26. The computer program product stored in a non-transitory computer-readable storage medium of claim 25 , wherein the aggregation instructions further include: instructions for assigning a session identifier to a network event in a particular identified subset; instructions for identifying an aggregation entry in a particular aggregation result table, associated with the particular identified subset, in accordance with the network event's value for the at least one of the event attributes, the aggregation entry including a set of session identifiers; instructions for inserting the network event's session identifier into the set of session identifiers if the network event's session identifier is not included in the set of session identifiers; and instructions for changing a position of the aggregation entry in the particular aggregation result table if a predefined condition is met.
26. The computer program product stored in a non-transitory computer-readable storage medium of claim 25 , wherein the aggregation instructions further include: instructions for assigning a session identifier to a network event in a particular identified subset; instructions for identifying an aggregation entry in a particular aggregation result table, associated with the particular identified subset, in accordance with the network event's value for the at least one of the event attributes, the aggregation entry including a set of session identifiers; instructions for inserting the network event's session identifier into the set of session identifiers if the network event's session identifier is not included in the set of session identifiers; and instructions for changing a position of the aggregation entry in the particular aggregation result table if a predefined condition is met. 27. The computer program product stored in a non-transitory computer-readable storage medium of claim 26 , wherein the aggregation entry includes a session count and the predefined condition is met if the aggregation entry's session count is higher than the session count of a preceding entry in the particular aggregation result table.