A non-transitory storage medium storing: configuration data including at least a service call time frame and normalization rules for removing or replacing content; and instructions readable and executable by an electronic processor to perform a log pattern analysis method operating on medical imaging device log data including log events and further including service calls each having a call time wherein each service call is associated with a subset of log events occurring within the service call time frame of the call time of the service call, the log pattern analysis method comprising: performing preprocessing of the medical imaging device log data including generating normalized log events by removing or replacing content of the log events according to the normalization rules and linking each normalized log event with one or more service calls having associated log events matching the normalized log event; performing pre-analysis including identifying a test set of normalized log events that match a log pattern under analysis and a test set of service calls linked with the test set of normalized log events; analyzing the test set of service calls to identify hit service calls wherein each hit service call belongs to the test set of service calls and the log pattern under analysis has a hit for each hit service call when it has at least one hit in a predefined interval of time prior to this service call; and controlling a display to present a log pattern report summarizing the hit service calls. configuration data including at least a service call time frame and normalization rules for removing or replacing content; and instructions readable and executable by an electronic processor to perform a log pattern analysis method operating on medical imaging device log data including log events and further including service calls each having a call time wherein each service call is associated with a subset of log events occurring within the service call time frame of the call time of the service call, the log pattern analysis method comprising: performing preprocessing of the medical imaging device log data including generating normalized log events by removing or replacing content of the log events according to the normalization rules and linking each normalized log event with one or more service calls having associated log events matching the normalized log event; performing pre-analysis including identifying a test set of normalized log events that match a log pattern under analysis and a test set of service calls linked with the test set of normalized log events; analyzing the test set of service calls to identify hit service calls performing preprocessing of the medical imaging device log data including generating normalized log events by removing or replacing content of the log events according to the normalization rules and linking each normalized log event with one or more service calls having associated log events matching the normalized log event; performing pre-analysis including identifying a test set of normalized log events that match a log pattern under analysis and a test set of service calls linked with the test set of normalized log events; analyzing the test set of service calls to identify hit service calls wherein each hit service call belongs to the test set of service calls and the log pattern under analysis has a hit for each hit service call when it has at least one hit in a predefined interval of time prior to this service call; and controlling a display to present a log pattern report summarizing the hit service calls.