CPC G06F 11/1629 (2013.01) [G06F 11/3409 (2013.01); G06F 2201/81 (2013.01)] | 20 Claims |
1. A computer-implemented method, comprising:
identifying a plurality of terms within a corpus of log files from a computer system; computing a frequency metric for each of the plurality of terms;
creating a cluster, wherein the cluster includes a tuple for each term of the plurality of terms;
computing a score based on a difference between the frequency metrics in the cluster and corresponding frequency metrics in a new log file; and
executing at least one action in response to the score exceeding a predetermined threshold.
|