Length Matters: Clustering System Log Messages using Length of Words
arXiv:1611.03213
Abstract
The analysis techniques of system log messages (syslog messages) have a long history from when the syslog mechanism was invented. Typically, the analysis consists of two parts, one is a message template generation, and the other is finding something interesting using the messages classified by the inferred templates. It is important to generate better templates to achieve better, precise, or convincible analysis results. In this paper, we propose a classification methodology using the length of words of each message. Our method is suitable for online template generation because it does not require two-pass analysis to generate template messages, that is an important factor considering increasing amount of log messages produced by a large number of system components such as cloud infrastructure.
Cited by in corpus (5)
- Log-based Anomaly Detection with Deep Learning: How Far Are We?
- UniParser: A Unified Log Parser for Heterogeneous Log Data
- Logram: Efficient Log Parsing Using n-Gram Dictionaries
- Log-based Anomaly Detection Without Log Parsing
- AWSOM-LP: An Effective Log Parsing Technique Using Pattern Recognition and Frequency Analysis