Building a Lightweight Rule-Based Engine

Real-time alerting sounds simple at first: read logs, match rules, generate alerts. At least that is what I thought when this started. The actual requirement was fairly straightforward on paper: cont