Dominant Event Sequence

Sometimes we have insufficiently detailed problem description and/or there are several similar parallel user activities going on simultaneously, for example, several sessions are launched in a terminal services environment. In such cases when tracing is done for the duration of a specific user activity this pattern may help. Here we select the most full sequence of events or event sequence based on some Basic Facts (Volume 3, page 345). For example, if a session ID was missing in the problem description we can choose the most long and full process launch sequence (Volume 2, page 387) and assume that its session id was the one missing:

Get Memory Dump Analysis Anthology, Volume 7 now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.