Which method is used to identify a session from a group of logs?