1. A method to profile event sequences, comprising: a. creating a mixture model that simultaneously characterizes event pattern and time information; b. estimating parameters for the mixture model; and c. applying the mixture model to profile event sequences in computer networks.