Clustering Analysis

Clustering Analysis divides cases into groups in a way that the cases within each group are as similar to each other as possible, in terms of the case attribute values and occurred event types. Clustering is based on a so called unsupervised machine learning algorithm. The clustering analysis uses the kmodes algorithm with categorized values for event type occurrences and case attribute values. Due to the nature of the algorithm, different clustering runs may end up to slightly different results. See this Wikipedia article for more about the idea behind clustering. Clustering analysis is an easy way to understand and explain the eventlog without knowing anything about it beforehand. It can also be used to check data integrity, as the analysis might reveal that the eventlog actually contains data from two distinct processes that cannot actually be compared to each other.

Clustering Analysis Overview

The clustering analysis is shown in a table where rows are grouped as follows: Each group is a cluster and each row shows describing features in the cluster. There are following columns:

• Feature and Value: These two columns list the case attribute and other values that are common to the cases in the cluster.
• Cluster Density %: Share of cases having this feature value within the cluster (i.e. the number of cases having the value shown on the row in this particular cluster divided by the number of cases in the cluster * 100).
• Total Density %: Share of cases having this feature value in the whole data set (i.e. the total number of cases having the value shown on the row divided by the total number of cases * 100).
• Contribution %: Amount of cases that can be explained to belong to this cluster because of this feature value. The scale is such that 0% means that the feature value isn't specific to this cluster and 100% means that all cases belonging to this cluster can be explained by this feature value.

Clustering Analysis Settings

The clustering analysis has the following settings:

• Clusters: Number of clusters which the cases are divided into.
• Cluster rows: Number of describing features shown for each cluster. The features are shown in alphabet.
• Attributes: Case attributes that are taken into account in the clustering analysis. If none is selected, all case attributes are selected. You can restrict which case attributes are selected, if you want the clustering to be done based on only certain features.
• Events: Event types that occurrences are taken into account in the clustering analysis. If none is selected, all event types are selected.

In the left panel, you can use the left panel to filter cases. Note that you are not bound to using just the Flowchart analysis, as you can change the analysis by right-clicking the analysis and selecting a different type of analysis shown on the panel.

Clustering Analysis Calculation

Clustering analysis consists of two phases:

• Phase 1: Actual clustering (i.e. dividing cases into similar groups)
• Phase 2: Root cause analysis to explain the clusters

This means that the clustering analysis does not show the individual cases in each cluster, but the features that describe each cluster. Note that the case attribute and event type settings affect the data features that are given to the clustering phase.