A method for generating procedures includes receiving a log of a troubleshooting session. The log includes device data including a sequence of detected operations performed on the device causing respective components to change states. Steps of a candidate operating procedure are generated, based on the log, each corresponding to one of the detected operations. Missing steps may be identified, based on state charts and/or stored operability constraints for the device. The candidate operating procedure is compared with existing operating procedures stored in a knowledge base for the device to identify at least one existing operating procedure which includes steps which match at least some of the steps of the candidate operating procedure and, based on the identified at least one existing operating procedure, generating a textual description based on the textual description of the matching steps. The candidate procedure can be presented to an editor for validation.