For this lab session, you can use data from the BPI Challenge 2012 (https://data.4tu.nl/repository/uuid:3926db30-f712-4394-aebc-75976070e91f).
This real-life log was taken from a Dutch Financial Institute in 2012. The log contains some 262.200 events in 13.087 cases. Apart from some anonymization, the log contains all data as it came from the financial institute. The process represented in the event log is an application process for a personal loan or overdraft within a global financing organization. The amount requested by the customer is indicated in the case attribute AMOUNT_REQ, which is global, i.e. every case contains this attribute. The event log is a merger of three intertwined sub processes. The first letter of each task name identifies from which sub process (source) it originated from, namely the (A)pplication handling process, the (O)ffer handling process or the (W)orkflow of the call agents.
There are three models for this dataset, namely a model for application handling (BPMN, Petri net), a model for offer handling (BPMN, Petri net) and a model for the combination of both (BPMN, Petri net) .
All three models are man-made, i.e. they are not the result of a mining algorithm The models have properties like duplicate transitions (transitions with identical labels) and routing transitions (transitions that are black and cannot be observed).
A correct execution of the model starts with a token in the initially marked place and ends with one token in the final place. The question for conformance checking is: What is the relation between the behaviour in the log and the behaviour described in the model.
The tutorial can be downloaded here: Tutorial Chapter 12 (pdf).
It contains a step-by-step guide to compute alignments and to inspect the true deviations in this event log. In the end, you will find that there are two classes of real issues. One minor issue related to multiple offers being produced in parallel while the process does not allow for that. One true issue is that, for cases 177083, 180310 and 198310, no offer was accepted, by the customer while the loans were activated, i.e. money was transferred to the customer. A total of 18,000+20,000+25,000 = 63,000 euro for which their is not proof the customer indeed accepted the corresponding loan offer, at least not in this event log.