This section explains the points to consider when designing an event type definition.
Check details such as the data format and size of input events as well as their frequency of occurrence, as follows:
If an existing system is to be used as the input event sender, check the event specifications of the existing system.
Check the requirements relating to the amount of processing of the input events, such as the average input event size and the average number of events received per unit of time (for example, per hour or per second).
In an event type definition, the two event data formats are XML and CSV format, as follows:
Select XML format or CSV format as appropriate.
Input events with other data formats such as binary format cannot be directly received, so consider converting the data format between the event sender and the CEP Server.
This section explains the points to consider when recording and accumulating events for analysis and other purposes.
To record events, use logging of this product.
Accumulating events
To accumulate the events in the Hadoop system where they are being logged, consider the following points:
Type and format of the events to be logged
Consider what type of events to log and accumulate.
Storage destination of the events to be logged
The Hadoop system to be connected is set according to the engine configuration file of the CEP engine.
In the Hadoop system to be connected, check for a path that can be used as a storage destination.
Event accumulation capacity (free disk capacity required)
The event storage destination will require enough free disk capacity to accumulate massive volumes of events.
Check the average event size, number of recordings per unit of time, and accumulation period in order to consider the disk capacity required for recording and accumulating the events.
If necessary, consider an expansion plan for the system to be used as the event storage destination.
Analyzing accumulated events
An application for analysis must be designed and developed in order to analyze the accumulated events.
Refer to "5.4.13 Designing an Event Log Analysis Application" for information on designing an application for analysis.
