<br> I can't say for sure that the results are right or wrong, because when time is involved, a lot of things must be taken in consideration. So, assuming you are using the fusion example as is, with the only difference that you are using your input/rules, meaning specifically that you are using the event feeder, knowledge base configured to stream mode and real time session clock, it is necessary to check what is discrepant between the results.<br>
<br> Please note that since the engine is running in near-realtime as well as event feeders are running in near-realtime, you might have interferences from threads and processes running in the same machine. In other words, for your 3 inputs bellow and a time-window of 5 seconds, I would not be surprised if sometimes events 1 and 3 are reported in the same window and sometimes they don't since each one of them sit at one of the edges of the window.<br>
<br> I would be concerned if events 2 and 3 are not in the same window and unless your machine is swapping or heavily loaded, events 1 and 2 should also be reported in the same window.<br><br> If you want to test the actual algorithm with extreme precision, the only way I know is using the PSEUDO_CLOCK, so that the application can completely control the time flow with discrete advances.<br>
<br> If the above is not what you are seeing, please give more details.<br><br> Thank you,<br> Edson<br><br><div class="gmail_quote">2009/6/8 PriyaSha <span dir="ltr"><<a href="mailto:nash.8103@gmail.com">nash.8103@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><br>Hi,</div>
<div> </div>
<div>I had a chance to go through the fusion sample. I tried the same example with another logfile as input</div>
<div><font size="2">
<p align="left">Input:</p>
<p align="left">1000 critical Symantec</p>
<p align="left">5000 critical Symantec</p>
<p>6000 critical Symantec</p>
<p></p></font>Here I set the timestamp as ( some date in the past + first column of the input). </div>
<div><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">Following is the simple DRL which has the rule to count number of OMTicket using sliding window.</p>
<p align="left">package</p></font></font></b><font size="2"> org.drools.examples.broker;
<p align="left"></p></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">import</p></font></font></b><font size="2"> org.drools.examples.broker.model.OMTicket;
<p align="left"></p></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">dialect</p></font></font></b><font size="2"> </font><font color="#008000" size="2"><font color="#008000" size="2">"mvel"</font></font><font size="2">
<p align="left"></p></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">declare</p></font></font></b><font size="2"> OMTicket
<p align="left">@role( event )</p>
<p align="left">@timestamp (timestamp)</p>
<p align="left">@expires (1h)</p></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">end</p></font></font></b><font size="2">
<p align="left"></p></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">rule</p></font></font></b><font size="2"> </font><font color="#008000" size="2"><font color="#008000" size="2">"Count over last 5 seconds"</font></font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">salience</p></font></font></b><font size="2"> 10</font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">no-loop</p></font></font></b><font size="2"> </font><b><font color="#960000" size="2"><font color="#960000" size="2">true
<p align="left">when</p></font></font></b><font size="2">
<p align="left">Number( $count : intValue ) </p></font><b><font color="#960000" size="2"><font color="#960000" size="2">from</font></font></b><font size="2"> </font><b><font color="#960000" size="2"><font color="#960000" size="2">accumulate</font></font></b><font size="2"> (
<p align="left">OMTicket($severity:severity) over window:time(5s) </p></font><b><font color="#960000" size="2"><font color="#960000" size="2">from</font></font></b><font size="2"> entry-point </font><font color="#008000" size="2"><font color="#008000" size="2">"OM stream"</font></font><font size="2">, count() )</font><b><font color="#960000" size="2"><font color="#960000" size="2">
<p align="left">then</p></font></font></b><font size="2">
<p align="left">System.out.println(</p></font><font color="#008000" size="2"><font color="#008000" size="2">"Number of Critical Tickets over last 5 seconds : "</font></font><font size="2"> + $count);</font><font color="#960000" size="2"><font color="#960000" size="2">
<p><b>end</b></p>
<p><font color="#000000">Here, I just read and insert facts as events with no scheduling.</font></p>
<p><font color="#000000">But the ouput varies for each invocation and it is also not as expected.</font></p>
<p><font color="#000000">Am I missing any configuration here?</font></p>
<p><font color="#000000"></font> </p></font></font></div>
</blockquote></div><br><br clear="all"><br>-- <br> Edson Tirelli<br> JBoss Drools Core Development<br> JBoss, a division of Red Hat @ <a href="http://www.jboss.com">www.jboss.com</a><br>