Abstract: A policy handling system creates multiple policies and associates each of the multiple policies with at least one target node in an enterprise. The system then applies each of the multiple policies to the appropriate target node. The multiple policies can be event-handling policies. Each policy can be associated with a group of target nodes in which the group of target nodes share a common relationship. Domain controllers receive the multiple policies and apply the policies to the appropriate target nodes. A meta-policy is used to control the application of the multiple policies to the proper target nodes.

Abstract: An event-handling system identifies multiple policies to be combined together in a merged policy set. The system determines whether any conflicts exist between the multiple policies. Any non-conflicting policies are included in the merged policy set. The system resolves conflicting policies by selecting a preferred policy and including the preferred policy in the merged policy set. The preferred policy is selected by arranging conflicting policy templates in order from global policies to local policies and determining the intersection of the conflicting policy templates. The preferred policy template is selected based on the policy template closest to the local policies and within the intersection of the conflicting policy templates.

Abstract: An event-handling system assigns multiple devices in an enterprise to a group. At least one event-handling policy is assigned to the group of devices. The event-handling policy assigned to the group is associated with each of the multiple devices in the group. A current state of each device is evaluated before the event-handling policy is applied to the device. A particular device may be assigned to two or more groups. The event-handling policy may define how the device is configured or the types of events that are provided to each device.

Abstract: Systems and methods for reporting the occurrence of events in a computer system to event subscriber software. A computer system includes an event-filtering component that receives notification of the occurrence of events, filters the events, and reports selected events to the subscriber software. The event-filtering component can expose standardized interfaces to the event providers that report events and to the subscriber software to which events are reported. Filtering can be facilitated by event-filtering definitions written in a query language and associated with the subscriber software. The definitions are processed in the context of an object-oriented, hierarchical classification of event classes that comprehend any possible events that can be reported by the event providers. When reported events satisfy one or more query-based filtering definitions, the events are passed to the appropriate subscriber software. Otherwise, the events are discarded.

Abstract: An event management system includes an email consumer for handling email, a paging consumer, an active scripting consumer, a log file consumer, an event log consumer, and a command line consumer. The events in the event management system are represented as objects and each consumer is represented as a class. The system also includes an event forwarding consumer to forward events. The event management system allows the creation of an instance of an event filter which filters events based on event filter properties. The system also allows the creation of an instance of an event consumer which defines an action and creation of a binding between the instance of the event filter and the instance of the event consumer such that the binding includes properties identifying the instance of the event filter and the instance of the event consumer.

Abstract: Systems and methods for reporting the occurrence of events in a computer system to event subscriber software are disclosed. Events arc detected within a computer system or computer system environment by event detection components. An Event provider receives notification of the occurrence of each event. Instead of the event provider then forwarding each of the events to a single, centralized location for filtering, embodiments of the present invention perform the filtering of events at the location of the event provider. This is accomplished by custom forward marshaling a proxy to each event provider. Also marshaled is at least one event-filtering definition that specifics which events should be reported by that event provider to the subscriber software. The event-filtering definitions are written in a structured query language, which can be used to precisely select which events are to be reported.

Abstract: Systems and methods for reporting the occurrence of events in a computer system to event subscriber software. A computer system includes a central repository wherein event subscribers register the types or classes of events for which they require notification and event providers register the types or classes of events they are capable of detecting and for which they will provide notifications. The registrations, both by providers and subscribers, are made according to a standardized hierarchical classification of event classes and are preferably expressed in the form of queries. The computer system also includes an event-filtering component that receives notification of the occurrence of events, filters the events, and reports selected events to the subscriber software. The event-filtering component can expose standardized interfaces to the event providers that report events and to the subscriber software to which events are reported.

Abstract: Systems and methods for constructing and using filtering trees to compare events, data, or other instances of objects defined in an object-oriented schema against one or more query-based definitions. The filtering trees correspond to the logical expressions of one or more query-based definitions, and represent the structure of the computer-executable instructions for comparing events with the definitions. The filtering trees can be traversed so as to simultaneously compare the parameters of an event against multiple logical expressions. The filtering tree is traversed in a top to bottom cascading fashion until a leaf node is encountered in a process that is conceptually equivalent to processing the logical operations associated with the nodes. When a leaf node is encountered, an ordered set of logical values associated with the leaf node indicates which, if any, of the definitions are satisfied by the event.