The present invention is directed to a method and apparatus for identifying occurrences of transactions, especially in computer networks. A unique identifier, denoted "request identifier", is associated with each service request. Accordingly, for a sequence of service requests detected, a corresponding sequence of request identifiers is generated. The request identifier sequence is compared to regular expressions that correspond to different transactions. If the request identifier sequence matches a regular expression, this sequence is deemed to represent an occurrence of that transaction.