systems and wherein the set of one or more filters indicates a particular one of the plurality of computer systems.
Claim 22
Dependent Claim
36 words
The apparatus of claim 15, wherein the processor is also to receive an indication of the set of one or more filters and to store the set of one or more filters in the storage device.
Claim 23
Independent Claim
87 words
An apparatus comprising: means for accessing a set of one or more filters; means for checking whether a new event in one or more event logs updated as a normal function of the apparatus satisfies the set of one or more filters; means for providing an indication if there is a new event in the one or more event logs which satisfies the set of one or more filters; and means for automatically re-checking the one or more event logs for the new event at periodic intervals.
Claim 24
Independent Claim
87 words
An apparatus comprising: means for accessing a set of one or more filters; means for checking whether a new event in one or more event logs updated as a normal function of the apparatus satisfies the set of one or more filters; means for providing an indication if there is a new event in the one or more event logs which satisfies the set of one or more filters; and means for automatically re-checking the one or more event logs for the new event at periodic intervals.
Claim 25
Dependent Claim
35 words
The apparatus of claim 19, wherein the apparatus is coupled to a plurality of computer systems and wherein the set of one or more filters indicates a particular one of the plurality of computer systems.
Claim 26
Dependent Claim
31 words
The apparatus of claim 19, further comprising: means for receiving an indication of the set of one or more filters; and means for storing the set of one or more filters.
References Cited (Backward Citations)
US5261044A
Cited
US5504921A
Cited
US5317742A
Cited
US5283856A
Cited
US5592620A
Cited
US5590056A
Cited
US5619656A
Cited
US5651006A
Cited
US5655081A
Cited
US5682328A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-02-01 | 2002-08-03 | 2003-02-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-02-01 | 2006-08-03 | 2007-02-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-02-01 | 2010-08-03 | 2011-02-02 | $7700.00 | Window Closed / Lapsed |