LogGPT: Exploring ChatGPT for Log-Based Anomaly Detection
Not on the map. Why?
Abstract (arXiv)
The increasing volume of log data produced by software-intensive systems makes it impractical to analyze them manually. Many deep learning-based methods have been proposed for log-based anomaly detection. These methods face several challenges such as high-dimensional and noisy log data, class imbalance, generalization, and model interpretability. Recently, ChatGPT has shown promising results in various domains. However, there is still a lack of study on the application of ChatGPT for log-based anomaly detection. In this work, we proposed LogGPT, a log-based anomaly detection framework based on ChatGPT. By leveraging the ChatGPT's language interpretation capabilities, LogGPT aims to explore the transferability of knowledge from large-scale corpora to log-based anomaly detection. We conduct experiments to evaluate the performance of LogGPT and compare it with three deep learning-based methods on BGL and Spirit datasets. LogGPT shows promising results and has good interpretability. This study provides preliminary insights into prompt-based models, such as ChatGPT, for the log-based anomaly detection task.
Key facts. Cited by 35 papers in the map (data through 14 Oct 2026). Builds on 17 of its 40 references that are in the map. First posted on arXiv 3 Sep 2023.
Builds on
17 of 40 references.
References · 17
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,031
- 2023Mathematical Capabilities of ChatGPTcited by 268
- 2023Is ChatGPT a Good Recommender? A Preliminary Studycited by 193
- 2023CMATH: Can Your Language Model Pass Chinese Elementary School Math Test?cited by 90
5 more
- 2023Is GPT-4 a Good Data Analyst?cited by 70
- 2022Log-based Anomaly Detection with Deep Learning: How Far Are We?cited by 57
- 2022Generated Faces in the Wild: Quantitative Comparison of Stable Diffusion, Midjourney and DALL-E 2cited by 55
- 2020A Survey on Automated Log Analysis for Reliability Engineeringcited by 50
- 2020Self-Attentive Classification-Based Anomaly Detection in Unstructured Logscited by 36
Built on by
Citing papers per year: 2023: 3; 2024: 6; 2025: 15; 2026: 11.
35 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2023Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Codecited by 62
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Modelscited by 22
- 2024Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detectioncited by 18
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledgecited by 8
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusioncited by 8
- 2024ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMscited by 6
- 2025RedChronos: A Large Language Model-Based Log Analysis System for Insider Threat Detection in Enterprisescited by 6
- 2024RuAG: Learned-rule-augmented Generation for Large Language Modelscited by 5
- 2025Mapping the Landscape of Generative AI in Network Monitoring and Managementcited by 4
23 more
- 2025Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulationcited by 4
- 2023LLMs with User-defined Prompts as Generic Data Operators for Reliable Data Processingcited by 3
- 2025Adapting Large Language Models for Parameter-Efficient Log Anomaly Detectioncited by 3
- 2025LLMLogAnalyzer: A Clustering-Based Log Analysis Chatbot using Large Language Modelscited by 3
- 2026Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluationcited by 3
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysiscited by 2
- 2025DMFI: A Dual-Modality Log Analysis Framework for Insider Threat Detection with LoRA-Tuned Language Modelscited by 1
- 2025Task-Aware Reduction for Scalable LLM-Database Systemscited by 1
- 2025Log2Sig: Frequency-Aware Insider Threat Detection via Multivariate Behavioral Signal Decompositioncited by 0
- 2025EPIC: Generative AI Platform for Accelerating HPC Operational Data Analyticscited by 0
- 2025A global log for medical AIcited by 0
- 2025Automated Fault Detection in 5G Core Networks Using Large Language Modelscited by 0
- 2025Debugging Tabular Log as Dynamic Graphscited by 0
- 2026Log anomaly detection via Meta Learning and Prototypical Networks for Cross domain generalizationcited by 0
- 2026MV-Gate: Insider Threat Detection via Multi-View Behavioral Statistics and Semantic Modelingcited by 0
- 2026LogRouter: Adaptive Two-Level LLM Routing for Log Question Answering in Big Data Systemscited by 0
- 2026FAME: Failure-Aware Mixture-of-Experts for Message-Level Log Anomaly Detectioncited by 0
- 2026GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attackscited by 0
- 2026Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoningcited by 0
- 2026Can Large Language Models Reason about Event-Time Stream-Processing Semantics?cited by 0
- 2026TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetescited by 0
- 2026LLMs are General Asynchronous Agentscited by 0
- 2026SLS-Bench: A Benchmark for Incident Log Summarization with Synthetic Observability Datacited by 0
