Tools and Benchmarks for Automated Log Parsing
Not on the map. Why?
Abstract (arXiv)
Logs are imperative in the development and maintenance process of many software systems. They record detailed runtime information that allows developers and support engineers to monitor their systems and dissect anomalous behaviors and errors. The increasing scale and complexity of modern software systems, however, make the volume of logs explodes. In many cases, the traditional way of manual log inspection becomes impractical. Many recent studies, as well as industrial tools, resort to powerful text search and machine learning-based analytics solutions. Due to the unstructured nature of logs, a first crucial step is to parse log messages into structured data for subsequent analysis. In recent years, automated log parsing has been widely studied in both academia and industry, producing a series of log parsers by different techniques. To better understand the characteristics of these log parsers, in this paper, we present a comprehensive evaluation study on automated log parsing and further release the tools and benchmarks for easy reuse. More specifically, we evaluate 13 log parsers on a total of 16 log datasets spanning distributed systems, supercomputers, operating systems, mobile systems, server applications, and standalone software. We report the benchmarking results in terms of accuracy, robustness, and efficiency, which are of practical importance when deploying automated log parsing in production. We also share the success stories and lessons learned in an industrial application at Huawei. We believe that our work could serve as the basis and provide valuable guidance to future research and deployment of automated log parsing.
Key facts. Cited by 56 papers in the map (data through 14 Oct 2026). First posted on arXiv 8 Nov 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 9; 2022: 7; 2023: 12; 2024: 16; 2025: 4; 2026: 8.
56 papers.
Sort:
By area:
- 2021Log-based Anomaly Detection Without Log Parsingcited by 59
- 2022Log-based Anomaly Detection with Deep Learning: How Far Are We?cited by 57
- 2021Experience Report: Deep Learning-based System Log Analysis for Anomaly Detectioncited by 37
- 2024Automatic Programming: Large Language Models and Beyondcited by 36
- 2022Deep Learning for Anomaly Detection in Log Data: A Surveycited by 28
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Modelscited by 22
- 2024Building AI Agents for Autonomous Clouds: Challenges and Design Principlescited by 19
- 2023Log Parsing: How Far Can ChatGPT Go?cited by 16
- 2024OptLLM: Optimal Assignment of Queries to Large Language Modelscited by 16
- 2024LogLM: From Task-based to Instruction-based Automated Log Analysiscited by 15
- 2021Robust and Transferable Anomaly Detection in Log Data using Pre-Trained Language Modelscited by 12
- 2023An Assessment of ChatGPT on Log Datacited by 12
38 more
- 2021UniLog: Deploy One Model and Specialize it for All Log Analysis Taskscited by 11
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysiscited by 11
- 2023Heterogeneous Anomaly Detection for Software Systems via Semi-supervised Cross-modal Attentioncited by 9
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2022LogGD:Detecting Anomalies from System Logs by Graph Neural Networkscited by 8
- 2023Graph Neural Networks based Log Anomaly Detection and Explanationcited by 8
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledgecited by 8
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusioncited by 8
- 2021OneLog: Towards End-to-End Training in Software Log Anomaly Detectioncited by 7
- 2021A Comprehensive Survey of Logging in Software: From Logging Statements Automation to Log Mining and Analysiscited by 6
- 2023On the Effectiveness of Log Representation for Log-based Anomaly Detectioncited by 6
- 2023Learning Representations on Logs for AIOpscited by 6
- 2024Demystifying and Extracting Fault-indicating Information from Logs for Failure Diagnosiscited by 6
- 2024A Comparative Study on Large Language Models for Log Parsingcited by 5
- 2021Multi-Source Anomaly Detection in Distributed IT Systemscited by 4
- 2024LogELECTRA: Self-supervised Anomaly Detection for Unstructured Logscited by 4
- 2024Log Parsing using LLMs with Self-Generated In-Context Learning and Self-Correctioncited by 4
