Patent ID: 7418450

Claim:
A method for analyzing computer events recorded in a plurality of datasets, each dataset comprising a plurality of records, the method comprising: accessing a chronicle dataset of chronicle records and a log dataset of log records, the chronicle dataset having an incompatible chronicle record comprising a timestamp having a format incompatible with the format of a log time indicator associated with each log record; extracting the timestamp from the incompatible chronicle record; generating a chronicle time indicator based on the extracted timestamp, the chronicle time indicator having a format compatible with the format of the log time indicator; placing the chronicle time indicator into the associated incompatible chronicle record based on a position of the log time indicator within the log records; merging the chronicle record with the log records such that the chronicle record and the log records are ordered based on times defined within the chronicle time indicator and the log time indicator of each log record; and presenting a merged dataset of the chronicle record and the log records by way of a reporting tool configured to display the merged records.