{"id":"https://openalex.org/W2895810692","doi":"https://doi.org/10.1109/tkde.2018.2875442","title":"Spell: Online Streaming Parsing of Large Unstructured System Logs","display_name":"Spell: Online Streaming Parsing of Large Unstructured System Logs","publication_year":2018,"publication_date":"2018-10-11","ids":{"openalex":"https://openalex.org/W2895810692","doi":"https://doi.org/10.1109/tkde.2018.2875442","mag":"2895810692"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2018.2875442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2018.2875442","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102737328","display_name":"Min Du","orcid":"https://orcid.org/0000-0002-8277-0206"},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Min Du","raw_affiliation_strings":["School of Computing, University of Utah, Salt Lake City, UT, USA"],"raw_orcid":"https://orcid.org/0000-0002-8277-0206","affiliations":[{"raw_affiliation_string":"School of Computing, University of Utah, Salt Lake City, UT, USA","institution_ids":["https://openalex.org/I223532165"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100450462","display_name":"Li Fei-Fei","orcid":"https://orcid.org/0000-0002-7481-0810"},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feifei Li","raw_affiliation_strings":["School of Computing, University of Utah, Salt Lake City, UT, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, University of Utah, Salt Lake City, UT, USA","institution_ids":["https://openalex.org/I223532165"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.3363,"has_fulltext":false,"cited_by_count":111,"citation_normalized_percentile":{"value":0.96007741,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"31","issue":"11","first_page":"2213","last_page":"2227"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9617000222206116,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9020332098007202},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.8068697452545166},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.5394542813301086},{"id":"https://openalex.org/keywords/complex-event-processing","display_name":"Complex event processing","score":0.5081315040588379},{"id":"https://openalex.org/keywords/spell","display_name":"Spell","score":0.4805067777633667},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.46945565938949585},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46452581882476807},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46091726422309875},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.4542643427848816},{"id":"https://openalex.org/keywords/subsequence","display_name":"Subsequence","score":0.4387281537055969},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37714362144470215},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.23221492767333984},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11777332425117493},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.09969586133956909}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9020332098007202},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.8068697452545166},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5394542813301086},{"id":"https://openalex.org/C123606473","wikidata":"https://www.wikidata.org/wiki/Q907918","display_name":"Complex event processing","level":3,"score":0.5081315040588379},{"id":"https://openalex.org/C2780957641","wikidata":"https://www.wikidata.org/wiki/Q1999796","display_name":"Spell","level":2,"score":0.4805067777633667},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.46945565938949585},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46452581882476807},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46091726422309875},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.4542643427848816},{"id":"https://openalex.org/C137877099","wikidata":"https://www.wikidata.org/wiki/Q1332977","display_name":"Subsequence","level":3,"score":0.4387281537055969},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37714362144470215},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.23221492767333984},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11777332425117493},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.09969586133956909},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2018.2875442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2018.2875442","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G814274616","display_name":null,"funder_award_id":"61729202","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W191651381","https://openalex.org/W1540258466","https://openalex.org/W1563576199","https://openalex.org/W1965626898","https://openalex.org/W2020278455","https://openalex.org/W2027506564","https://openalex.org/W2039114257","https://openalex.org/W2039157918","https://openalex.org/W2102632804","https://openalex.org/W2109227373","https://openalex.org/W2114554028","https://openalex.org/W2115056012","https://openalex.org/W2120416238","https://openalex.org/W2126529005","https://openalex.org/W2142804492","https://openalex.org/W2153470728","https://openalex.org/W2162744351","https://openalex.org/W2165654401","https://openalex.org/W2169953282","https://openalex.org/W2326344342","https://openalex.org/W2394452652","https://openalex.org/W2434013509","https://openalex.org/W2527994611","https://openalex.org/W2536393303","https://openalex.org/W2583874385","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2963121360","https://openalex.org/W6632550495","https://openalex.org/W6633680793"],"related_works":["https://openalex.org/W4287256643","https://openalex.org/W2745258745","https://openalex.org/W4296626305","https://openalex.org/W4254978807","https://openalex.org/W4287269020","https://openalex.org/W4307454463","https://openalex.org/W4287201819","https://openalex.org/W4252852831","https://openalex.org/W4233609247","https://openalex.org/W4387904771"],"abstract_inverted_index":{"System":[0],"event":[1,59,108,174],"logs":[2,32,60,87,120,175],"have":[3],"been":[4],"frequently":[5],"used":[6],"as":[7],"a":[8,79,81,99,125,150],"valuable":[9],"resource":[10],"in":[11,23,131,194],"data-driven":[12],"approaches":[13],"to":[14,28,33,84,105,113,123,136,152,169],"enhance":[15],"system":[16,24,58,107,173],"health":[17],"and":[18,36,41,76,121,148,199],"stability.":[19],"A":[20],"typical":[21],"procedure":[22],"log":[25,68,116,187],"analytics":[26],"is":[27,88,142],"first":[29],"parse":[30,85,106],"unstructured":[31,86],"structured":[34,52],"data,":[35],"then":[37],"apply":[38],"data":[39],"mining":[40],"machine":[42],"learning":[43],"techniques":[44],"and/or":[45],"build":[46],"workflow":[47],"models":[48],"from":[49,118,172],"the":[50],"resulting":[51],"data.":[53,179],"Previous":[54],"work":[55],"on":[56,62,176],"parsing":[57,188],"focused":[61],"offline,":[63],"batch":[64],"processing":[65],"of":[66,127,196],"raw":[67],"files.":[69],"But":[70],"increasingly,":[71],"applications":[72],"demand":[73],"online":[74,93],"monitoring":[75],"processing.":[77],"As":[78],"result,":[80],"streaming":[82,94,132],"method":[83,95,151],"needed.":[89],"We":[90,110,145,163],"propose":[91,147],"an":[92],"Spell,":[96],"which":[97],"utilizes":[98],"longest":[100],"common":[101],"subsequence":[102],"based":[103],"approach,":[104],"logs.":[109],"show":[111],"how":[112,122],"dynamically":[114],"extract":[115,170],"patterns":[117,171],"incoming":[119],"maintain":[124],"set":[126],"discovered":[128],"message":[129,140],"types":[130,141],"fashion.":[133],"An":[134],"enhancement":[135],"find":[137],"more":[138],"accurate":[139],"also":[143,146],"proposed.":[144],"evaluate":[149],"automatically":[153],"discover":[154],"semantic":[155],"meanings":[156],"for":[157],"parameter":[158],"fields":[159],"identified":[160],"by":[161],"Spell.":[162],"compare":[164],"Spell":[165,190],"against":[166],"state-of-the-art":[167],"methods":[168],"large":[177],"real":[178],"The":[180],"results":[181],"demonstrate":[182],"that,":[183],"compared":[184],"with":[185],"other":[186],"alternatives,":[189],"shows":[191],"its":[192],"superiority":[193],"terms":[195],"both":[197],"efficiency":[198],"effectiveness.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":24},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":26},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":5}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}