# US 2014/0195554 A1 · System and method for case activity monitoring and case data recovery using audit logs in e-discovery > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0195554 A1 - Document ID: US20140195554A1 - Status: Published application - Kind: A1 - Application number: 13/736,595 - Filed: 2013-01-08 - Published: 2014-07-10 - Earliest claimed: 2013-01-08 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Rajesh M. Desai; Magesh Jayapandian; Aidon P. Jennery; Terry L. Kemp - Web page: https://patentgrep.com/patent/US20140195554A1 ## CPC - G06F 16/24: Querying - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method, apparatus and article of manufacture for analyzing data recorded in an audit log generated as part of an electronic discovery (e-Discovery) process in litigation is disclosed. In at least one embodiment of the present invention, a computer implemented method of analyzing data recorded in an audit log generated as part of an electronic discovery (e-Discovery) process in litigation is provided. The method comprises retrieving, on one or more computers, an audit log from a storage system accessible from the computer, the audit log comprising data regarding a chronological sequence of actions taken to produce case documents relevant in litigation. The data in the audit log is analyzed and a comprehensive overview of the electronic discovery process is compiled based on the analyzed data for presentation to a user. ## Claims ### Claim 1 A computer implemented method of analyzing data recorded in an audit log generated as part of an electronic discovery (e-Discovery) process in litigation, comprising: retrieving, on one or more computers, an audit log from a storage system accessible from the one or more computers, the audit log comprising data regarding a chronological sequence of actions taken to produce case documents relevant in litigation; analyzing, on the one or more computers, the data in the audit log; and compiling, on the one or more computers, a comprehensive overview of the electronic discovery process based on the analyzed data for presentation to a user. ### Claim 2 (depends on 1) The computer implemented method of claim 1, further comprising monitoring, on the one or more computers, activity in the electronic discovery process based on the analyzed data. ### Claim 3 (depends on 1) The computer implemented method of claim 1, further comprising recovering, on the one or more computers, a previously produced case document that is corrupted based on the analyzed data. ### Claim 4 (depends on 3) The computer implemented method of claim 3, wherein recovering the previously produced case document includes repeating the chronological sequence of actions taken to produce the case document. ### Claim 5 (depends on 1) The computer implemented method of claim 1, wherein the audit log is cached in the storage system to speed up the step of analyzing the data in the audit log. ### Claim 6 (depends on 5) The computer implemented method of claim 5, wherein the storage system comprises a disk storage and a repository storage, and the audit log is cached in the disk storage and stored in the repository storage. ### Claim 7 (depends on 1) The computer implemented method of claim 1, further comprising controlling, on the one or more computers, expiration of case documents produced during the electronic discovery process based on the analyzed data. ### Claim 8 A computer implemented apparatus for analyzing data recorded in an audit log generated as part of an electronic discovery (e-Discovery) process in litigation, comprising: one or more computers; and one or more processes performed by the one or more computers, the processes configured to: retrieve an audit log from a storage system accessible from the one or more computers, the audit log comprising data regarding a chronological sequence of actions taken to produce case documents relevant in litigation; analyze the data in the audit log; and compile a comprehensive overview of the electronic discovery process based on the analyzed data for presentation to a user. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein the processes are further configured to monitor activity in the electronic discovery process based on the analyzed data. ### Claim 10 (depends on 8) The apparatus of claim 8, wherein the processes are further configured to recover a previously produced case document that is corrupted based on the analyzed data. ### Claim 11 (depends on 10) The apparatus of claim 10, wherein the processes are further configured to repeat the chronological sequence of actions taken to produce the case document to recover the previously produced case document that is corrupted based on the analyzed data. ### Claim 12 (depends on 8) The apparatus of claim 8, wherein the audit log is cached in the storage system to speed up the step of analyzing the data in the audit log. ### Claim 13 (depends on 12) The apparatus of claim 12, wherein the storage system comprises a disk storage and a repository storage, and the audit log is cached in the disk storage and stored in the repository storage. ### Claim 14 (depends on 8) The apparatus of claim 8, wherein the processes are further configured to control expiration of case documents produced during the electronic discovery process based on the analyzed data. ### Claim 15 A computer program product for analyzing data recorded in an audit log generated as part of an electronic discovery (e-Discovery) process in litigation, said computer program product comprising: a computer readable storage medium having stored/encoded thereon: first program instructions executable by one or more computers to cause the one or more computers to retrieve an audit log from a storage system, the audit log comprising data regarding a chronological sequence of actions taken to produce case documents relevant in litigation; second program instructions executable by the one or more computers to cause the one or more computers to analyze the data in the audit log; and third program instructions executable by the one or more computers to cause the one or more computers to compile a comprehensive overview of the electronic discovery process based on the analyzed data for presentation to a user. ### Claim 16 (depends on 15) The computer program product of claim 15, further comprising fourth program instructions executable by the one or more computers to cause the one or more computers to monitor activity in the electronic discovery process based on the analyzed data. ### Claim 17 (depends on 15) The computer program product of claim 15, further comprising fourth program instructions executable by the one or more computers to cause the one or more computers to recover a previously produced case document that is corrupted based on the analyzed data. ### Claim 18 (depends on 17) The computer program product of claim 17, wherein the fourth program instructions executable by the one or more computers cause the one or more computers to repeat the chronological sequence of actions taken to produce the case document. ### Claim 19 (depends on 15) The computer program product of claim 15, wherein the audit log is cached in the storage system to speed up the step of analyzing the data in the audit log. ### Claim 20 (depends on 15) The computer program product of claim 15, further comprising fourth program instructions executable by the one or more computers to cause the one or more computers to control expiration of case documents produced during the electronic discovery process based on the analyzed data.