This document presents an approach for abstracting log lines from enterprise applications into execution events. It analyzes logs from four applications, including one RIM application that generates 1.6 million log lines in 8 hours. The approach involves anonymizing parameters, tokenizing log lines, categorizing tokens into events, and reconciling duplicate events. It compares performance to other log abstraction tools like SLCT and Terrify. The approach effectively reduces over 1 million log lines into hundreds of events while maintaining good precision and recall compared to other tools.