Awesome Log-based Anomaly Detection

A list of papers on log-based anomaly detection (and related works). You are welcome to open an issue and pull your requests if you think any paper that is important but not are inclueded in this repo. The papers are orgnized in log parsing (previous step of anomaly detection), anomaly detection, log monitoring (application of log analysis) and survey. Papers of time series anomaly detection are shown in another repo.

log parsing

• Logparse: Making log parsing adaptive through word classification -ICCCN 2020
• Logram: Efficient Log Parsing Using n-Gram Dictionaries -TSE 2020
• Tools and Benchmarks for Automated Log Parsing -ICSE 2019
• Spell: Online Streaming Parsing of Large Unstructured System Logs -TKDE 2018
• Towards Automated Log Parsing for Large-Scale Log Data Analysis -TDSC 2018
• Drain: An Online Log Parsing Approach with Fixed Depth Tree -ICWS 2017
• Syslog processing for switch failure diagnosis and prediction in datacenter networks -IWQoS 2017

anomaly detection

• Semi-supervised Log-based Anomaly Detection via Probabilistic Label Estimation -ICSE 2021
• Loganomaly: Unsupervised detection of sequential and quantitative anomalies in unstructured logs -IJCAI 2019
• Robust log-based anomaly detection on unstable log data - FSE 2019
• Prefix: Switch failure prediction in datacenter networks -SIGMETRICS 2018
• DeepLog: Anomaly Detection and Diagnosis from System Logs through Deep Learning - CCS 2017
• Log Clustering Based Problem Identification for Online Service Systems -ICSE 2016
• Mining Invariants from Logs for System Problem Detection - USENIX 2010
• Detecting Large-Scale System Problems by Mining Console Logs -SOSP 2009

log monitoring

survey

• Experience Report: System Log Analysis for Anomaly Detection -ISSRE 2016