{"id":"https://openalex.org/W3195057108","doi":"https://doi.org/10.1145/3468264.3473919","title":"Onion: identifying incident-indicating logs for cloud systems","display_name":"Onion: identifying incident-indicating logs for cloud systems","publication_year":2021,"publication_date":"2021-08-18","ids":{"openalex":"https://openalex.org/W3195057108","doi":"https://doi.org/10.1145/3468264.3473919","mag":"3195057108"},"language":"en","primary_location":{"id":"doi:10.1145/3468264.3473919","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3468264.3473919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100437263","display_name":"Xu Zhang","orcid":"https://orcid.org/0000-0002-8103-8486"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Zhang","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100359961","display_name":"Yong Xu","orcid":"https://orcid.org/0000-0003-0530-2123"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Xu","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027659574","display_name":"Si Qin","orcid":"https://orcid.org/0000-0002-8698-1860"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Si Qin","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078511386","display_name":"Shilin He","orcid":"https://orcid.org/0000-0002-8595-5388"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shilin He","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049886136","display_name":"Bo Qiao","orcid":"https://orcid.org/0000-0002-8997-8317"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Qiao","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":"https://orcid.org/0000-0002-8997-8317","affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100424653","display_name":"Ze Li","orcid":"https://orcid.org/0000-0003-3087-0595"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ze Li","raw_affiliation_strings":["Microsoft Azure, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Azure, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100412598","display_name":"Hongyu Zhang","orcid":"https://orcid.org/0000-0002-3063-9425"},"institutions":[{"id":"https://openalex.org/I78757542","display_name":"University of Newcastle Australia","ror":"https://ror.org/00eae9z71","country_code":"AU","type":"education","lineage":["https://openalex.org/I78757542"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hongyu Zhang","raw_affiliation_strings":["University of Newcastle, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3063-9425","affiliations":[{"raw_affiliation_string":"University of Newcastle, Australia","institution_ids":["https://openalex.org/I78757542"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108271344","display_name":"Xukun Li","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xukun Li","raw_affiliation_strings":["Microsoft Azure, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Azure, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086338440","display_name":"Yingnong Dang","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yingnong Dang","raw_affiliation_strings":["Microsoft Azure, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Azure, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088646345","display_name":"Qingwei Lin","orcid":"https://orcid.org/0000-0003-2559-2383"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingwei Lin","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":"https://orcid.org/0000-0003-2559-2383","affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046726312","display_name":"Murali Chintalapati","orcid":"https://orcid.org/0000-0002-8396-9903"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Murali Chintalapati","raw_affiliation_strings":["Microsoft Azure, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Azure, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038088893","display_name":"Saravanakumar Rajmohan","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saravanakumar Rajmohan","raw_affiliation_strings":["Microsoft 365, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft 365, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100331488","display_name":"Dongmei Zhang","orcid":"https://orcid.org/0000-0002-9230-2799"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongmei Zhang","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":"https://orcid.org/0000-0002-9230-2799","affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.6801,"has_fulltext":false,"cited_by_count":49,"citation_normalized_percentile":{"value":0.98887653,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1253","last_page":"1263"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.965499997138977,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7386341094970703},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.7055140733718872},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5959677696228027},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5911719799041748},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5604807734489441},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.5034539103507996},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.48596251010894775},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.42726534605026245},{"id":"https://openalex.org/keywords/point-cloud","display_name":"Point