Abstract: A method of operating a data processing system to monitor conforming events generated by an event generating system is disclosed. The method includes storing lists of workflow definitions and active workflow instances. Each workflow definition includes a plurality of phase definitions, each phase definition includes a list of event types that start and terminate that phase. Each active workflow instance conforms to one of the workflow definitions and includes a list of active phase instances for that active workflow instance. Conforming events are processed by terminating an active phase instance if the conforming event corresponds to an event that terminates that active phase instance, by starting a new active phase instance if the conforming event corresponds to an event that starts a phase corresponding to one of the workflow instances, and by recording the conforming event and all active phase instances that were started or terminated by the conforming event.

Abstract: An improved method for operating a computer system that receives URL messages, each message having a path portion and a query portion. Each message conforms to a set of syntax rules. Copies of the received messages are stored in log files having a predetermined format. The computer system includes a program for counting the number of times messages having a unique path portion are present in one of the log files. In the method of the present invention, a rule is provided that includes data specifying a path and a query parameter. Each URL message received by the computer system is examined to determine if the path portion of that URL is the same as the path specified in the rule. If the path portion matches the specified path, a re-written URL message is generated by moving the query parameter specified in the rule from the query portion of that URL to the path portion of the URL. The re-written URL message is then stored in a first one of the log files.