Abstract: A computerized method for organizing representations of transactions in a multi-node system, comprising randomly selecting by each computer of a plurality of computers a message in a repository of messages of transactions accessible to the plurality of computers, and selecting in the repository by each computer of the plurality of computers further messages belonging to the transaction the randomly selected message belongs to, and assembling the selected messages to a representation of the transaction the randomly selected message belongs to, and an apparatus for the same.

Abstract: A method and apparatus for diagnosis of a computerized system, the method comprising the steps of collecting one or more events; transforming the events to events based time series, said events based time series having intervals; determining which resources of the computerized system are being consumed by which events, for a first predetermined time interval; and determining a function between the events based time series and one or more measurable attributes of one or more resources that were consumed by the events for a second predetermined time interval.

Abstract: A method of tracking information in a multi-tier computerized environment, the method comprising: receiving an at least one packet; storing data associated with the at least one packet and with an at least one request or transaction associated with the at least one packet; parsing a byte stream generated from conversion of the at least one packet; detecting data associated with the at least one request or transaction related to the byte stream; matching a thread associated with the byte stream with the at least one request or transaction associated with the at least one packet according to predetermined fields within the byte stream, an apparatus for implementing the same and methods for determining resource consumption of requests or transactions.