Guidelines for assessing the accuracy of log message template identification techniques
Рекомендации по оценке точности методов идентификации шаблонов сообщений журналов
2022-05-21
SCID: 54.1/n4bemy38
Discuss with AI
accuracy metricsground-truth templateslog message template identificationlog-based anomaly detectionstructured logs
Figures from the paper
Abstract (AI)
Log message template identification aims to convert raw logs containing free-formed log messages into structured logs to be processed by automated log-based analysis, such as anomaly detection and model inference. While many techniques have been proposed in the literature, only two recent studies provide a comprehensive evaluation and comparison of the techniques using an established benchmark composed of real-world logs. Nevertheless, we argue that both studies have the following issues: (1) they used different accuracy metrics without comparison between them, (2) some ground-truth (oracle) templates are incorrect, and (3) the accuracy evaluation results do not provide any information regarding incorrectly identified templates.
Key Findings
1
Existing accuracy results do not reveal which templates were identified incorrectly, limiting diagnostic value and interpretability.
2
Prior studies use different accuracy metrics without comparing how those metrics affect evaluation results.
3
Some templates in the established real-world log benchmark’s ground truth are incorrect, undermining the reliability of reported accuracy.
4
The paper argues that existing comprehensive evaluations of log template identification techniques suffer from methodological and ground-truth shortcomings.
Research Object
log message template identification techniques
Research Subject
accuracy assessment, metric comparability, ground-truth correctness, and characterization of incorrectly identified templates
Publication Details
Publication Date
2022-05-21
Journal
Publisher
ISSN
Cited by
89
Open access PDF
Access Type
Author Information
Download PDF
Subscribe to digest