{"id":"https://openalex.org/W2947815220","doi":"https://doi.org/10.1145/3338906.3338931","title":"Robust log-based anomaly detection on unstable log data","display_name":"Robust log-based anomaly detection on unstable log data","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2947815220","doi":"https://doi.org/10.1145/3338906.3338931","mag":"2947815220"},"language":"en","primary_location":{"id":"doi:10.1145/3338906.3338931","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338906.3338931","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100437250","display_name":"Xu Zhang","orcid":"https://orcid.org/0000-0002-7051-2736"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xu Zhang","raw_affiliation_strings":["Microsoft Research, China / Nanjing University, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China / Nanjing University, China","institution_ids":["https://openalex.org/I4210113369","https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100359961","display_name":"Yong Xu","orcid":"https://orcid.org/0000-0003-0530-2123"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Xu","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088646345","display_name":"Qingwei Lin","orcid":"https://orcid.org/0000-0003-2559-2383"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingwei Lin","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049886136","display_name":"Bo Qiao","orcid":"https://orcid.org/0000-0002-8997-8317"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Qiao","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100412598","display_name":"Hongyu Zhang","orcid":"https://orcid.org/0000-0002-3063-9425"},"institutions":[{"id":"https://openalex.org/I78757542","display_name":"University of Newcastle Australia","ror":"https://ror.org/00eae9z71","country_code":"AU","type":"education","lineage":["https://openalex.org/I78757542"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hongyu Zhang","raw_affiliation_strings":["University of Newcastle, Australia"],"affiliations":[{"raw_affiliation_string":"University of Newcastle, Australia","institution_ids":["https://openalex.org/I78757542"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086338440","display_name":"Yingnong Dang","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yingnong Dang","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045886141","display_name":"Chunyu Xie","orcid":"https://orcid.org/0009-0002-6607-8209"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunyu Xie","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005119258","display_name":"Xinsheng Yang","orcid":"https://orcid.org/0000-0002-8686-9860"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinsheng Yang","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075280084","display_name":"Cheng Qian","orcid":"https://orcid.org/0000-0003-1681-8512"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qian Cheng","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100424653","display_name":"Ze Li","orcid":"https://orcid.org/0000-0003-3087-0595"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ze Li","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100365555","display_name":"Junjie Chen","orcid":"https://orcid.org/0000-0003-3056-9962"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junjie Chen","raw_affiliation_strings":["Tianjin University, China"],"affiliations":[{"raw_affiliation_string":"Tianjin University, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101835271","display_name":"Xiaoting He","orcid":"https://orcid.org/0000-0002-0803-2045"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoting He","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016532602","display_name":"Randolph Yao","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Randolph Yao","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025118710","display_name":"Jian\u2013Guang Lou","orcid":null},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian-Guang Lou","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046726312","display_name":"Murali Chintalapati","orcid":"https://orcid.org/0000-0002-8559-0091"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Murali Chintalapati","raw_affiliation_strings":["Microsoft, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113689725","display_name":"Furao Shen","orcid":null},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Furao Shen","raw_affiliation_strings":["Nanjing University, China"],"affiliations":[{"raw_affiliation_string":"Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100331488","display_name":"Dongmei Zhang","orcid":"https://orcid.org/0000-0002-9230-2799"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongmei Zhang","raw_affiliation_strings":["Microsoft Research, China"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":17,"corresponding_author_ids":["https://openalex.org/A5100437250"],"corresponding_institution_ids":["https://openalex.org/I4210113369","https://openalex.org/I881766915"],"apc_list":null,"apc_paid":null,"fwci":38.4385,"has_fulltext":false,"cited_by_count":651,"citation_normalized_percentile":{"value":0.99904212,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"807","last_page":"817"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9902999997138977,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6979731321334839},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6929044127464294},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5824210047721863},{"id":"https://openalex.org/keywords/log-log-plot","display_name":"Log-log plot","score":0.5212400555610657},{"id":"https://openalex.org/keywords/troubleshooting","display_name":"Troubleshooting","score":0.5189768671989441},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4900999963283539},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.47554799914360046},{"id":"https://openalex.org/keywords/web-log-analysis-software","display_name":"Web log analysis software","score":0.4618130922317505},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.456390380859375},{"id":"https://openalex.org/keywords/binary-logarithm","display_name":"Binary logarithm","score":0.4445610046386719},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.17255181074142456},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.12419801950454712}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6979731321334839},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6929044127464294},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5824210047721863},{"id":"https://openalex.org/C195292467","wikidata":"https://www.wikidata.org/wiki/Q2091879","display_name":"Log-log