Patent attributes
Computer log entries are processed to determine a plurality of baseline rank values associated with a ranking dimension. An overall baseline rank indicator is computed using the determined baseline rank values. For each log data component value combination included in a group of log data component value combinations, a comparison rank value associated with the ranking dimension is determined. Each of the comparison rank values is compared with the overall baseline rank indicator. Based at least in part on the comparisons, one or more log data component value combinations included in the group of log data component value combinations are identified as more anomalous than other log data component value combinations included in the group of log data component value combinations.