Method of processing a source set of raw events to a target set of typed events

1. A method, implemented by a computing device, of processing a raw event of an unknown event type to a typed event, the raw event including data items that contain data values of detectable data types, the data items being structured according to a raw structure defining a first order of the data items, the method comprising:

(a) accessing, by the computing device, a library that includes a plurality of event type objects, each event type object relating to a given event type and including attributes of given data types, the attributes included in each event type object being structured according to a predefined structure defining a second order of the attributes;

(b) determining, by the computing device, at least one event type object for the raw event from the plurality of event type objects in the library, the at least one event type object being determined based on meeting following criteria without defined mapping of the data items of the raw event and the attributes of the at least one event type object, wherein the criteria comprise:

a first criterion in which each data item included in the raw event maps to an attribute included in the at least one event type object, wherein the raw event includes a total number of mapped data items that is determined to equal a total number of attributes in the at least one event type object, and

a second criterion in which a data value contained in each data item is of a data type detected to match the given data type of the mapped attribute; and

(c) generating, by the computing device, at least one typed event from the raw event, the at least one typed event including the data values of the raw event restructured from the first order of the raw structure to the second order of the predefined structure of the determined at least one event type object.

2. The method of claim 1 , wherein an event type object in the library is provided with at least one mandatory attribute and wherein in (b) a following third criterion must be met for the event type object in order to be determined:

said at least one mandatory attribute of said event type object must be mapped by at least one data item of the raw event.

3. The method of claim 1 , wherein an event type object in the library is provided with at least one data value constraint and wherein in (b) a following fourth criterion must be met for said event type object in order to be determined:

said at least one data value constraint of said event type object must be met by a data value contained in a data item of the raw event.

4. The method of claim 3 , wherein the meeting of the data value constraint is a fuzzy match using a semantic knowledgebase of possible data values and meeting constraints.

5. The method of claim 1 , wherein each data item included in the raw event has a data name paired to its data value and each attribute included in said event type object has an attribute name and wherein in (b) a following fifth criterion must be met for the event type object in order to be determined:

the data name of the paired data value included in each data item of the raw event must match the attribute name of the mapped attribute included in said event type object.

6. The method of claim 5 , wherein the match is a fuzzy match using a semantic knowledgebase of possible data names and matching attribute names.

7. The method of claim 1 , wherein in case multiple event type objects are determined for the raw event in (b), multiple typed events are generated from the raw event in (c).

8. The method of claim 1 , wherein the raw event is a message in Extensible Markup Language (XML) format.

9. The method of claim 8 , wherein the method further comprises preprocessing the raw event using an XML-Stylesheet.

10. The method of claim 1 , wherein the method is performed by an input adapter of an event-based system.

11. A method, implemented by a computing device, of processing a raw event of an unknown event type to a typed event, the raw event including data items that contain data values of detectable data types, the data items being structured according to a raw structure defining a first order of the data items, the method comprising:

(a) accessing, by the computing device, a library that includes a plurality of event type objects, each event type object relating to a given event type and including attributes of given data types, the attributes included in each event type object being structured according to a predefined structure defining a second order of the attributes;

(b) searching, by the computing device, for at least one event type object for the raw event from the plurality of event type objects in the library, the at least one event type object being determined based on meeting following criteria without defined mapping of the data items of the raw event and the attributes of the at least one event type object, wherein the criteria comprise:

a first criterion in which each data item included in the raw event maps to an attribute included in the at least one event type object, such that the raw event includes a total number of mapped data items that is determined to equal a total number of attributes in the at least one event type object, and

a second criterion in which a data value contained in each data item is of a data type detected to match the given data type of the mapped attribute; and

(c) if the at least one event type object is found for the raw event, generating, by the computing device, at least one typed event from the raw event to include the data values of the raw event re-structured from the first order of the raw structure to the second order of the predefined structure of the at least one event type object found, and, if no event type object is found for the raw event, generating, by the computing device, a new event type object that includes attributes and related data types which correspond to data items and related data types of the raw event.

12. The method of claim 11 , wherein an event type object in the library is provided with at least one mandatory attribute and wherein in (b) a following third criterion must be met for the event type object in order to be found:

said at least one mandatory attribute of said event type object must be mapped by at least one data item of the raw event.

13. The method of claim 11 , wherein an event type object in the library is provided with at least one data value constraint and wherein in (b) a following fourth criterion must be met for the event type object in order to be found:

said at least one data value constraint of said event type object must be met by a data value contained in a data item of the raw event.

14. The method of claim 13 , wherein the meeting of the data value constraint is a fuzzy match using a semantic knowledgebase of possible data values and meeting constraints.

15. The method of claim 11 , wherein each data item included in a raw event has a data name paired to its data value and each attribute included in an event type object has an attribute name and wherein in (b) a following fifth criterion must be met for the event type object in order to be found:

the data name of the paired data value included in each data item of the raw event must match the attribute name of the mapped included in said event type object; and wherein in (c), if the event type object is not found, said new event type object is generated with attribute names corresponding to data names of the raw event.

16. The method of claim 15 , wherein the match is a fuzzy match using a semantic knowledgebase of possible data names and matching attribute names.

17. The method of claim 11 , wherein in case multiple event type objects are found for the raw event in (b), multiple typed events are generated from the raw event in (c).

18. The method of claim 11 , wherein the raw the raw event is a message in Extensible Markup Language (XML) format.

19. The method of claim 18 , wherein the method further comprises preprocessing the raw event using an XML-Stylesheet.

20. The method of claim 11 , wherein the method is performed by an input adapter of an event-based system.