> This question (and the other two) are all examples of concrete, real-world problems that people across a variety of quantitative disciplines frequently encoun

> This question (and the other two) are all examples of concrete, real-world problems that people across a variety of quantitative disciplines frequently encounter. Indeed, I use this technique to sort search results in Splunk, as an extension of TF-IDF. Consider a scenario where us-east-2 is broken but us-east-1 is fine (clearly just a hypothetical!). Split the logs along that good/bad dimension, and then break down by some other pattern; log class, punct, etc. Usually I use a prior of 50:50 to help sort out the "happened once in bad cluster" events.