Systems and Methods for Labeling Event Data Obtained from a Computing Environment Using Artificial Intelligence

A non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving unlabeled event data associated with a computing environment;
• clustering via an unsupervised machine learning model the unlabeled event data into clusters of unlabeled event data where unlabeled event data in one cluster are more similar to each other than to unlabeled event data in other clusters;
• selecting a respective subset of unlabeled event data for each cluster of unlabeled event data;
• translating via a large language model artificial neural network each unlabeled event datum in each respective subset of unlabeled event data into a description for the unlabeled event datum;
• and
• applying a label via a labeling algorithm to at least one unlabeled event datum in a respective cluster responsive to and representative of the respective description for the unlabeled event datum in the respective subset, thereby transforming the at least one unlabeled event datum to a labeled event datum.

A system comprising:

• a memory to store instructions;
• a processor to execute the instructions stored in the memory for:
• receiving unlabeled event data associated with a computing environment;
• clustering via an unsupervised machine learning model the unlabeled event data into clusters of unlabeled event data where unlabeled event data in one cluster are more similar to each other than to unlabeled event data in other clusters;
• selecting a respective subset of unlabeled event data for each cluster of unlabeled event data;
• translating via a large language model artificial neural network each unlabeled event datum in each respective subset of unlabeled event data into a description for the unlabeled event datum;
• and
• applying a label via a labeling algorithm to at least one unlabeled event datum in a respective cluster responsive to and representative of the respective description for the unlabeled event datum in the respective subset, thereby transforming the at least one unlabeled event datum to a labeled event datum.