Mining Event Traces from Real-time Systems for Anomaly Detection