17. The system of claim 16 , further comprising: program code for determining a length of the line with a greatest number of tokens; program code for assigning the length of the line with the greatest number of tokens as the length of each token vector to be utilized to convert events of the database into examples for said clustering algorithm, wherein each token vector is created with said length.
17. The system of claim 16 , further comprising: program code for determining a length of the line with a greatest number of tokens; program code for assigning the length of the line with the greatest number of tokens as the length of each token vector to be utilized to convert events of the database into examples for said clustering algorithm, wherein each token vector is created with said length. 19. The system of claim 17 , further comprising program code for grouping similar expressions into a common token expression, wherein IP addresses are provided with surrogate general expressions.