Patent ID: 7885933

Claim:
An apparatus for analyzing computer events recorded in a plurality of datasets, each dataset comprising a plurality of records, the apparatus comprising: a computer-readable storage medium storing computer readable instructions; a computer executing the computer readable instructions, the computer readable instructions comprising: a read module accessing a chronicle dataset of chronicle records and a log dataset of log records, the chronicle dataset having an incompatible chronicle record comprising a timestamp having a format incompatible with the format of a log time indicator associated with each log record; an extraction module extracting the timestamp from the incompatible chronicle record; a generation module generating a chronicle time indicator based on the extracted timestamp, the chronicle time indicator having a format compatible with the format of the log time indicator; a placement module placing the chronicle time indicator into the associated incompatible chronicle record based on a position of the log time indicator within the log records; a merge module merging the incompatible chronicle record with the log records into a merged dataset such that the chronicle record and the log records are ordered based on times defined within the chronicle time indicator and the log time indicator of each log record; and a presentation module presenting the merged dataset of the chronicle record and the log records by way of a reporting tool displaying the merged records.