US Patent 10275496 Processing event log data

Processing of a set of event log data that includes event records. A search criteria is received from a user, and a subset of the set of event log data that includes event records from the set of event log data that satisfy the search criteria is determined. For each event record in the subset of event log data, a similarity score for the event record is determined, where the similarity score is indicative of the similarity of the event record to the other event records in the subset of event log data. The subset of event log data is updated by adding to each event record its similarity score, and the updated subset of event log data is then returned to the user.