1. A method comprising: retrieving a plurality of log entries, wherein each of the plurality of log entries corresponds to a backend event or a user action; generating one or more deduced rules based upon the plurality of log entries, wherein each deduced rule includes a global event and a global action; and storing the deduced rules.