Lemur: Log Parsing with Entropy Sampling and Chain-of-Thought Merging (original) (raw)

View PDF HTML (experimental)

Abstract:Logs produced by extensive software systems are integral to monitoring system behaviors. Advanced log analysis facilitates the detection, alerting, and diagnosis of system faults. Log parsing, which entails transforming raw log messages into structured templates, constitutes a critical phase in the automation of log analytics. Existing log parsers fail to identify the correct templates due to reliance on human-made rules. Besides, these methods focus on statistical features while ignoring semantic information in log messages. To address these challenges, we introduce a cutting-edge \textbf{L}og parsing framework with \textbf{E}ntropy sampling and chain-of-thought \textbf{M}erging (\model{}). Specifically, to discard the tedious manual rules, we propose a novel sampling method inspired by information entropy, which efficiently clusters typical logs. Furthermore, to enhance the merging of log templates, we design a chain-of-thought method for large language models (LLMs). LLMs exhibit exceptional semantic comprehension and deftly distinguish between parameters and invariant tokens. We have conducted experiments on large-scale public datasets. Extensive evaluation demonstrates that \model{} achieves state-of-the-art performance and impressive efficiency. The Code is available at this https URL.

Submission history

From: Wei Zhang [view email]
[v1] Wed, 28 Feb 2024 09:51:55 UTC (868 KB)
[v2] Sat, 2 Mar 2024 03:47:13 UTC (868 KB)
[v3] Tue, 31 Dec 2024 16:14:51 UTC (1,355 KB)
[v4] Wed, 8 Jan 2025 15🔞15 UTC (1,355 KB)
[v5] Wed, 26 Mar 2025 08:55:05 UTC (1,041 KB)