{"id":"https://openalex.org/W7225748933","doi":"https://doi.org/10.3390/app162211099","title":"Validation-Selected Drain3\u2013DeepLog and SPELL\u2013DeepLog Pipelines for HDFS Anomaly Detection: Performance and Exploratory Event-Granularity Analysis","display_name":"Validation-Selected Drain3\u2013DeepLog and SPELL\u2013DeepLog Pipelines for HDFS Anomaly Detection: Performance and Exploratory Event-Granularity Analysis","publication_year":2026,"publication_date":"2026-11-10","ids":{"openalex":"https://openalex.org/W7225748933","doi":"https://doi.org/10.3390/app162211099"},"language":"en","primary_location":{"id":"doi:10.3390/app162211099","doi":"https://doi.org/10.3390/app162211099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/app162211099","pdf_url":null,"source":{"id":"https://openalex.org/S4210205812","display_name":"Applied Sciences","issn_l":"2076-3417","issn":["2076-3417"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","norway-1","oarl","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Applied Sciences","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/app162211099","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161389634","display_name":"H\u00fcseyin Eren G\u00fc\u00e7yener","orcid":"https://orcid.org/0009-0007-6133-3393","observed_orcids":["https://orcid.org/0009-0007-6133-3393"]},"institutions":[{"id":"https://openalex.org/I1281256770","display_name":"\u00dcsk\u00fcdar University","ror":"https://ror.org/02dzjmc73","country_code":"TR","type":"education","lineage":["https://openalex.org/I1281256770"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"H\u00fcseyin Eren G\u00fc\u00e7yener","raw_affiliation_strings":["Graduate School of Natural and Applied Sciences, \u00dcsk\u00fcdar University, Altunizade, \u00dcsk\u00fcdar, Istanbul 34662, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0009-0007-6133-3393","affiliations":[{"raw_affiliation_string":"Graduate School of Natural and Applied Sciences, \u00dcsk\u00fcdar University, Altunizade, \u00dcsk\u00fcdar, Istanbul 34662, T\u00fcrkiye","institution_ids":["https://openalex.org/I1281256770"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004614391","display_name":"G\u00f6kalp Tulum","orcid":"https://orcid.org/0000-0003-1906-0401","observed_orcids":["https://orcid.org/0000-0003-1906-0401","https://orcid.org/0000-0003-2865-5781"]},"institutions":[{"id":"https://openalex.org/I2802529618","display_name":"Istanbul Topkapi University","ror":"https://ror.org/00g241p78","country_code":"TR","type":"education","lineage":["https://openalex.org/I2802529618"]}],"countries":["TR"],"is_corresponding":true,"raw_author_name":"G\u00f6kalp Tulum","raw_affiliation_strings":["Department of Electrical and Electronics Engineering, Faculty of Engineering and Natural Sciences, Istanbul Topkapi University, Prof. Muammer Aksoy Cad. No. 10, Kazl\u0131\u00e7e\u015fme, Zeytinburnu, Istanbul 34020, T\u00fcrkiye"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronics Engineering, Faculty of Engineering and Natural Sciences, Istanbul Topkapi University, Prof. Muammer Aksoy Cad. No. 10, Kazl\u0131\u00e7e\u015fme, Zeytinburnu, Istanbul 34020, T\u00fcrkiye","institution_ids":["https://openalex.org/I2802529618"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5004614391"],"corresponding_institution_ids":["https://openalex.org/I2802529618"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2896},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2896},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"16","issue":"22","first_page":"11099","last_page":"11099"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.593500018119812},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.5067999958992004},{"id":"https://openalex.org/C3018260909","wikidata":"https://www.wikidata.org/wiki/Q1322871","display_name":"Exploratory analysis","level":2,"score":0.49390000104904175},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.46230000257492065},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4453999996185303},{"id":"https://openalex.org/C42812","wikidata":"https://www.wikidata.org/wiki/Q1082910","display_name":"Partition (number theory)","level":2,"score":0.4332999885082245},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.42890000343322754},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42809998989105225},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.3837999999523163},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.365200012922287},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3635999858379364},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3506999909877777},{"id":"https://openalex.org/C164660894","wikidata":"https://www.wikidata.org/wiki/Q2037833","display_name":"Piecewise","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.31940001249313354},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.2992999851703644},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2632000148296356},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.26260000467300415},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.25380000472068787},{"id":"https://openalex.org/C2777601683","wikidata":"https://www.wikidata.org/wiki/Q6499736","display_name":"Vocabulary","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/app162211099","doi":"https://doi.org/10.3390/app162211099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/app162211099","pdf_url":null,"source":{"id":"https://openalex.org/S4210205812","display_name":"Applied