- 2022Feature Selection for Fault Detection and Prediction based on Event Log Analysiscited by 3
- 2023Log-based Anomaly Detection based on EVT Theory with feedbackcited by 3
- 2024LibreLog: Accurate and Efficient Unsupervised Log Parsing Using Open-Source Large Language Modelscited by 3
- 2025System Log Parsing with Large Language Models: A Reviewcited by 3
- 2023MoniLog: An Automated Log-Based Anomaly Detection System for Cloud Computing Infrastructurescited by 2
- 2024LUK: Empowering Log Understanding with Expert Knowledge from Large Language Modelscited by 2
- 2026Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safetycited by 2
- 2021Linnaeus: A highly reusable and adaptable ML based log classification pipelinecited by 1
- 2021FlexParser -- the adaptive log file parser for continuous results in a changing worldcited by 1
- 2022Leveraging Log Instructions in Log-based Anomaly Detectioncited by 1
- 2023Try with Simpler -- An Evaluation of Improved Principal Component Analysis in Log-based Anomaly Detectioncited by 1
- 2023LogLead -- Fast and Integrated Log Loader, Enhancer, and Anomaly Detectorcited by 1
- 2025A Novel GPT-Based Framework for Anomaly Detection in System Logscited by 1
- 2026LLM-Enhanced Log Anomaly Detection: A Comprehensive Benchmark of Large Language Models for Automated System Diagnosticscited by 1
- 2026TriCalRAG: A Three-Strategy, Retrieval-Augmented Benchmark for On-Premise LLM-Based Root Cause Analysis in AIOpscited by 1
- 2022Failure Identification from Unstable Log Data using Deep Learningcited by 0
- 2022LogAnMeta: Log Anomaly Detection Using Meta Learningcited by 0
- 2023ClusterLog: Clustering Logs for Effective Log-based Anomaly Detectioncited by 0
- 2023Interactive Log Parsing via Light-weight User Feedbackcited by 0
- 2024MLAD: A Unified Model for Multi-system Log Anomaly Detectioncited by 0
- 2024What Information Contributes to Log-based Anomaly Detection? Insights from a Configurable Transformer-Based Approachcited by 0
50 most cited of 56 All 56 (JSON)
- 2026TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes20 Sep 2026
- 2026TriCalRAG: A Three-Strategy, Retrieval-Augmented Benchmark for On-Premise LLM-Based Root Cause Analysis in AIOps13 Sep 2026
- 2026LogDx-CI: Benchmarking Log Reduction Tools for LLM Root-Cause Diagnosis26 May 2026
- 2026Large Language Models for Agentic NetOps and AIOps: Architectures, Evaluation, and Safety12 May 2026
- 2026LLM-Enhanced Log Anomaly Detection: A Comprehensive Benchmark of Large Language Models for Automated System Diagnostics14 Apr 2026
- 2026On Sequence-to-Sequence Models for Automated Log Parsing7 Feb 2026
- 2026KRONE: Scalable LLM-Augmented Log Anomaly Detection via Hierarchical Abstraction7 Feb 2026
- 2026MicLog: Towards Accurate and Efficient LLM-based Log Parsing via Progressive Meta In-Context Learning11 Jan 2026
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusion12 Dec 2025
- 2025A Novel GPT-Based Framework for Anomaly Detection in System Logs16 Oct 2025
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025System Log Parsing with Large Language Models: A Review7 Apr 2025
38 more
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledge2 Dec 2024
- 2024TPLogAD: Unsupervised Log Anomaly Detection Based on Event Templates and Key Parameters22 Nov 2024
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Models13 Nov 2024
- 2024LogLM: From Task-based to Instruction-based Automated Log Analysis12 Oct 2024
- 2024What Information Contributes to Log-based Anomaly Detection? Insights from a Configurable Transformer-Based Approach30 Sep 2024
- 2024Demystifying and Extracting Fault-indicating Information from Logs for Failure Diagnosis20 Sep 2024
- 2024A Comparative Study on Large Language Models for Log Parsing4 Sep 2024
- 2024LUK: Empowering Log Understanding with Expert Knowledge from Large Language Models3 Sep 2024
- 2024LibreLog: Accurate and Efficient Unsupervised Log Parsing Using Open-Source Large Language Models2 Aug 2024
- 2024Building AI Agents for Autonomous Clouds: Challenges and Design Principles16 Jul 2024
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysis2 Jul 2024
- 2024Log Parsing using LLMs with Self-Generated In-Context Learning and Self-Correction5 Jun 2024
- 2024OptLLM: Optimal Assignment of Queries to Large Language Models24 May 2024