- 2026SLS-Bench: A Benchmark for Incident Log Summarization with Synthetic Observability Data12 Oct 2026
- 2026LLMs are General Asynchronous Agents28 Sep 2026
- 2026TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes20 Sep 2026
- 2026Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitigation Evaluation16 Jul 2026
- 2026Can Large Language Models Reason about Event-Time Stream-Processing Semantics?17 Jun 2026
- 2026Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning7 Jun 2026
- 2026GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks4 Jun 2026
- 2026FAME: Failure-Aware Mixture-of-Experts for Message-Level Log Anomaly Detection21 May 2026
- 2026LogRouter: Adaptive Two-Level LLM Routing for Log Question Answering in Big Data Systems18 May 2026
- 2026MV-Gate: Insider Threat Detection via Multi-View Behavioral Statistics and Semantic Modeling18 May 2026
- 2026Log anomaly detection via Meta Learning and Prototypical Networks for Cross domain generalization20 Jan 2026
- 2025Debugging Tabular Log as Dynamic Graphs28 Dec 2025
23 more
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusion12 Dec 2025
- 2025Automated Fault Detection in 5G Core Networks Using Large Language Models24 Nov 2025
- 2025LLMLogAnalyzer: A Clustering-Based Log Analysis Chatbot using Large Language Models28 Oct 2025
- 2025Task-Aware Reduction for Scalable LLM-Database Systems13 Oct 2025
- 2025A global log for medical AI5 Oct 2025
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025EPIC: Generative AI Platform for Accelerating HPC Operational Data Analytics29 Aug 2025
- 2025Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation11 Aug 2025
- 2025Log2Sig: Frequency-Aware Insider Threat Detection via Multivariate Behavioral Signal Decomposition6 Aug 2025
- 2025DMFI: A Dual-Modality Log Analysis Framework for Insider Threat Detection with LoRA-Tuned Language Models6 Aug 2025
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysis12 Jun 2025
- 2025Adapting Large Language Models for Parameter-Efficient Log Anomaly Detection11 Mar 2025
- 2025RedChronos: A Large Language Model-Based Log Analysis System for Insider Threat Detection in Enterprises4 Mar 2025
- 2025Mapping the Landscape of Generative AI in Network Monitoring and Management12 Feb 2025
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledge2 Dec 2024
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Models13 Nov 2024
- 2024RuAG: Learned-rule-augmented Generation for Large Language Models4 Nov 2024
- 2024ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs22 Oct 2024
- 2024Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection12 Aug 2024
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Review6 May 2024
- 2023LLMs with User-defined Prompts as Generic Data Operators for Reliable Data Processing26 Dec 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Code14 Nov 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 71
- 2023Unifying the Perspectives of NLP and Software Engineering: A Survey on Language Models for Codecited by 62
- 2024LogLLM: Log-based Anomaly Detection Using Large Language Modelscited by 22
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2024Adapting Large Language Models to Log Analysis with Interpretable Domain Knowledgecited by 8
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusioncited by 8
- 2025RedChronos: A Large Language Model-Based Log Analysis System for Insider Threat Detection in Enterprisescited by 6
- 2025Mapping the Landscape of Generative AI in Network Monitoring and Managementcited by 4
- 2023LLMs with User-defined Prompts as Generic Data Operators for Reliable Data Processingcited by 3
- 2025Adapting Large Language Models for Parameter-Efficient Log Anomaly Detectioncited by 3
- 2025LLMLogAnalyzer: A Clustering-Based Log Analysis Chatbot using Large Language Modelscited by 3
12 most cited of 27 All 27 (JSON)
- 2026SLS-Bench: A Benchmark for Incident Log Summarization with Synthetic Observability Data12 Oct 2026
- 2026TriFleetRCA: On-Premise LLM Root Cause Analysis for Kubernetes20 Sep 2026
- 2026Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning7 Jun 2026
- 2026GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks4 Jun 2026
- 2026LogRouter: Adaptive Two-Level LLM Routing for Log Question Answering in Big Data Systems18 May 2026
- 2026MV-Gate: Insider Threat Detection via Multi-View Behavioral Statistics and Semantic Modeling18 May 2026
- 2026Log anomaly detection via Meta Learning and Prototypical Networks for Cross domain generalization20 Jan 2026
- 2025Debugging Tabular Log as Dynamic Graphs28 Dec 2025
- 2025Log Anomaly Detection with Large Language Models via Knowledge-Enriched Fusion12 Dec 2025
- 2025Automated Fault Detection in 5G Core Networks Using Large Language Models24 Nov 2025
- 2025LLMLogAnalyzer: A Clustering-Based Log Analysis Chatbot using Large Language Models28 Oct 2025
- 2025Task-Aware Reduction for Scalable LLM-Database Systems13 Oct 2025
12 newest of 27 All 27 (JSON)