The DOI matches its Crossref record; 8 of the 8 references it cites were found in a registry or an index.
MLog: Mogrifier LSTM-Based Log Anomaly Detection Approach Using Semantic Representation
Abstract
Streaming logs provide valuable information for complex systems in diagnosing system faults or conducting security analysis. Although the log sequence anomaly detection has drawn more and more attention and achieved a satisfactory performance, it remains an extremely difficult task because of several intrinsic challenges including new event occurrences in a continuously evolving environment, making full use of rich dependency hidden in sequential events from the global and local view. To meet these challenges, in this article, we propose MLog, a hybrid deep neural network for detecting anomalies in log sequences. Specifically, MLog leverages the transformer encoder and a novel event Inverse Document Frequency (IDF) weighted mechanism to obtain a semantic vector for an individual log template. Log sequences represented by sequential template semantic vectors are then fed into a deep neural network combing the Mogrifier Long Short Term Memory (LSTM) with Convolutional Neural Network (CNN) to capture global and local sequential patterns simultaneously. We implement MLog and evaluate it by conducting extensive experiments on two well-known benchmark datasets, HDFS and BGL, from the aspects of detection accuracy and robustness. The results show that MLog outperforms the state-of-the-art approaches and is robust to the evolving logs. To encourage reproducibility, we make the implementation of MLog available.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
3 of the 6 studies only work at the event level.
“3 of them [39], [47], [50] only work at the event level.”
From Practitioners’ expectations on log anomaly detection (2025) · cites this paper as [39]
Citations
Cites
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2019) · Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers) · doi:10.18653/v1/n19-1423 · Cited by 54,325
Drain: an online log parsing approach with fixed depth tree
He, P., Zhu, J., Zheng, Z., & Lyu, M. R. (2017) · 2017 IEEE International Conference on Web Services (ICWS) · doi:10.1109/icws.2017.13 · Cited by 943
Tools and benchmarks for automated log parsing
Zhu, J., He, S., Liu, J., He, P., Xie, Q., Zheng, Z., & Lyu, M. R. (2019) · 2019 IEEE/ACM 41st International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP) · doi:10.1109/icse-seip.2019.00021 · Cited by 574
LogBERT: Log Anomaly Detection via BERT
Guo, H., Yuan, S., & Wu, X. (2021) · 2021 International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn52387.2021.9534113 · Cited by 454
Log-based Anomaly Detection Without Log Parsing
Le, V.-H., & Zhang, H. (2021) · 2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase51524.2021.9678773 · Cited by 361
Failure Prediction in IBM BlueGene/L Event Logs
Liang, Y., Zhang, Y., Xiong, H., & Sahoo, R. (2007) · Seventh IEEE International Conference on Data Mining (ICDM 2007) · doi:10.1109/icdm.2007.46 · Cited by 292
Self-Attentive Classification-Based Anomaly Detection in Unstructured Logs
Nedelkoski, S., Bogatinovski, J., Acker, A., Cardoso, J., & Kao, O. (2020) · 2020 IEEE International Conference on Data Mining (ICDM) · doi:10.1109/icdm50108.2020.00148 · Cited by 176
LogBERT: Log Anomaly Detection via BERT
Guo, H., Yuan, S., & Wu, X. (2021) · arXiv · doi:10.48550/arxiv.2103.04475 · Cited by 7
Flagged first, then by citations
Research works printed but not linked: 34
- Jia, 2020, Survey of state-of-the-art log-based failure diagnosis, 1, 1997
- 10.1007/978-3-030-54994-7_15 · DOI
- 10.1109/TNSM.2021.3125967 · DOI · Paper page
- 10.1109/ISSRE.2015.7381796 · DOI
- Lou, Mining invariants from console logs for system problem detection
- 10.1145/1629575.1629587 · DOI · Paper page
- 10.1145/3338906.3338931 · DOI · Paper page
- 10.1145/3133956.3134015 · DOI · Paper page
- 10.24963/ijcai.2019/658 · DOI · Paper page
- 10.1109/ACCESS.2019.2953981 · DOI
- 10.1109/TNSM.2020.3034647 · DOI
- Melis, 2020, Mogrifier LSTM
- 10.1109/TSE.2012.67 · DOI
- 10.1145/2523649.2523670 · DOI
- Jiang, Understanding customer problem troubleshooting from storage system logs, 43
- 10.3115/v1/P15-1002 · DOI
- Vaswani, Attention is all you need, 5998
- 10.1109/CNSM.2015.7367331 · DOI
- 10.1109/ISSRE5003.2020.00018 · DOI
- 10.1109/ICACCI.2017.8125846 · DOI
- 10.1109/ICAC.2004.1301345 · DOI
- 10.1145/3447548.3467125 · DOI · Paper page
- 10.1109/ISSRE5003.2020.00013 · DOI
- 10.1145/3217871.3217872 · DOI
- 10.1145/3196321.3196340 · DOI
- 10.1109/ICDM.2016.0103 · DOI · Paper page
- 10.1145/1557019.1557154 · DOI
- 10.1002/smr.374 · DOI
- 10.1007/978-3-030-34637-9_5 · DOI
- 10.1016/j.future.2021.05.024 · DOI
- Church, 2017, Word2vec, Nat. Lang. Eng., 23, 155, 10.1017/S1351324916000334 · DOI
- 10.3115/v1/D14-1162 · DOI · Paper page
- 10.1016/j.ins.2018.09.001 · DOI
- 10.1109/ICSE-SEIP.2019.00021 · DOI · Paper page
Cited by
Sorted by citations
LLM-LADE: Large language model-based log anomaly detection with explanation
Zhang, Z., Li, S., Zhang, L., Ye, J., Hu, C., & Yan, L. (2025) · Knowledge-Based Systems · doi:10.1016/j.knosys.2025.114064 · Cited by 42
Practitioners’ expectations on log anomaly detection
Ma, X., Li, Y., Keung, J., Yu, X., Zou, H., Yang, Z., Sarro, F., & Barr, E. T. (2025) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2025.3586700 · Cited by 21
Metadata
- Authors
- Fu, Y., Liang, K., & Xu, J.
- Venue
- IEEE Transactions on Services Computing
- Published
- 2023-09
- Volume
- 16
- Issue
- 5
- Pages
- 3537-3549
- ISSN
- 1939-1374
- 2372-0204
- Cited by
- 49
- References
- 8
- Licence
- Funders
- National Natural Science Foundation of China (61872186)
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review