A method and system for performing a root cause analysis. A CPU identifies events of interest as a function of a user's observable behavior, which includes the user's eye gaze, while viewing event data. The CPU calculates an interest score for each of the identified events of interest, wherein the interest score is a probability of each of the identified events of interest being a root cause of a defect. The CPU tags each of the events of interest with a tag as a function of each calculated interest score. The identifying of the one or more events of interest includes: correlating a focal point of the user's eye gaze to a viewing position of a display device displaying the file; and identifying, as a function of the viewing position, the event data being viewed and an amount of time that the event data is viewed by the user.