PROCESSING EVENT LOG DATA

摘要

Processing of a set of event log data that includes event records. A search criteria is received from a user, and a subset of the set of event log data that includes event records from the set of event log data that satisfy the search criteria is determined. For each event record in the subset of event log data, a similarity score for the event record is determined, where the similarity score is indicative of the similarity of the event record to the other event records in the subset of event log data. The subset of event log data is updated by adding to each event record its similarity score, and the updated subset of event log data is then returned to the user.

主权项

1. A method of processing a set of event log data comprising event records, the method comprising:
receiving a search criteria from a user; determining a subset of the set of event log data, wherein the subset of event log data includes event records from the set of event log data that satisfy the search criteria; for each event record in the subset of event log data, determining a similarity score for the event record, wherein the similarity score is indicative of the similarity of the event record to other event records in the subset of event log data; updating the subset of event log data by adding to each event record its similarity score; and returning to the user the updated subset of event log data.