Checkpointing for delayed alert creation

1. A method of checkpointing for delayed alert creation, the method comprising:

applying, by an event and alert analysis module, a checkpoint to an events pool having events with corresponding alerts that have been generated and not delivered;

following a crash and the loss of the corresponding alerts not recorded in an alert database, generating, by the event and alert analysis module, new alerts based on the events in the events pool having the checkpoint;

in response to completing processing of a new alert, determining, by the event and alert analysis module, whether the alert database has an entry corresponding to the processed new alert;

if the alert database has an entry corresponding to the processed new alert, blocking, by the event and alert analysis module, the processed new alert from reporting to the alert database and blocking a user notification of the processed new alert; and

if the alert database does not have an entry corresponding to the processed new alert, writing, by the event and alert analysis module, the processed new alert to a delivery queue and reporting the processed new alert to the alert database including creating within the alert database, an entry corresponding to the processed new alert.

2. The method of claim 1 wherein the processed new alert has an alert type and location information; and

wherein determining whether an alert database has an entry corresponding to the processed new alert includes determining whether the alert database has an entry with an alert type and location information matching the alert type and the location information of the processed new alert.

3. The method of claim 1 wherein the checkpoint includes alert data for each of the corresponding alerts that have been generated and not delivered.

4. The method of claim 3 wherein each alert data includes an alert identification.

5. The method of claim 1 further comprising creating, by the event and alert analysis module, a plurality of checkpoints including a first checkpoint, the first checkpoint corresponding to a first events pool having at least one event with a corresponding alert that has been generated and not delivered.

6. The method of claim 5 further comprising:

determining for the first checkpoint, by the event and alert analysis module, that each alert corresponding to the events in the first events pool has been delivered; and

in response to determining that each alert corresponding to the events in the first events pool has been delivered, destroying, by the event and alert analysis module, the first checkpoint.

7. An apparatus for checkpointing for delayed alert creation in a distributed processing system, the apparatus comprising a computer processor and a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that when executed by the computer processor cause the apparatus to carry out the steps of:

applying, by an event and alert analysis module, a checkpoint to an events pool having events with corresponding alerts that have been generated and not delivered;

following a crash and the loss of the corresponding alerts not recorded in an alert database, generating, by the event and alert analysis module, new alerts based on the events in the events pool having the checkpoint;

in response to completing processing of a new alert, determining, by the event and alert analysis module, whether the alert database has an entry corresponding to the processed new alert;

if the alert database has an entry corresponding to the processed new alert, blocking, by the event and alert analysis module, the processed new alert from reporting to the alert database and blocking a user notification of the processed new alert; and

if the alert database does not have an entry corresponding to the processed new alert, writing, by the event and alert analysis module, the processed new alert to a delivery queue and reporting the processed new alert to the alert database including creating within the alert database, an entry corresponding to the processed new alert.

8. The apparatus of claim 7 wherein the processed new alert has an alert type and location information; and

wherein determining whether an alert database has an entry corresponding to the processed new alert includes determining whether the alert database has an entry with an alert type and location information matching the alert type and the location information of the processed new alert.

9. The apparatus of claim 7 wherein the checkpoint includes alert data for each of the corresponding alerts that have been generated and not delivered.

10. The apparatus of claim 9 wherein each alert data includes an alert identification.

11. The apparatus of claim 7 further comprising computer memory having disposed within it computer program instructions that when executed by the computer processor cause the apparatus to carry out the steps of: creating, by the event and alert analysis module, a plurality of checkpoints including a first checkpoint, the first checkpoint corresponding to a first events pool having at least one event with a corresponding alert that has been generated and not delivered.

12. The apparatus of claim 11 further comprising computer memory having disposed within it computer program instructions that when executed by the computer processor cause the apparatus to carry out the steps of:

determining for the first checkpoint, by the event and alert analysis module, that each alert corresponding to the events in the first events pool has been delivered; and

in response to determining that each alert corresponding to the events in the first events pool has been delivered, destroying, by the event and alert analysis module, the first checkpoint.

13. A computer program product for checkpointing for delayed alert creation in a distributed processing system, the computer program product disposed upon a non-transitory computer readable storage medium, the computer program product comprising computer program instructions that when executed by a computer cause the computer to carry out the steps of

applying, by an event and alert analysis module, a checkpoint to an events pool having events with corresponding alerts that have been generated and not delivered;

following a crash and the loss of the corresponding alerts not recorded in an alert database, generating, by the event and alert analysis module, new alerts based on the events in the events pool having the checkpoint;

in response to completing processing of a new alert, determining, by the event and alert analysis module, whether the alert database has an entry corresponding to the processed new alert;

if the alert database has an entry corresponding to the processed new alert, blocking, by the event and alert analysis module, the processed new alert from reporting to the alert database and blocking a user notification of the processed new alert; and

if the alert database does not have an entry corresponding to the processed new alert, writing, by the event and alert analysis module, the processed new alert to a delivery queue and reporting the processed new alert to the alert database including creating within the alert database, an entry corresponding to the processed new alert.

14. The computer program product of claim 13 wherein the processed new alert has an alert type and location information; and

wherein determining whether an alert database has an entry corresponding to the processed new alert includes determining whether the alert database has an entry with an alert type and location information matching the alert type and the location information of the processed new alert.

15. The computer program product of claim 13 wherein the checkpoint includes alert data for each of the corresponding alerts that have been generated and not delivered.

16. The computer program product of claim 15 wherein each alert data includes at least one of an alert identification, an alert location, and an alert type.

17. The computer program product of claim 13 further comprising computer program instructions that when executed by a computer cause the computer to carry out the steps of creating, by the event and alert analysis module, a plurality of checkpoints including a first checkpoint, the first checkpoint corresponding to a first events pool having at least one event with a corresponding alert that has been generated and not delivered.

18. The computer program product of claim 17 further comprising computer program instructions that when executed by a computer cause the computer to carry out the steps of:

determining for the first checkpoint, by the event and alert analysis module, that each alert corresponding to the events in the first events pool has been delivered; and

in response to determining that each alert corresponding to the events in the first events pool has been delivered, destroying, by the event and alert analysis module, the first checkpoint.

19. The computer program product of claim 13 , wherein the non-transitory computer readable storage medium includes a storage medium.