Related: "Anomaly detection from server log data" (http://www.vtt.fi/inf/pdf/tiedotteet/2009/T2480.pdf)