7. The method of claim 6 , further comprising: determining a length of the line with a greatest number of tokens; assigning the length of the line with the greatest number of tokens as the length of each token vector to be utilized to convert events of the database into examples for said clustering algorithm, wherein each token vector is created with said length.
7. The method of claim 6 , further comprising: determining a length of the line with a greatest number of tokens; assigning the length of the line with the greatest number of tokens as the length of each token vector to be utilized to convert events of the database into examples for said clustering algorithm, wherein each token vector is created with said length. 9. The method of claim 7 , further comprising grouping similar expressions into a common token expression, wherein IP addresses are provided with a single, surrogate general expression.