A computerized method, program product, and an autonomic data processing system that oversees real-time log data acquired by a logging application of an executing computer program. In response to an event occurring, the logging application communicates the occurrence of the event to an event correlation engine, and invokes a window-resizing module. If the event is part of a symptom of processing problems developing, then the window-resizing module immediately expands the amount of real-time log data that is retained in temporary memory to include not log data including the event but also log data during the time duration of the symptom. In conjunction with a information level module, the granularity or level of information of the log data that is archived increases immediately upon the event so that not only is more time of the log-data but also a higher information level of the log data is saved for symptom analysis and verification. It is contemplated that the method, program product, and the autonomic data processing system may be in a learning mode to acquire data and recognize events that constitute a symptom.