Abstract: Techniques may include receiving an asynchronous event message at an inbound adapter of a document-based monitoring system. In addition, the techniques may include accessing a document containing a hierarchical log of event entries. The techniques may include adding an event entry to the hierarchical log based at least in part on the asynchronous event message, and where the event entry may include information identifying the asynchronous event message. Moreover, the techniques may include identifying a corrupted event entry in the hierarchical log. Also, the techniques may include comparing the timestamp fields of the event entries in the hierarchical log to the timestamp field of the corrupted event entry. The techniques may include determining a parent entry of the corrupted event entry based at least in part on the comparison. In addition, the techniques may include updating the parent ID field of the corrupted event entry to identify the parent entry.