International Business Machines Corporation

Laura Challman Anderson

David Allan Pease

Jayram S Thathachar

Cheryl Ann Kieliszewski

Sridevi Koushik Kanagal Ramesh

One embodiment provides a method including: collecting system log files comprising a plurality of log messages representing activity within the system; generating a plurality of message templates by (i) clustering the plurality of messages into groups having similar activity patterns and (ii) generating a message template for each of the groups; identifying message templates of interest and determining the message templates representing actual end-user events as opposed to system events, wherein the determining comprises (i) identifying a seed set of event types that represent known end-user events based upon identifying the event as being known to be initiated by a user and (ii) correlating the event to the known end-user event based upon a time correlation between the known end-user event and the event within the message template of interest.

Generation of end-user sessions from end-user events identified from computer system logs

One embodiment provides a method including: collecting, from a plurality of collaborative computing systems, system log files comprising a plurality of log messages representing activity within the system, wherein the activity within the system corresponds to system activity and end-user activity; generating a plurality of message templates, each of the plurality of message templates representing an event type by clustering the plurality of messages into groups having similar activity patterns; identifying, from the plurality of message templates, a subset of message templates representing potential end-user events; differentiating end-user events from system events, in the subset of message templates representing potential end-user events, comprising identifying a seed set of event types that represent known end-user events and correlating potential end-user events remaining after identifying the seed set of event types with the known end-user events; and grouping, based upon the differentiating, the event types representing end-user events into user sessions.

Growing community of inventors

Saratoga, CA, United States of America

Laura Challman Anderson