EVENT CORRELATION

摘要

Event correlation may include identifying a feature set for each log file of a plurality of log files, and extracting the feature set for each event of a plurality of events in each log file of the plurality of log files. Event correlation may further include determining a plurality of trace event pairs linkage strength values for an event from a first log file of the plurality of log files and a plurality of events from a second log file of the plurality of log files. The trace event pairs linkage strength values may represent an overlap of the feature set for the event from the first log file and the feature set for each of the plurality of events from the second log file. a 2 > a)t Cn LU 0 Co az a o- w . cor co C)) a E) >) > a W(o 1 Li-U co c a) a)I o F-o