Log-based anomaly detection is a fundamental task for maintaining the reliability and security of modern computing systems. Although deep learning approaches have achieved significant progress, they often incur high computational and memory costs, limiting their applicability in real-time and resource-constrained environments. To address this challenge, we propose LightLog-BERT, an enhanced version of the lightweight LightLog framework that integrates BERT-based contextual embeddings into the log preprocessing pipeline. This integration enriches the semantic representation of log sequences, enabling the model to capture contextual dependencies more effectively while preserving computational efficiency. Experimental evaluations on the HDFS and BGL benchmark datasets show that LightLog-BERT achieves F1-scores of 0.96 and 0.99, respectively, outperforming existing methods and confirming its suitability for real-time and edge-level anomaly detection applications.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Enhancing LightLog with BERT-Based Contextual Embeddings

  • Aziza Zizouan,
  • Imad Hafidi,
  • Noureddine Aboutabit

摘要

Log-based anomaly detection is a fundamental task for maintaining the reliability and security of modern computing systems. Although deep learning approaches have achieved significant progress, they often incur high computational and memory costs, limiting their applicability in real-time and resource-constrained environments. To address this challenge, we propose LightLog-BERT, an enhanced version of the lightweight LightLog framework that integrates BERT-based contextual embeddings into the log preprocessing pipeline. This integration enriches the semantic representation of log sequences, enabling the model to capture contextual dependencies more effectively while preserving computational efficiency. Experimental evaluations on the HDFS and BGL benchmark datasets show that LightLog-BERT achieves F1-scores of 0.96 and 0.99, respectively, outperforming existing methods and confirming its suitability for real-time and edge-level anomaly detection applications.