Abstract: In one embodiment, a method includes executing a first logging process, a second logging process and a categorization process in parallel on a computer system, wherein the first logging process identifies computer-performance events at a monitored resource. The method further includes the second logging process monitoring the first logging process for the computer-performance events. The method also includes, as particular computer-performance events at the monitored resource are detected, the second logging process recording the particular computer-performance events in a data store. The method additionally includes the categorization process parsing log entries of the second log. Further, the method includes the categorization process dynamically determining processing rules that are applicable to the parsed log entries. Also, the method includes the categorization process categorizing the parsed log entries using the dynamically determined processing rules.