Methods for decomposing events from managed infrastructures

A method for clustering events, comprising:

• receiving messages at an extraction engine from a managed infrastructure that includes physical hardware managed infrastructure that supports infrastructure data;
• providing a text input module coupled to the extraction engine;
• producing events that relate to the managed infrastructure and converting the events into a sequence of attributes that have text or numerical values indicative of a state of a hardware component;
• using the extraction engine to extract text or numerical values from event messages and convert them into words and subtexts
• determining one or more common steps to ascertain how many clusters to extract from events, where membership in a cluster indicates a common factor that can be a failure or an actionable problem in the managed infrastructure, where membership in a cluster indicates a common set of attributes of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to infrastructure data, in response to production of the clusters of events one or more physical changes in a managed infrastructure hardware is made;
• using a source address for each event and a graph topology of the managed infrastructure to assign a graph coordinate to the event when a graph topology is executed.