Patent Document ID: 9774506
Application ID: 13807912
Patent Flag: 1

Claim One:
1. A method of analysis of operation of a communication system using events representing activity in the system, the method comprising the steps of: detecting bursts of events by: receiving a plurality of events; parsing the plurality of events according to a pre-defined event format template in order to determine at least one event of interest; aggregating the at least one event of interest into at least one event flow based on an aggregation criteria; selecting a pre-defined processing profile from a plurality of pre-defined processing profiles based on a comparison of a current network load of the communication system with one or more thresholds; placing one or more of the at least one event of interest from the at least one event flow into a burst bucket based on the pre-defined processing profile; and detecting a burst of events for one of the at least one event flows based on a burst status of the at least one event of interest and a burst duration value of the one of the at least one event flow, wherein the burst status and the burst duration value are determined based at least on the one or more event of interest placed in the burst bucket; using the detected bursts of events and system operation information in a causal relationship processing step to identify at least one significant event burst causing change in system operation; and determining causes of the change in system operation from information associated with events within the significant event burst.