- 2024Automatic Programming: Large Language Models and Beyond3 May 2024
- 2024LogELECTRA: Self-supervised Anomaly Detection for Unstructured Logs16 Feb 2024
- 2024MLAD: A Unified Model for Multi-system Log Anomaly Detection15 Jan 2024
- 2023LogLead -- Fast and Integrated Log Loader, Enhancer, and Anomaly Detector20 Nov 2023
- 2023An Assessment of ChatGPT on Log Data14 Sep 2023
- 2023Try with Simpler -- An Evaluation of Improved Principal Component Analysis in Log-based Anomaly Detection24 Aug 2023
- 2023Learning Representations on Logs for AIOps18 Aug 2023
- 2023On the Effectiveness of Log Representation for Log-based Anomaly Detection17 Aug 2023
- 2023Graph Neural Networks based Log Anomaly Detection and Explanation2 Jul 2023
- 2023Log-based Anomaly Detection based on EVT Theory with feedback8 Jun 2023
- 2023Log Parsing: How Far Can ChatGPT Go?2 Jun 2023
- 2023MoniLog: An Automated Log-Based Anomaly Detection System for Cloud Computing Infrastructures24 Apr 2023
- 2023Heterogeneous Anomaly Detection for Software Systems via Semi-supervised Cross-modal Attention14 Feb 2023
- 2023Interactive Log Parsing via Light-weight User Feedback28 Jan 2023
- 2023ClusterLog: Clustering Logs for Effective Log-based Anomaly Detection19 Jan 2023
- 2022LogAnMeta: Log Anomaly Detection Using Meta Learning21 Dec 2022
- 2022LogGD:Detecting Anomalies from System Logs by Graph Neural Networks16 Sep 2022
- 2022Feature Selection for Fault Detection and Prediction based on Event Log Analysis19 Aug 2022
- 2022Deep Learning for Anomaly Detection in Log Data: A Survey8 Jul 2022
- 2022Leveraging Log Instructions in Log-based Anomaly Detection7 Jul 2022
- 2022Failure Identification from Unstable Log Data using Deep Learning6 Apr 2022
- 2022Log-based Anomaly Detection with Deep Learning: How Far Are We?9 Feb 2022
- 2021UniLog: Deploy One Model and Specialize it for All Log Analysis Tasks6 Dec 2021
- 2021A Comprehensive Survey of Logging in Software: From Logging Statements Automation to Log Mining and Analysis24 Oct 2021
- 2021Log-based Anomaly Detection Without Log Parsing4 Aug 2021
50 newest of 56 All 56 (JSON)
- 2026On Sequence-to-Sequence Models for Automated Log Parsingcited by 0
- 2026On Sequence-to-Sequence Models for Automated Log Parsing7 Feb 2026
- 2021Log-based Anomaly Detection Without Log Parsingcited by 59
- 2022Log-based Anomaly Detection with Deep Learning: How Far Are We?cited by 57
- 2021Experience Report: Deep Learning-based System Log Analysis for Anomaly Detectioncited by 37
- 2024Automatic Programming: Large Language Models and Beyondcited by 36
- 2022Deep Learning for Anomaly Detection in Log Data: A Surveycited by 28
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Modelscited by 22
- 2023Log Parsing: How Far Can ChatGPT Go?cited by 16
- 2024OptLLM: Optimal Assignment of Queries to Large Language Modelscited by 16
- 2024LogLM: From Task-based to Instruction-based Automated Log Analysiscited by 15
- 2021Robust and Transferable Anomaly Detection in Log Data using Pre-Trained Language Modelscited by 12
- 2023An Assessment of ChatGPT on Log Datacited by 12
- 2021UniLog: Deploy One Model and Specialize it for All Log Analysis Taskscited by 11
12 most cited of 51 All 51 (JSON)
- 2026TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes20 Sep 2026
- 2026LogDx-CI: Benchmarking Log Reduction Tools for LLM Root-Cause Diagnosis26 May 2026
- 2026LLM-Enhanced Log Anomaly Detection: A Comprehensive Benchmark of Large Language Models for Automated System Diagnostics14 Apr 2026
- 2026KRONE: Scalable LLM-Augmented Log Anomaly Detection via Hierarchical Abstraction7 Feb 2026
- 2026MicLog: Towards Accurate and Efficient LLM-based Log Parsing via Progressive Meta In-Context Learning11 Jan 2026
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusion12 Dec 2025
- 2025A Novel GPT-Based Framework for Anomaly Detection in System Logs16 Oct 2025
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025System Log Parsing with Large Language Models: A Review7 Apr 2025
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledge2 Dec 2024
- 2024TPLogAD: Unsupervised Log Anomaly Detection Based on Event Templates and Key Parameters22 Nov 2024
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Models13 Nov 2024
12 newest of 51 All 51 (JSON)