Patent ID: 11921603
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. A computing device, comprising:
a processor; and
a memory operatively coupled to the processor, the memory having instructions executable by the processor to cause the computing device to:
receive a first event log from a first software component and a second event log from a second software component, wherein a first computing service having the first software component does not share tracking identifiers with a second computing service having the second software component, and wherein the first event log and the second event log each includes data representing multiple entries each having multiple data fields related to processes executed at the first software component and the second software component;
calculate a first set of appearance frequencies for a first set of strings in the first event log;
calculate a second set of appearance frequencies for a second set of strings in the second event log;
select a first subset of strings from the first set of strings in the first event log based on appearance frequencies from the first set of appearance frequencies of the first subset of strings being below a preset frequency threshold;
select a second subset of strings from the second set of strings in the second event log based on appearance frequencies from the second set of appearance frequencies of the second subset of strings being below the preset frequency threshold; and
generate a combined event log for a task executed by both the first software component and the second software components by correlating a single token from a first string in the first subset of strings to the single token in a second string in the second subset of strings.