Structural and temporal semantics heterogeneous information network (hin) for process trace clustering

A non-transitory program storage device readable by a computer, tangibly embodying a program of instructions executed by the computer to perform the method steps for generating process trace clusters, the method executed by a computer comprising the steps of:

• receiving a set of process traces, wherein a process trace is an application level event log from a computer system;
• receiving an identification of node types and edge types of the application event log to generate a heterogeneous information network (HIN) graph of the application event log, wherein node types of said HIN include events, traces and temporal nodes, wherein each trace is a finite sequence of event type nodes, wherein a temporal node type value is set to be a difference between a current system time and a reference timestamp, divided by a user chosen time granularity parameter;
• performing dimension reduction of the HIN by reducing a number of event types of the set of input traces to generate clusters of new event types;
• generating a set of meta-paths that connect nodes of a same reduced event type in the application event log;
• calculating similarities between process traces using the new event type clusters;
• and
• clustering the set of process traces to generate a plurality of disjoint partitions based on the clusters of new event types, wherein each partition is a graph model of a process in the application event log.