1. A computer-implemented method of identifying frequently occurring episodes comprising: collecting records of events in a log file, the events representing actions taken by one or more users within a plurality of service portals, wherein the records of events in the log file are in a plurality of formats corresponding to the plurality of service portals; converting the records of events in the log file into a standard format; identifying a first average user session length within a single service portal of the plurality of service portals; determining a first window comprising a first timespan, wherein the first timespan is based on the first average user session length within the single service portal; identifying, by a processor, a plurality of intradomain episodes represented in the log file, wherein each intradomain episode comprises a plurality of events corresponding to the single service portal of the plurality of service portals occurring within the first window; identifying a second average user session length across at least two different types of service portals of the plurality of service portals, the at least two different types of service portals selected from the group consisting of a Hypertext Transfer Protocol (HTTP) service portal, a mobile application service portal, a call center service portal, a chat service portal, an application server service portal, and a paper-based workflow service portal; determining a second window comprising a second timespan, wherein the second timespan is based on the second average user session length across the at least two different types of service portals; and identifying, by the processor, a plurality of interdomain episodes represented in the log file, wherein each interdomain episode comprises a second plurality of events corresponding to actions, occurring within the second window, taken by a single user identity across the at least two different types of service portals.