1. A method comprising: identifying, in a set of problem log entries from a computing system, a subset of said set of problem log entries which pertain to a failed request; comparing said subset to a reference model which defines log entries per request type under a healthy state of said computing system, to identify a portion of said subset of problem log entries which deviate from corresponding log entries in said reference model; identifying, in said portion of said subset, at least one high-value log entry; and outputting said at least one high-value log entry.