plot","level":3,"score":0.5212400555610657},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.5189768671989441},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4900999963283539},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.47554799914360046},{"id":"https://openalex.org/C104352257","wikidata":"https://www.wikidata.org/wiki/Q1238961","display_name":"Web log analysis software","level":5,"score":0.4618130922317505},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.456390380859375},{"id":"https://openalex.org/C63553672","wikidata":"https://www.wikidata.org/wiki/Q581168","display_name":"Binary logarithm","level":2,"score":0.4445610046386719},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.17255181074142456},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12419801950454712},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C173576120","wikidata":"https://www.wikidata.org/wiki/Q2641220","display_name":"Static web page","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3338906.3338931","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338906.3338931","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:uon:42098","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.13/1443758","pdf_url":null,"source":{"id":"https://openalex.org/S4377196471","display_name":"NOVA (University of Newcastle Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I78757542","host_organization_name":"University of Newcastle Australia","host_organization_lineage":["https://openalex.org/I78757542"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"},{"id":"mag:3145644127","is_oa":false,"landing_page_url":"https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=202002247358238879","pdf_url":null,"source":{"id":"https://openalex.org/S4306500161","display_name":"ACM Proceedings","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"ACM Proceedings","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W228207274","https://openalex.org/W1184354083","https://openalex.org/W1540258466","https://openalex.org/W1563576199","https://openalex.org/W1591888204","https://openalex.org/W1661413208","https://openalex.org/W1919179112","https://openalex.org/W1940872118","https://openalex.org/W1971581014","https://openalex.org/W1978394996","https://openalex.org/W2009797711","https://openalex.org/W2022833100","https://openalex.org/W2027147096","https://openalex.org/W2039157918","https://openalex.org/W2094924503","https://openalex.org/W2102632804","https://openalex.org/W2103378897","https://openalex.org/W2105454049","https://openalex.org/W2132031035","https://openalex.org/W2141041105","https://openalex.org/W2142804492","https://openalex.org/W2147296306","https://openalex.org/W2149203879","https://openalex.org/W2153470728","https://openalex.org/W2161086411","https://openalex.org/W2170890990","https://openalex.org/W2267596186","https://openalex.org/W2272254334","https://openalex.org/W2401686019","https://openalex.org/W2527994611","https://openalex.org/W2536393303","https://openalex.org/W2585367509","https://openalex.org/W2626180518","https://openalex.org/W2744561214","https://openalex.org/W2745980806","https://openalex.org/W2754665629","https://openalex.org/W2762028850","https://openalex.org/W2767094836","https://openalex.org/W2790537587","https://openalex.org/W2883560233","https://openalex.org/W2888115557","https://openalex.org/W2919115771","https://openalex.org/W2963999143","https://openalex.org/W2964304846","https://openalex.org/W3129109196","https://openalex.org/W4236023148","https://openalex.org/W6635271661"],"related_works":["https://openalex.org/W2005615533","https://openalex.org/W1529311266","https://openalex.org/W2065008672","https://openalex.org/W2047234016","https://openalex.org/W1608733163","https://openalex.org/W1543920729","https://openalex.org/W2623150993","https://openalex.org/W2055932080","https://openalex.org/W2950408827","https://openalex.org/W4300573564"],"abstract_inverted_index":{"Logs":[0],"are":[1],"widely":[2],"used":[3],"by":[4,153],"large":[5],"and":[6,72,115,143,172,189,194,207,231,234],"complex":[7],"software-intensive":[8],"systems":[9],"for":[10],"troubleshooting.":[11],"There":[12],"have":[13,58,197],"been":[14],"a":[15,32,128],"lot":[16],"of":[17,75,102,112,140,177,213,228],"studies":[18],"on":[19,237],"log-based":[20,130],"anomaly":[21,131],"detection.":[22],"To":[23],"detect":[24],"the":[25,27,47,59,65,73,110,117,161,165,169,175,204,220,226],"anomalies,":[26],"existing":[28,48],"methods":[29,49,57],"mainly":[30],"construct":[31],"detection":[33,132],"model":[34],"using":[35,200],"log":[36,66,77,89,95,98,103,121,141,170,179,192,229,240],"event":[37],"data":[38,67,90,104],"extracted":[39],"from":[40,106,203],"historical":[41],"logs.":[42],"However,":[43,81],"we":[44,126],"find":[45],"that":[46,64,86,219],"do":[50],"not":[51],"work":[52],"well":[53,224],"in":[54,87,120,168],"practice.":[55],"These":[56],"close-world":[60],"assumption,":[61],"which":[62,159],"assumes":[63],"is":[68,79,185],"stable":[69],"over":[70],"time":[71],"set":[74],"distinct":[76],"events":[78,96,142,193],"known.":[80],"our":[82],"empirical":[83],"study":[84],"shows":[85],"practice,":[88],"often":[91],"contains":[92],"previously":[93],"unseen":[94],"or":[97],"sequences.":[99,195],"The":[100,215],"instability":[101,230],"comes":[105],"two":[107],"sources:":[108],"1)":[109],"evolution":[111],"logging":[113],"statements,":[114],"2)":[116],"processing":[118],"noise":[119],"data.":[122,241],"In":[123,181],"this":[124,182],"paper,":[125],"propose":[127],"new":[129],"approach,":[133],"called":[134],"LogRobust.":[135],"LogRobust":[136,184,199],"extracts":[137],"semantic":[138,147],"information":[139,167],"represents":[144],"them":[145],"as":[146],"vectors.":[148],"It":[149],"then":[150],"detects":[151],"anomalies":[152],"utilizing":[154],"an":[155,208],"attention-based":[156],"Bi-LSTM":[157],"model,":[158],"has":[160],"ability":[162],"to":[163,187],"capture":[164],"contextual":[166],"sequences":[171],"automatically":[173],"learn":[174],"importance":[176],"different":[178],"events.":[180],"way,":[183],"able":[186],"identify":[188],"handle":[190],"unstable":[191],"We":[196],"evaluated":[198],"logs":[201],"collected":[202],"Hadoop":[205],"system":[206,212],"actual":[209],"online":[210],"service":[211],"Microsoft.":[214],"experimental":[216],"results":[217,236],"show":[218],"proposed":[221],"approach":[222],"can":[223],"address":[225],"problem":[227],"achieve":[232],"accurate":[233],"robust":[235],"real-world,":[238],"ever-changing":[239]},"counts_by_year":[{"year":2026,"cited_by_count":21},{"year":2025,"cited_by_count":153},{"year":2024,"cited_by_count":131},{"year":2023,"cited_by_count":140},{"year":2022,"cited_by_count":85},{"year":2021,"cited_by_count":88},{"year":2020,"cited_by_count":31},{"year":2019,"cited_by_count":2}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}