Patent ID: 11921603
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 5:
6. A method of automated interoperations tracking performed by a server in a distributed computing system having a first software component configured to provide a first computing service and operatively coupled to a second software component configured to provide a second computing service to the first computing service, wherein the first computing service and the second computing service do not share tracking identifiers, the method comprising:
receiving, at the server, a first event log from the first software component and a second event log from the second software component, wherein the first computing service having the first software component does not share tracking identifiers with the second computing service having the second software component, and wherein the first event log and the second event log each includes data representing multiple entries each having multiple data fields related to a task executed at the first software component and the second software component;
in response to receiving the first event log and the second event log, tokenizing the first event log and the second event log by:
calculating a first set of appearance frequencies corresponding to a first set of strings in the first event log;
calculating a second set of appearance frequencies corresponding to a second set of strings in the second event log; and
selecting, as tokens, a first subset of strings of the first set of strings in the first event log and a second subset of strings of the second set of strings in the second event log based on strings in the first subset of strings and the second subset of strings each having calculated appearance frequencies below a preset frequency threshold; and

based on correlating a first string in the first subset of strings to a second string in the second subset of strings, generating a combined event log for the task executed by both the first software component and the second software component that includes a first entry corresponding to the first string from the first event log and a second entry corresponding to the second string from the second event log within the combined event log.