{"id":"https://openalex.org/W7162133986","doi":"https://doi.org/10.48550/arxiv.2605.22779","title":"FAME: Failure-Aware Mixture-of-Experts for Message-Level Log Anomaly Detection","display_name":"FAME: Failure-Aware Mixture-of-Experts for Message-Level Log Anomaly Detection","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162133986","doi":"https://doi.org/10.48550/arxiv.2605.22779"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.22779","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22779","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.22779","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136732651","display_name":"Huanchi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Huanchi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073808268","display_name":"Zihang Huang","orcid":"https://orcid.org/0000-0001-5198-3412"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Zihang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135894778","display_name":"Yifang Tian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Yifang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071288902","display_name":"Kristina Dzeparoska","orcid":"https://orcid.org/0000-0002-3322-8648"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dzeparoska, Kristina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072791865","display_name":"Hans\u2010Arno Jacobsen","orcid":"https://orcid.org/0000-0003-0813-0101"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jacobsen, Hans-Arno","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5007034052","display_name":"Alberto Le\u00f3n-Garc\u00eda","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Leon-Garcia, Alberto","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/flagging","display_name":"Flagging","score":0.6996999979019165},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6312999725341797},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.5485000014305115},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.45980000495910645},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4465999901294708},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.4462999999523163},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.4332999885082245},{"id":"https://openalex.org/keywords/line","display_name":"Line (geometry)","score":0.4081000089645386},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.3978999853134155}],"concepts":[{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.6996999979019165},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6312999725341797},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6047999858856201},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.5485000014305115},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.45980000495910645},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4465999901294708},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.4462999999523163},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.4332999885082245},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43050000071525574},{"id":"https://openalex.org/C198352243","wikidata":"https://www.wikidata.org/wiki/Q37105","display_name":"Line (geometry)","level":2,"score":0.4081000089645386},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3978999853134155},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.392300009727478},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3919000029563904},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.35659998655319214},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.3528999984264374},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34779998660087585},{"id":"https://openalex.org/C42812","wikidata":"https://www.wikidata.org/wiki/Q1082910","display_name":"Partition (number theory)","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.310699999332428},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.3084000051021576},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30329999327659607},{"id":"https://openalex.org/C43711488","wikidata":"https://www.wikidata.org/wiki/Q7534783","display_name":"Skew","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C182124507","wikidata":"https://www.wikidata.org/wiki/Q166154","display_name":"Line segment","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27549999952316284},{"id":"https://openalex.org/C99862985","wikidata":"https://www.wikidata.org/wiki/Q10858068","display_name":"Production line","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2605000138282776},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.22779","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22779","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.22779","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22779","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"sustainable_development_goals":[{"score":0.45196637511253357,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Production":[0],"systems":[1],"generate":[2],"millions":[3],"of":[4,20,133,184],"log":[5,81],"lines":[6,21,38,117],"daily,":[7],"yet":[8],"most":[9,114],"anomaly":[10,160],"detectors":[11],"operate":[12],"at":[13,69,113,172],"the":[14,25,143],"session":[15],"or":[16],"window-level,":[17],"flagging":[18],"groups":[19],"rather":[22],"than":[23],"identifying":[24],"specific":[26],"message":[27],"responsible.":[28],"This":[29],"coarse":[30],"granularity":[31],"forces":[32],"operators":[33],"to":[34,55,85,120],"inspect":[35],"many":[36],"routine":[37],"per":[39,118],"alert.":[40],"Message-level":[41],"detection":[42],"offers":[43],"finer":[44],"granularity,":[45],"but":[46],"remains":[47],"challenging.":[48],"A":[49],"single":[50],"event":[51],"template":[52,119],"may":[53],"correspond":[54],"both":[56],"normal":[57],"and":[58,66,125,138,152,158,162,181],"anomalous":[59],"messages,":[60],"failures":[61],"arise":[62],"from":[63,186],"heterogeneous":[64],"subsystems,":[65],"line-level":[67],"labeling":[68],"scale":[70],"is":[71,88],"impractical.":[72],"Although":[73],"large":[74],"language":[75],"models":[76],"(LLMs)":[77],"can":[78],"reason":[79],"over":[80],"semantics,":[82],"applying":[83],"them":[84],"every":[86],"line":[87],"too":[89],"costly":[90],"for":[91],"continuous":[92],"monitoring.":[93],"We":[94,111],"present":[95],"FAME":[96,147,167,191],"(Failure-Aware":[97],"Mixture-of-Experts),":[98],"a":[99,131,139,149],"label-efficient":[100],"message-level":[101],"mixture-of-experts":[102],"framework":[103],"that":[104,155],"uses":[105],"an":[106],"LLM":[107,129],"only":[108],"once":[109],"offline.":[110],"annotate":[112],"K":[115,173],"labeled":[116],"derive":[121],"binary":[122],"normal/anomaly":[123],"indicators":[124],"representative":[126],"examples.":[127],"The":[128],"proposes":[130],"partition":[132],"templates":[134],"into":[135],"failure":[136],"domains,":[137],"certification":[140],"step":[141],"validates":[142],"proposal":[144],"before":[145],"training.":[146],"trains":[148],"lightweight":[150],"router":[151],"domain":[153],"experts":[154],"run":[156],"on-premise":[157],"output":[159],"predictions":[161],"failure-domain":[163],"labels.":[164],"On":[165,189],"BGL,":[166],"achieves":[168],"F1":[169,193],"=":[170,174,194],"98.16":[171],"100":[175],"reducing":[176],"annotation":[177],"effort":[178],"by":[179],"76x":[180],"detects":[182],"86.3%":[183],"anomalies":[185],"unseen":[187],"EventIDs.":[188],"Thunderbird,":[190],"reaches":[192],"99.95":[195],"with":[196],"perfect":[197],"recall.":[198]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-23T00:00:00"}