Real-time business event analysis and monitoring
Techniques for managing real-time business event analysis and monitoring are provided. In some examples, a logical request may be received at a business intelligence server configured with a continuous query service. Additionally, the continuous query service may be configured to translate the logical request into a physical request. Further, business intelligence information may be provided based at least in part on querying against an event data stream with a continuous query configured based at least in part on the physical request translated by the continuous query service.
1 . A system, comprising:
a memory storing a plurality of instructions; and
one or more processors configured to access the memory and further configured to execute the plurality of instructions to at least:
implement, by a server device, a continuous query service;
receive, at the continuous query service via an application programming interface (API), a request from a user, the request being at least in part in a logical form configured to identify one or more events;
automatically generate, by the continuous query service, a tactical query based at least in part on the logical form of the request from the user;
translate, by the continuous query service, the tactical query into a continuous query by generating the continuous query, the continuous query configured to query against a stream of event data associated with the user based at least in part on the translation;
convert, by an adapter of the continuous query service, the event data into a normalized format;
process, by a continuous query engine, the converted event data by utilizing the continuous query; and
provide information associated with an event pattern associated with the processed event data to a client device for presentation as part of an alert in a user interface comprising at least one visualization of a plurality of watch list user interfaces.
2 . The system of claim 1 , wherein the plurality of watch list user interfaces comprises key performance indicator watch list user interfaces.
3 . The system of claim 2 , wherein the one or more processors are further configured to execute the plurality of instructions to at least enable output events of the continuous query to be stored in a plurality of output tables.
4 . The system of claim 3 , wherein each output table of the plurality of output tables corresponds to a respective key performance indicator watch list user interface of the plurality of key performance indicator watch list user interfaces.
5 . The system of claim 4 , wherein each respective key performance indicator watch list user interface is configured to display real-time data of each respective key performance indicator.
6 . The system of claim 5 , wherein the one or more processors are further configured to execute the plurality of instructions to at least generate the alert, for a particular key performance indicator watch list user interface, according to the updated entry in the corresponding output table being over a threshold corresponding to the affected key performance indicators.
7 . The system of claim 1 , wherein the tactical query is received from a logical business model of the server device.
8 . A non-transitory computer-readable memory storing a plurality of instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, at the continuous query service via an application programming interface (API), a request from a user, the request comprising a logical statement requesting identification of one or more events;
automatically generate, by the continuous query service, a tactical query based at least in part on the logical statement of the request from the user;
translating, by the continuous query service, the tactical query into a continuous query by generating the continuous query, the continuous query configured to query against a stream of event data associated with the user based at least in part on the translation;
converting, by an adapter of the continuous query service, the event data into a normalized format;
processing, by a continuous query engine, the converted event data by utilizing the continuous query; and
providing information associated with an event pattern associated with the processed event data to a client device for presentation as part of an alert in a user interface comprising at least one visualization of a plurality of watch list user interfaces.
9 . The non-transitory computer-readable memory of claim 8 , wherein the plurality of watch list user interfaces comprises key performance indicator watch list user interfaces.
10 . The non-transitory computer-readable memory of claim 9 , wherein the operations further comprise enabling output events of the continuous query to be stored in a plurality of output tables.
11 . The non-transitory computer-implemented method of claim 10 , wherein each output table of the plurality of output tables corresponds to a respective key performance indicator watch list user interface of the plurality of key performance indicator watch list user interfaces.
12 . The non-transitory computer-implemented method of claim 11 , wherein each respective key performance indicator watch list user interface is configured to display real-time data of each respective key performance indicator.
13 . The non-transitory computer-implemented method of claim 12 , wherein the operations further comprise generating the alert, for a particular key performance indicator watch list user interface, according to the updated entry in the corresponding output table being over a threshold corresponding to the affected key performance indicators.
14 . A computer-implemented method, comprising:
receiving, at a continuous query service via an application programming interface (API), a request from a user, the request comprising a logical form configured to identify one or more events;
automatically generating, by the continuous query service, a tactical query based at least in part on the logical form of the request from the user;
translating, by the continuous query service, the tactical query into a continuous query by generating the continuous query, the continuous query configured to query against a stream of event data associated with the user based at least in part on the translation;
converting, by an adapter of the continuous query service, the event data into a normalized format;
processing, by a continuous query engine, the converted event data by utilizing the continuous query; and
providing information associated with an event pattern associated with the processed event data to a client device for presentation as part of an alert in a user interface comprising at least one visualization of a plurality of watch list user interfaces.
15 . The computer-implemented method of claim 14 , wherein the plurality of watch list user interfaces comprises key performance indicator watch list user interfaces.
16 . The computer-implemented method of claim 15 , wherein the one or more processors are further configured to execute the plurality of instructions to at least enable output events of the continuous query to be stored in a plurality of output tables.
17 . The computer-implemented method of claim 16 , wherein each output table of the plurality of output tables corresponds to a respective key performance indicator watch list user interface of the plurality of key performance indicator watch list user interfaces.
18 . The computer-implemented method of claim 17 , wherein each respective key performance indicator watch list user interface is configured to display real-time data of each respective key performance indicator.
19 . The computer-implemented method of claim 18 , wherein the one or more processors are further configured to execute the plurality of instructions to at least generate the alert, for a particular key performance indicator watch list user interface, according to the updated entry in the corresponding output table being over a threshold corresponding to the affected key performance indicators.
20 . The system of claim 1 , wherein the continuous query engine is instantiated by an event application, the event application instantiated within the continuous query service.