Real-time activity monitoring and reporting
View Patent ↗In order to track activities in a computerized system with client-server or other communications, a system configuration is needed which monitors, logs and reports traffic. This is somewhat akin to but not entirely similar a firewall. Thus, the invention contemplates a real-time, platform-independent, rule-based activity monitor for detecting a particular activity of interest as it occurs and for reporting such activity and the user substantially as fast.
1. A method, comprising:
in a computerized private network system with a host and one or more clients in communication with the host, instantiating a client session associated with a particular client that interfaces with a server application on the host, the server application having one or more screens associated therewith, each screen containing one or more fields;
establishing in an application-layer monitor a connection with the server application for the instantiated client session, the application-layer monitor being deployed on the host and logically interposed between the server application on the host and the particular client;
selecting a field from the one or more fields;
defining a rule configured to monitor the field for a pre-set condition, the rule initiating an action when the rule is met;
associating the rule to the field; and
uploading the rule to the application-layer monitor for subsequent run-time use, the application-layer monitor being configured to substantially in real-time copy all communications between the client and the application on the host and to apply the rule to-field to evaluate activity embodied in client-server communications to determine whether the evaluated activity meets the rule, the action being configured to initiate when the evaluated activity meets the rule.
2. A method as in claim 1 , wherein the rule is defined using a wizard at the host.
3. A method as in claim 1 , wherein the rule is incorporated in an XML instruction file.
4. A method as in claim 1 , further comprising recording the client session, and wherein the action is replaying of the recorded client session.
5. An apparatus comprising:
means for, in a computerized private network system with a host and one or more clients in communication with the host, instantiating a client session associated with a particular client that interfaces with a server application on the host, the server application having one or more screens associated therewith, each screen containing one or more fields;
means for establishing in an application-layer monitor a connection with the server application for the instantiated client session, the application-layer monitor being deployed on the host and logically interposed between the server application on the host and the particular client;
means for selecting a field from the one or more fields;
means for defining a rule configured to monitor the field for a pre-set condition, the rule initiating an action when the rule is met;
means for associating the rule to the field; and
means for uploading the rule to the application-layer monitor for subsequent run-time use, the application-layer monitor being configured to substantially in real-time copy all communications between the client and the application on the host and to apply the rule to the field to evaluate activity embodied in client-server communications to determine whether the evaluated activity meets the rule, the action being configured to initiate when the evaluated activity meets the rule.
6. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method, the method comprising:
in a computerized private network system with a host and one or more clients in communication with the host, instantiating a client session associated with a particular client that interfaces with a server application on the host, the server application having one or more screens associated therewith, each screen containing one or more fields;
establishing in an application-layer monitor a connection with the server application for the instantiated client session, the application-layer monitor being deployed on the host and logically interposed between the server application on the host and the particular client;
selecting a field from the one or more fields;
defining a rule configured to monitor the field for a pre-set condition, the rule initiating an action when the rule is met;
associating the rule to the field; and
uploading the rule to the application-layer monitor for subsequent run-time use, the application-layer monitor being configured to substantially in real-time copy all communications between the client and the application on the host and to apply the rule to the field to evaluate activity embodied in client-server communications to determine whether the evaluated activity meets the rule, the action being configured to initiate when the evaluated activity meets the rule.