title: How can I add/change new patterns/queries dynamically/at runtime in apache Flink?
body: <p>I am trying to build a CEP system with Apache Flink for correlating events. One of the requirements is to be able to add new patterns for anomaly detection at runtime without losing the system availability. Any Ideas of how could I do that?</p>
  
  <p>For instance, If I have a stream of security events (e.g. accesses, authentications) and a pattern for detecting anomalies (e.g. >10 logins to the same machine in 1 minute) I would like to be able to change the pattern parameters, for instance instead of 10 logins, maybe I would like 8 and I at the same time I would like to be able to create other patterns (maintaining the same stream) to detect a new type of anomaly without losing events/system availability. </p>
  
  <p>Regards.</p>