Face It Yourselves: An LLM-Based Two-Stage Strategy to Localize Configuration Errors via Logs
Not on the map. Why?
Abstract (arXiv)
Configurable software systems are prone to configuration errors, resulting in significant losses to companies. However, diagnosing these errors is challenging due to the vast and complex configuration space. These errors pose significant challenges for both experienced maintainers and new end-users, particularly those without access to the source code of the software systems. Given that logs are easily accessible to most end-users, we conduct a preliminary study to outline the challenges and opportunities of utilizing logs in localizing configuration errors. Based on the insights gained from the preliminary study, we propose an LLM-based two-stage strategy for end-users to localize the root-cause configuration properties based on logs. We further implement a tool, LogConfigLocalizer, aligned with the design of the aforementioned strategy, hoping to assist end-users in coping with configuration errors through log analysis. To the best of our knowledge, this is the first work to localize the root-cause configuration properties for end-users based on Large Language Models~(LLMs) and logs. We evaluate the proposed strategy on Hadoop by LogConfigLocalizer and prove its efficiency with an average accuracy as high as 99.91%. Additionally, we also demonstrate the effectiveness and necessity of different phases of the methodology by comparing it with two other variants and a baseline tool. Moreover, we validate the proposed methodology through a practical case study to demonstrate its effectiveness and feasibility.
Key facts. Cited by 17 papers in the map (data through 13 Oct 2026). Builds on 9 of its 58 references that are in the map. First posted on arXiv 31 Mar 2024.
Builds on
9 of 58 references.
References · 9
- 2023Automatic Root Cause Analysis via Large Language Models for Cloud Incidentscited by 82
- 2020Loghub: A Large Collection of System Log Datasets for AI-driven Log Analyticscited by 70
- 2021Log-based Anomaly Detection Without Log Parsingcited by 59
- 2020A Survey on Automated Log Analysis for Reliability Engineeringcited by 50
- 2021SemParser: A Semantic Parser for Log Analysiscited by 16
- 2023Log Parsing: How Far Can ChatGPT Go?cited by 16
- 2023Exploring the Effectiveness of LLMs in Automated Logging Generation: An Empirical Studycited by 9
- 2023EvLog: Identifying Anomalous Logs over Software Evolutioncited by 2
- 2021ConfInLog: Leveraging Software Logs to Infer Configuration Constraintscited by 1
Built on by
Citing papers per year: 2024: 5; 2025: 8; 2026: 4.
17 papers.
Sort:
By area:
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 68
- 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
- 2025A Survey of AIOps in the Era of Large Language Modelscited by 19
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysiscited by 10
- 2024LEMMA-RCA: A Large Multi-modal Multi-domain Dataset for Root Cause Analysiscited by 9
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2026Agentic Memory Enhanced Recursive Reasoning for Root Cause Localization in Microservicescited by 9
- 2026Hypothesize-Then-Verify: Speculative Root Cause Analysis for Microservices with Pathwise Parallelismcited by 8
- 2025Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLMcited by 4
- 2025Foundation Models for Anomaly Detection: Vision and Challengescited by 3
- 2024Identifying Performance-Sensitive Configurations in Software Systems through Code Analysis with LLM Agentscited by 2
- 2025SDLog: A Deep Learning Framework for Detecting Sensitive Information in Software Logscited by 2
5 more
- 2024Online Multi-modal Root Cause Identification in Microservice Systemscited by 1
- 2025A Blueprint for AI-Driven Software Quality: Integrating LLMs with Established Standardscited by 1
- 2026Towards In-Depth Root Cause Localization for Microservices with Multi-Agent Recursion-of-Thoughtcited by 1
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniquescited by 0
- 2026Instruction-Tuned LLMs for Parsing and Mining Unstructured Logs on Leadership HPC Systemscited by 0
- 2026Towards In-Depth Root Cause Localization for Microservices with Multi-Agent Recursion-of-Thought14 May 2026
- 2026Instruction-Tuned LLMs for Parsing and Mining Unstructured Logs on Leadership HPC Systems6 Apr 2026
- 2026Hypothesize-Then-Verify: Speculative Root Cause Analysis for Microservices with Pathwise Parallelism6 Jan 2026
- 2026Agentic Memory Enhanced Recursive Reasoning for Root Cause Localization in Microservices6 Jan 2026
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025A Survey of AIOps in the Era of Large Language Models23 Jun 2025
- 2025Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLM3 Jun 2025
- 2025SDLog: A Deep Learning Framework for Detecting Sensitive Information in Software Logs20 May 2025
- 2025A Blueprint for AI-Driven Software Quality: Integrating LLMs with Established Standards19 May 2025
- 2025Frontier AI's Impact on the Cybersecurity Landscape7 Apr 2025
- 2025Foundation Models for Anomaly Detection: Vision and Challenges10 Feb 2025
5 more
- 2024Online Multi-modal Root Cause Identification in Microservice Systems13 Oct 2024
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysis2 Jul 2024
- 2024Identifying Performance-Sensitive Configurations in Software Systems through Code Analysis with LLM Agents18 Jun 2024
- 2024LEMMA-RCA: A Large Multi-modal Multi-domain Dataset for Root Cause Analysis8 Jun 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Review8 May 2024
- 2024Large Language Models for Cyber Security: A Systematic Literature Reviewcited by 68
- 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
- 2025A Survey of AIOps in the Era of Large Language Modelscited by 19
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysiscited by 10
- 2024LEMMA-RCA: A Large Multi-modal Multi-domain Dataset for Root Cause Analysiscited by 9
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2026Hypothesize-Then-Verify: Speculative Root Cause Analysis for Microservices with Pathwise Parallelismcited by 8
- 2025Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLMcited by 4
- 2025Foundation Models for Anomaly Detection: Vision and Challengescited by 3
- 2025SDLog: A Deep Learning Framework for Detecting Sensitive Information in Software Logscited by 2
- 2024Online Multi-modal Root Cause Identification in Microservice Systemscited by 1
- 2025A Blueprint for AI-Driven Software Quality: Integrating LLMs with Established Standardscited by 1
12 most cited of 14 All 14 (JSON)
- 2026Instruction-Tuned LLMs for Parsing and Mining Unstructured Logs on Leadership HPC Systems6 Apr 2026
- 2026Hypothesize-Then-Verify: Speculative Root Cause Analysis for Microservices with Pathwise Parallelism6 Jan 2026
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025A Survey of AIOps in the Era of Large Language Models23 Jun 2025
- 2025Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLM3 Jun 2025
- 2025SDLog: A Deep Learning Framework for Detecting Sensitive Information in Software Logs20 May 2025
- 2025A Blueprint for AI-Driven Software Quality: Integrating LLMs with Established Standards19 May 2025
- 2025Frontier AI's Impact on the Cybersecurity Landscape7 Apr 2025
- 2025Foundation Models for Anomaly Detection: Vision and Challenges10 Feb 2025
- 2024Online Multi-modal Root Cause Identification in Microservice Systems13 Oct 2024
- 2024LogEval: A Comprehensive Benchmark Suite for Large Language Models In Log Analysis2 Jul 2024
12 newest of 14 All 14 (JSON)