Models for time coalescence in event logs

One heuristic for data reduction that is widely used in the literature is coalescence of events occurring close in time. The authors explore the validity of this heuristic by developing a model for the formation of the contents of an event log by multiple independent error processes. The probability of coalescing events from two or more error sources is formulated and compared with results from hand analysis of actual event logs taken from a Tandem TNS II system. Results indicate that the probability of coalescing events from more than one error source is a strong function of the time constant selected. The model can be used to select an appropriate time constant and also has implications in designing event logging systems.<<ETX>>