Automated Log Message Embeddings

System logs are crucial for understanding the state and health of systems, yet manual inspection becomes impractical due to the high volume of messages. Consequently, machine learning-based log anomaly detection has emerged to automatically identify irregularities. This study investigates the effectiveness of log message embeddings, a novel parsing method, for anomaly detection in complex systems. Specifically, we evaluate their resilience to concept drift compared to traditional parsing approaches. The study conducts empirical analyses on benchmark datasets, revealing that log message embeddings achieve comparable anomaly detection results while demonstrating greater robustness against concept drift than traditional methods like Drain. Additionally, the study highlights the usefulness of large language models in automating the log embedding pipeline to handle out-of-vocabulary words and extract synonymous and antonymous relationships. Insights gained from the study suggest potential refinements for future research in this area, contributing to advancements in system monitoring and log anomaly detection.

Authors

Institutions

Publication Details

Published
2024-09-02
DOI
https://doi.org/10.1109/iotsms62296.2024.10710220
Primary Topic
Service-Oriented Architecture and Web Services
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Automated Log Message Embeddings

Johan Eker, Adrian Murphy, Daniel Larsson, Fanny Söderlund et al.
1 links
Service-Oriented Architecture and Web Services
article

Automated Log Message Embeddings

Johan Eker, Adrian Murphy, Daniel Larsson, Fanny Söderlund, Ola Angelsmark
article en

Abstract

System logs are crucial for understanding the state and health of systems, yet manual inspection becomes impractical due to the high volume of messages. Consequently, machine learning-based log anomaly detection has emerged to automatically identify irregularities. This study investigates the effectiveness of log message embeddings, a novel parsing method, for anomaly detection in complex systems. Specifically, we evaluate their resilience to concept drift compared to traditional parsing approaches. The study conducts empirical analyses on benchmark datasets, revealing that log message embeddings achieve comparable anomaly detection results while demonstrating greater robustness against concept drift than traditional methods like Drain. Additionally, the study highlights the usefulness of large language models in automating the log embedding pipeline to handle out-of-vocabulary words and extract synonymous and antonymous relationships. Insights gained from the study suggest potential refinements for future research in this area, contributing to advancements in system monitoring and log anomaly detection.

Lund University (SE)
Openalex Percentile: Top 72%
Service-Oriented Architecture and Web Services
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.