Sciences","issn_l":"2076-3417","issn":["2076-3417"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","norway-1","oarl","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Applied Sciences","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/app162211099","doi":"https://doi.org/10.3390/app162211099","is_oa":true,"landing_page_url":"https://doi.org/10.3390/app162211099","pdf_url":null,"source":{"id":"https://openalex.org/S4210205812","display_name":"Applied Sciences","issn_l":"2076-3417","issn":["2076-3417"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","norway-1","oarl","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Applied Sciences","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2064675550","https://openalex.org/W2115056012","https://openalex.org/W2527994611","https://openalex.org/W2560021099","https://openalex.org/W2583874385","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2898998129","https://openalex.org/W2947815220","https://openalex.org/W2963999143","https://openalex.org/W3199174176","https://openalex.org/W4226128225","https://openalex.org/W4255845613","https://openalex.org/W4380433171","https://openalex.org/W4384345672","https://openalex.org/W4401667316","https://openalex.org/W4411538180"],"related_works":[],"abstract_inverted_index":{"Log":[0],"parsing":[1],"defines":[2],"the":[3,36,78,104,171,178,192,207,210],"event":[4,175],"vocabulary":[5],"supplied":[6],"to":[7],"sequence-based":[8],"anomaly":[9],"detectors":[10],"and":[11,20,29,52,68,95,119,128,137,144,151,155,157,168,202],"can":[12],"alter":[13],"downstream":[14],"transitions.":[15],"We":[16],"compare":[17],"validation-selected":[18,213],"Drain3\u2013DeepLog":[19,111,154],"SPELL\u2013DeepLog":[21,123],"pipelines":[22,214],"on":[23,64,88,103,197],"HDFS,":[24],"comprising":[25],"11,175,629":[26],"log":[27],"lines":[28],"575,061":[30],"labeled":[31,89],"blocks.":[32,97,110,190],"Both":[33],"branches":[34],"used":[35],"same":[37],"field":[38],"extraction,":[39],"pre-masking":[40],"rules,":[41],"block":[42,200],"memberships,":[43],"DeepLog":[44,60],"model":[45],"family,":[46],"training":[47,66],"protocol,":[48],"hyperparameter":[49],"search":[50],"space,":[51],"validation-F1":[53],"selection":[54],"criterion.":[55],"For":[56],"each":[57],"parser,":[58],"12":[59],"models":[61],"were":[62,101,149],"fitted":[63],"normal":[65,94],"blocks":[67],"evaluated":[69,102,193],"at":[70],"three":[71],"top-k":[72],"settings,":[73],"yielding":[74],"36":[75],"candidate":[76],"configurations;":[77],"final":[79],"configuration":[80],"was":[81],"selected":[82,99],"by":[83],"maximum":[84],"block-level":[85],"anomaly-class":[86],"F1":[87,117],"validation":[90],"data":[91],"containing":[92],"both":[93],"anomalous":[96],"The":[98],"configurations":[100],"designated":[105],"test":[106],"partition":[107,201],"of":[108,188],"125,116":[109],"achieved":[112,124],"precision":[113],"0.9303,":[114],"recall":[115],"0.9548,":[116],"0.9424,":[118],"false-positive":[120],"rate":[121],"0.0086;":[122],"0.8403,":[125],"0.8578,":[126],"0.8490,":[127],"0.0197,":[129],"respectively.":[130],"Drain3":[131,166],"produced":[132],"1306":[133],"more":[134],"true":[135],"positives":[136],"1232":[138],"fewer":[139],"false":[140],"positives.":[141],"Balanced":[142],"accuracy":[143],"Matthews":[145],"correlation":[146],"coefficient":[147],"(MCC)":[148],"0.9731":[150],"0.9354":[152],"for":[153,159],"0.9191":[156],"0.8306":[158],"SPELL\u2013DeepLog.":[160],"An":[161],"exploratory":[162],"event-definition":[163],"analysis":[164],"compared":[165],"E5":[167],"E32":[169],"with":[170],"high-coverage":[172],"SPELL":[173],"S5":[174,184],"without":[176],"treating":[177],"comparison":[179],"as":[180],"verified":[181],"occurrence-level":[182],"mapping.":[183],"occurred":[185],"in":[186],"80.86%":[187],"all":[189],"Within":[191],"HDFS":[194],"setting,":[195],"based":[196],"one":[198,203],"fixed":[199],"validation-based":[204],"development":[205],"realization,":[206],"findings":[208],"characterize":[209],"two":[211],"complete":[212],"rather":[215],"than":[216],"a":[217],"universal":[218],"parser":[219],"ranking.":[220]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-11T00:00:00"}