Saved in:
Bibliographic Details
Main Authors: Yang, Haitian, Sun, Degang, Liu, Wen, Li, Yanshu, Wang, Yan, Huang, Weiqing
Format: Preprint
Published: 2024
Subjects:
Online Access:https://arxiv.org/abs/2402.11841
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917593141477376
author Yang, Haitian
Sun, Degang
Liu, Wen
Li, Yanshu
Wang, Yan
Huang, Weiqing
author_facet Yang, Haitian
Sun, Degang
Liu, Wen
Li, Yanshu
Wang, Yan
Huang, Weiqing
contents Logs are widely used in the development and maintenance of software systems. Logs can help engineers understand the runtime behavior of systems and diagnose system failures. For anomaly diagnosis, existing methods generally use log event data extracted from historical logs to build diagnostic models. However, we find that existing methods do not make full use of two types of features, (1) statistical features: some inherent statistical features in log data, such as word frequency and abnormal label distribution, are not well exploited. Compared with log raw data, statistical features are deterministic and naturally compatible with corresponding tasks. (2) semantic features: Logs contain the execution logic behind software systems, thus log statements share deep semantic relationships. How to effectively combine statistical features and semantic features in log data to improve the performance of log anomaly diagnosis is the key point of this paper. In this paper, we propose an adaptive semantic gate networks (ASGNet) that combines statistical features and semantic features to selectively use statistical features to consolidate log text semantic representation. Specifically, ASGNet encodes statistical features via a variational encoding module and fuses useful information through a well-designed adaptive semantic threshold mechanism. The threshold mechanism introduces the information flow into the classifier based on the confidence of the semantic features in the decision, which is conducive to training a robust classifier and can solve the overfitting problem caused by the use of statistical features. The experimental results on the real data set show that our method proposed is superior to all baseline methods in terms of various performance indicators.
format Preprint
id arxiv_https___arxiv_org_abs_2402_11841
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle ASGNet: Adaptive Semantic Gate Networks for Log-Based Anomaly Diagnosis
Yang, Haitian
Sun, Degang
Liu, Wen
Li, Yanshu
Wang, Yan
Huang, Weiqing
Software Engineering
Logs are widely used in the development and maintenance of software systems. Logs can help engineers understand the runtime behavior of systems and diagnose system failures. For anomaly diagnosis, existing methods generally use log event data extracted from historical logs to build diagnostic models. However, we find that existing methods do not make full use of two types of features, (1) statistical features: some inherent statistical features in log data, such as word frequency and abnormal label distribution, are not well exploited. Compared with log raw data, statistical features are deterministic and naturally compatible with corresponding tasks. (2) semantic features: Logs contain the execution logic behind software systems, thus log statements share deep semantic relationships. How to effectively combine statistical features and semantic features in log data to improve the performance of log anomaly diagnosis is the key point of this paper. In this paper, we propose an adaptive semantic gate networks (ASGNet) that combines statistical features and semantic features to selectively use statistical features to consolidate log text semantic representation. Specifically, ASGNet encodes statistical features via a variational encoding module and fuses useful information through a well-designed adaptive semantic threshold mechanism. The threshold mechanism introduces the information flow into the classifier based on the confidence of the semantic features in the decision, which is conducive to training a robust classifier and can solve the overfitting problem caused by the use of statistical features. The experimental results on the real data set show that our method proposed is superior to all baseline methods in terms of various performance indicators.
title ASGNet: Adaptive Semantic Gate Networks for Log-Based Anomaly Diagnosis
topic Software Engineering
url https://arxiv.org/abs/2402.11841