Event Aggregation
Event aggregation, also known as event deduplication or reduction, consists in merging duplicate occurrences of the same event. Duplicates may be caused by transport network instability. For example, an event is sent repeatedly by the event source because the first event was not acknowledged quickly enough. As a result, both event instances reach the event destination. Another example is temporal aggregation, where the event source repeatedly sends the same event until the problem is resolved.
The event processing rules of Iotellect Server use the Deduplication ID Expression to find event duplicates by matching events' Deduplication IDs. Such duplicate events will be merged into a single aggregated event, which indicates the total number of duplicates and the timestamp of the most recent duplicate.
 | Timestamp of the first occurrence of an aggregated event is stored as the “firstOccurrence” standard enrichment. |
Another event aggregation feature is provided by Event Triggers. These triggers allow creating an aggregated event (Alert Event) only if the originating event occurred more than N times within a certain time frame.
Was this page helpful?