1. A method in a computerized environment, said method comprising: obtaining log entries; determining a matching function between a log entry and an at least one cluster based on a first portion of the log entries; associating a second portion of the log entries with the at least one cluster, based on the matching function; associating at least one timeframe with the at least one cluster; labeling a portion of the at least one timeframe; and providing an indication referring to the at least one cluster associated with the first portion of the log entries and the second portion of the log entries; whereby the first portion of the log entries and the second portion of the log entries are transformed to an at least one indication of the at least one cluster.