1. A method comprising compiling a first message log based, at least in part, on: (i) a second message log that comprises a first message A and a second message B, (ii) a dis-similarity distance Δ between the morphology of the first message A and the morphology of the second message B; and characterizing system state based on an incidence of anomalies indicated by the first message log, wherein the first message and the second message regard tracking of actions of at least one of communication nodes and communication links of a telecommunication system, wherein the first message and the second message are stored in a respective memory of the telecommunication system, and wherein the dis-similarity distance is based, at least in part, on: (i) a first dis-similarity distance Δ 1 between a first sub-string of the first message S 1 (A) and a first sub-string of the second message S 1 (B), (ii) a second dis-similarity distance Δ 2 between a second sub-string of the first message S 2 (A) and a second sub-string of the second message S 2 (B), (iii) a first weighting W 1 of the first dis-similarity distance Δ 2 , and (iv) a second weighting W 2 of the dis-similarity distance Δ 2 , wherein Δ=f(Δ 1 , W 1 , Δ 2 , W 2 ).