Abstract: A method of determining reliability of electronic documents associated with an event occurring in connection with a computing device may comprise, with a processor, composing a number of search queries based on text included in an event message, searching for a number of electronic documents via a network, said searching performed based on the composed search queries, and ranking the electronic documents identified by said searching based upon an indication of reliability in addressing the event associated with the event message, in which, ranking the electronic documents comprises applying a content source ranking criteria.

Abstract: An automated method of processing computer system event logs comprises receiving event messages associated with one or more system event logs, each event message including event text, determining a set of message clusters, each comprising a template text, representative of the event messages across the one or more event logs, and assigning each event message to a message cluster of the set, according to a measure of similarity between the respective event text of the event message and the template text of the message cluster.

Abstract: A method of determining reliability of electronic documents associated with an event occurring in connection with a computing device may comprise, with a processor, composing a number of search queries based on text included in an event message, searching for a number of electronic documents via a network, said searching performed based on the composed search queries, and ranking the electronic documents identified by said searching based upon an indication of reliability in addressing the event associated with the event message, in which, ranking the electronic documents comprises applying a content source ranking criteria.

Abstract: An automated method of processing computer system event logs comprises receiving event messages associated with one or more system event logs, each event message including event text, determining a set of message clusters, each comprising a template text, representative of the event messages across the one or more event logs, and assigning each event message to a message cluster of the set, according to a measure of similarity between the respective event text of the event message and the template text of the message cluster.

Abstract: A system comprises a processor and a display coupled to the processor. The processor causes the display to output graphical representations of workgroups based on workgroup data, and the processor accepts as input a constraint to a particular workgroup via manipulation of the particular workgroup's graphical representation. The processor also causes the display to output updated graphical representations of the workgroups based on application of the constraint to the workgroup data.