One Graph Is Worth a Thousand Logs: Uncovering Hidden Structures in Massive System Event Logs

  • Authors:
  • Michal Aharon;Gilad Barash;Ira Cohen;Eli Mordechai

  • Affiliations:
  • HP-Labs Israel, Technion City, Israel;HP-Labs Israel, Technion City, Israel;HP-Labs Israel, Technion City, Israel;HP-Labs Israel, Technion City, Israel

  • Venue:
  • ECML PKDD '09 Proceedings of the European Conference on Machine Learning and Knowledge Discovery in Databases: Part I
  • Year:
  • 2009

Quantified Score

Hi-index 0.01

Visualization

Abstract

In this paper we describe our work on pattern discovery in system event logs. For discovering the patterns we developed two novel algorithms. The first is a sequential and efficient text clustering algorithm which automatically discovers the templates generating the messages. The second, the PARIS algorithm (Principle Atom Recognition In Sets), is a novel algorithm which discovers patterns of messages that represent processes occurring in the system. We demonstrate the usefulness of our analysis, on real world logs from various systems, for debugging of complex systems, efficient search and visualization of logs and characterization of system behavior.