{"id":"https://openalex.org/W4394745427","doi":"https://doi.org/10.1145/3597503.3639205","title":"MetaLog: Generalizable Cross-System Anomaly Detection from Logs with Meta-Learning","display_name":"MetaLog: Generalizable Cross-System Anomaly Detection from Logs with Meta-Learning","publication_year":2024,"publication_date":"2024-04-12","ids":{"openalex":"https://openalex.org/W4394745427","doi":"https://doi.org/10.1145/3597503.3639205"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3639205","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639205","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639205","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639205","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029834032","display_name":"Chenyangguang Zhang","orcid":"https://orcid.org/0009-0005-7852-4124"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenyangguang Zhang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-7852-4124","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069358025","display_name":"Tong Jia","orcid":"https://orcid.org/0000-0002-5946-9829"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]},{"id":"https://openalex.org/I4210100255","display_name":"Beijing Academy of Artificial Intelligence","ror":"https://ror.org/016a74861","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210100255"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tong Jia","raw_affiliation_strings":["Institute for Artificial Intelligence, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5946-9829","affiliations":[{"raw_affiliation_string":"Institute for Artificial Intelligence, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570","https://openalex.org/I4210100255"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102724976","display_name":"Guopeng Shen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210141170","display_name":"LinkedTech Solutions (China)","ror":"https://ror.org/04sjk7a65","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210141170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guopeng Shen","raw_affiliation_strings":["Linkedsee Technology (China) Limited, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-9109-4091","affiliations":[{"raw_affiliation_string":"Linkedsee Technology (China) Limited, Beijing, China","institution_ids":["https://openalex.org/I4210141170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008124884","display_name":"P. Zhu","orcid":"https://orcid.org/0009-0005-7704-7960"},"institutions":[{"id":"https://openalex.org/I4210141170","display_name":"LinkedTech Solutions (China)","ror":"https://ror.org/04sjk7a65","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210141170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pinyan Zhu","raw_affiliation_strings":["Linkedsee Technology (China) Limited, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-7704-7960","affiliations":[{"raw_affiliation_string":"Linkedsee Technology (China) Limited, Beijing, China","institution_ids":["https://openalex.org/I4210141170"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100414277","display_name":"Ying Li","orcid":"https://orcid.org/0000-0002-6278-2357"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Li","raw_affiliation_strings":["Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6278-2357","affiliations":[{"raw_affiliation_string":"Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8302327394485474},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7083687782287598},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6407251954078674},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5575554966926575},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5005700588226318},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4917900860309601},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4916895031929016},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4451611042022705},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4190637171268463},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09170094132423401}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8302327394485474},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7083687782287598},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6407251954078674},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5575554966926575},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5005700588226318},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4917900860309601},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4916895031929016},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4451611042022705},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4190637171268463},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09170094132423401},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597503.3639205","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639205","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639205","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3597503.3639205","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639205","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639205","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.4099999964237213,"display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394745427.pdf","grobid_xml":"https://content.openalex.org/works/W4394745427.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W2039157918","https://openalex.org/W2115403315","https://openalex.org/W2147296306","https://openalex.org/W2172012155","https://openalex.org/W2250539671","https://openalex.org/W2508465325","https://openalex.org/W2754665629","https://openalex.org/W2755791218","https://openalex.org/W2756452435","https://openalex.org/W2767094836","https://openalex.org/W2947815220","https://openalex.org/W2962799101","https://openalex.org/W2963043696","https://openalex.org/W2963756240","https://openalex.org/W2963943197","https://openalex.org/W2965838158","https://openalex.org/W2979166895","https://openalex.org/W2984323660","https://openalex.org/W2990520147","https://openalex.org/W3034373371","https://openalex.org/W3035054804","https://openalex.org/W3044376627","https://openalex.org/W3089589468","https://openalex.org/W3095270930","https://openalex.org/W3097861059","https://openalex.org/W3100214273","https://openalex.org/W3112169080","https://openalex.org/W3114246289","https://openalex.org/W3167092656","https://openalex.org/W3174337559","https://openalex.org/W3205249428","https://openalex.org/W3210131940","https://openalex.org/W3217147624","https://openalex.org/W4205965165","https://openalex.org/W4211008139","https://openalex.org/W4245744969","https://openalex.org/W4255845613","https://openalex.org/W4287815740","https://openalex.org/W4290878423","https://openalex.org/W4376552681","https://openalex.org/W4386858668"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Log-based":[0],"anomaly":[1,18,58,84,100,178,192],"detection":[2,19,59,85,101,179,193],"plays":[3],"a":[4,23,97,106,120],"crucial":[5],"role":[6],"in":[7,34,119,197],"ensuring":[8],"the":[9,44,47,72,127,132,169,198,207],"stability":[10],"of":[11,26,46,52,61,79,168,201,206],"software.":[12],"However,":[13],"current":[14],"approaches":[15],"for":[16],"log-based":[17],"heavily":[20],"depend":[21],"on":[22,86,140],"vast":[24],"amount":[25],"labeled":[27,50,77,166,184,203],"historical":[28,49],"data,":[29],"which":[30],"is":[31],"often":[32],"unavailable":[33],"many":[35],"real-world":[36],"systems.":[37,153],"To":[38],"mitigate":[39],"this":[40],"problem,":[41],"we":[42,94],"leverage":[43],"features":[45],"abundant":[48],"logs":[51,78,167,205],"mature":[53,80],"systems":[54,63,81,88],"to":[55,70,82,112,130],"help":[56],"construct":[57],"models":[60,180,194],"new":[62,87],"with":[64,89,175,182],"very":[65],"few":[66],"labels,":[67],"that":[68,156],"is,":[69],"generalize":[71],"model":[73],"ability":[74],"trained":[75,181],"from":[76,150],"achieve":[83],"insufficient":[90],"data":[91],"labels.":[92],"Specifically,":[93],"propose":[95],"MetaLog,":[96],"generalizable":[98],"cross-system":[99,191],"approach.":[102],"MetaLog":[103,157],"first":[104],"incorporates":[105],"globally":[107],"consistent":[108],"semantic":[109,116],"embedding":[110,117],"module":[111],"obtain":[113],"log":[114,143],"event":[115],"vectors":[118],"shared":[121],"global":[122],"space.":[123],"Then":[124],"it":[125,187],"leverages":[126],"meta-learning":[128],"paradigm":[129],"improve":[131],"model's":[133],"generalization":[134],"ability.":[135],"We":[136],"evaluate":[137],"MetaLog's":[138],"performance":[139,174],"four":[141,151],"public":[142],"datasets":[144],"(HDFS,":[145],"BGL,":[146],"OpenStack,":[147],"and":[148],"Thunderbird)":[149],"different":[152],"Results":[154],"show":[155],"reaches":[158],"over":[159],"80%":[160],"F1-score":[161],"when":[162],"using":[163],"only":[164],"1%":[165,202],"target":[170,208],"system,":[171],"showing":[172],"similar":[173],"state-of-the-art":[176],"supervised":[177],"100%":[183],"data.":[185],"Besides,":[186],"outperforms":[188],"state-of-art":[189],"transfer-learning-based":[190],"by":[195],"20%":[196],"same":[199],"settings":[200],"training":[204],"system.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":23},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}