Stream computing event models

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for classifying events in a stream computing system using hierarchical analytic models. One of the methods includes receiving, by a stream computing system, data representing the values of one or more data attributes of an event in a stream of events. The values of each of the one or more data attributes are evaluated according to respective attribute-specific and class-specific criteria of a hierarchical analytic model in a predetermined order defined by the model. When a first value of a first data attribute satisfies one or more particular criteria for a first class, the first class of the plurality of classes is assigned to the event.

What is claimed is: 
     
         1 . A computer-implemented method comprising:
 receiving, by a stream computing system, data representing respective values of one or more data attributes of an event in a stream of events;   obtaining a hierarchical analytic model that defines a plurality of classes, an ordering of the plurality of classes, and, for each class, a respective sequence of sets of attribute-specific criteria for the class;   processing each class in the ordering of the plurality of classes including evaluating, for each class, the sets of attribute-specific criteria in the sequence of sets of attribute-specific criteria for the class until one or more values of the event satisfy a particular set of attribute-specific criteria for a first class of the plurality of classes; and   assigning the first class of the plurality of classes to the event.   
     
     
         2 . The method of  claim 1 , wherein evaluating, for each class, the sets of attribute-specific criteria in the sequence of sets of attribute-specific criteria for the class comprises evaluating all sets of attribute-specific criteria for each class before evaluating any sets of attribute-specific criteria for any subsequent class in the ordering of the plurality of classes. 
     
     
         3 . The method of  claim 1 , further comprising:
 in response to determining that the one or more values of the event satisfy the particular set of attribute-specific criteria for the first class, bypassing evaluation of all other classes and all other sets of attribute-specific criteria.   
     
     
         4 . The method of  claim 1 , wherein the hierarchical analytic model defines, for a particular class, at least one set of attribute-specific criteria for data attributes at multiple different layers of a telecommunications protocol stack. 
     
     
         5 . The method of  claim 1 , wherein the hierarchical analytic model specifies attribute-specific criteria for different attributes for each class of the plurality of classes. 
     
     
         6 . The method of  claim 1 , further comprising:
 receiving a second event from a different second stream of events;   assigning a different second class to the second event; and   computing a cross-stream metric using the first class assigned to the event and a second class assigned to a second event.   
     
     
         7 . The method of  claim 1 , wherein the plurality of classes includes no more than five classes. 
     
     
         8 . The method of  claim 1 , wherein the event represents a user sending a short message service (SMS) message through a telecommunications network. 
     
     
         9 . The method of  claim 1 , wherein the event represents a user making a voice call through a telecommunications network. 
     
     
         10 . The method of  claim 1 , wherein the stream is an unbounded sequence of events received in real-time. 
     
     
         11 . A system comprising:
 one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:   receiving, by a stream computing system, data representing respective values of one or more data attributes of an event in a stream of events;   obtaining a hierarchical analytic model that defines a plurality of classes, an ordering of the plurality of classes, and, for each class, a respective sequence of sets of attribute-specific criteria for the class;   processing each class in the ordering of the plurality of classes including evaluating, for each class, the sets of attribute-specific criteria in the sequence of sets of attribute-specific criteria for the class until one or more values of the event satisfy a particular set of attribute-specific criteria for a first class of the plurality of classes; and   assigning the first class of the plurality of classes to the event.   
     
     
         12 . The system of  claim 10 , wherein evaluating, for each class, the sets of attribute-specific criteria in the sequence of sets of attribute-specific criteria for the class comprises evaluating all sets of attribute-specific criteria for each class before evaluating any sets of attribute-specific criteria for any subsequent class in the ordering of the plurality of classes. 
     
     
         13 . The system of  claim 10 , wherein the operations further comprise:
 in response to determining that the one or more values of the event satisfy the particular set of attribute-specific criteria for the first class, bypassing evaluation of all other classes and all other sets of attribute-specific criteria.   
     
     
         14 . The system of  claim 10 , wherein the hierarchical analytic model defines, for a particular class, at least one set of attribute-specific criteria for data attributes at multiple different layers of a telecommunications protocol stack. 
     
     
         15 . The system of  claim 10 , wherein the hierarchical analytic model specifies attribute-specific criteria for different attributes for each class of the plurality of classes. 
     
     
         16 . The system of  claim 15 , wherein the operations further comprise:
 receiving a second event from a different second stream of events;   assigning a different second class to the second event; and   computing a cross-stream metric using the first class assigned to the event and the second class assigned to the second event.   
     
     
         17 . The system of  claim 10 , wherein the plurality of classes includes no more than five classes. 
     
     
         18 . The system of  claim 10 , wherein the event represents a user sending a short message service (SMS) message through a telecommunications network. 
     
     
         19 . The system of  claim 10 , wherein the event represents a user making a voice call through a telecommunications network. 
     
     
         20 . The system of  claim 10 , wherein the stream is an unbounded sequence of events received in real-time. 
     
     
         21 . A computer program product, encoded on one or more non-transitory computer storage media, comprising instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:
 receiving, by a stream computing system, data representing respective values of one or more data attributes of an event in a stream of events;   obtaining a hierarchical analytic model that defines a plurality of classes, an ordering of the plurality of classes, and, for each class, a respective sequence of sets of attribute-specific criteria for the class;   processing each class in the ordering of the plurality of classes including evaluating, for each class, the sets of attribute-specific criteria in the sequence of sets of attribute-specific criteria for the class until one or more values of the event satisfy a particular set of attribute-specific criteria for a first class of the plurality of classes; and   assigning the first class of the plurality of classes to the event.