cloud","score":0.4249861240386963},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.21242806315422058}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7386341094970703},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.7055140733718872},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5959677696228027},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5911719799041748},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5604807734489441},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.5034539103507996},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.48596251010894775},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.42726534605026245},{"id":"https://openalex.org/C131979681","wikidata":"https://www.wikidata.org/wiki/Q1899648","display_name":"Point cloud","level":2,"score":0.4249861240386963},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.21242806315422058},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3468264.3473919","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3468264.3473919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:uon:44029","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.13/1450828","pdf_url":null,"source":{"id":"https://openalex.org/S4377196471","display_name":"NOVA (University of Newcastle Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I78757542","host_organization_name":"University of Newcastle Australia","host_organization_lineage":["https://openalex.org/I78757542"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W46659105","https://openalex.org/W95608104","https://openalex.org/W317957491","https://openalex.org/W1980867644","https://openalex.org/W1987454953","https://openalex.org/W1996716987","https://openalex.org/W2002830978","https://openalex.org/W2074453851","https://openalex.org/W2094924503","https://openalex.org/W2105454049","https://openalex.org/W2134461696","https://openalex.org/W2184190733","https://openalex.org/W2189465200","https://openalex.org/W2212531312","https://openalex.org/W2401686019","https://openalex.org/W2413458763","https://openalex.org/W2734206393","https://openalex.org/W2754665629","https://openalex.org/W2767094836","https://openalex.org/W2883560233","https://openalex.org/W2884697754","https://openalex.org/W2942544869","https://openalex.org/W2944703101","https://openalex.org/W2955925687","https://openalex.org/W2963999143","https://openalex.org/W4205930639","https://openalex.org/W6687322159"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W1997222214","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W3150465815","https://openalex.org/W2802581102","https://openalex.org/W4205786897"],"abstract_inverted_index":{"In":[0,50],"cloud":[1,176],"systems,":[2],"incidents":[3],"affect":[4],"the":[5,29,36,43,73,130,134,175,186,192],"availability":[6],"of":[7,32,96,150,156,178,191],"services":[8],"and":[9,19,35,48,61,88,118,152,166,188],"require":[10],"quick":[11],"mitigation":[12],"actions.":[13],"Once":[14],"an":[15,56,114,147],"incident":[16,194],"occurs,":[17],"operators":[18],"developers":[20],"often":[21],"examine":[22],"logs":[23,34,157],"to":[24,132,174],"perform":[25],"fault":[26],"diagnosis.":[27],"However,":[28],"large":[30],"volume":[31],"diverse":[33],"overwhelming":[37],"details":[38],"in":[39,158],"log":[40,99,110,116,121,143],"data":[41],"make":[42],"manual":[44],"diagnosis":[45],"process":[46,154],"time-consuming":[47],"error-prone.":[49],"this":[51],"paper,":[52],"we":[53,91,112],"propose":[54,92],"Onion,":[55],"automatic":[57],"solution":[58],"for":[59,71,81],"precisely":[60],"efficiently":[62],"locating":[63],"incident-indicating":[64,83,135],"logs,":[65,84,97],"which":[66,103],"can":[67,153],"provide":[68],"useful":[69],"clues":[70],"diagnosing":[72],"incidents.":[74],"We":[75,137],"first":[76],"point":[77],"out":[78],"three":[79],"criteria":[80,105],"localizing":[82],"i.e.,":[85],"Consistency,":[86],"Impact,":[87],"Bilateral-Difference.":[89],"Then":[90],"a":[93,119,160],"novel":[94],"agglomeration":[95],"called":[98],"clique,":[100],"based":[101],"on":[102,129],"these":[104],"are":[106],"satisfied.":[107],"To":[108],"obtain":[109],"cliques,":[111],"develop":[113],"incident-aware":[115],"representation":[117],"progressive":[120],"clustering":[122],"technique.":[123],"Contrast":[124],"analysis":[125,190],"is":[126],"then":[127],"performed":[128],"cliques":[131],"identify":[133],"logs.":[136],"have":[138],"evaluated":[139],"Onion":[140,145,168],"using":[141],"well-labeled":[142],"datasets.":[144],"achieves":[146],"average":[148],"F1-score":[149],"0.95":[151],"millions":[155],"only":[159],"few":[161],"minutes,":[162],"demonstrating":[163],"its":[164],"effectiveness":[165],"efficiency.":[167],"has":[169,182],"also":[170],"been":[171,183],"successfully":[172],"applied":[173],"system":[177],"Microsoft.":[179],"Its":[180],"practicability":[181],"confirmed":[184],"through":[185],"quantitative":[187],"qualitative":[189],"real":[193],"cases.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":6}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}