{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T03:28:49Z","timestamp":1781062129876,"version":"3.54.1"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030884932","type":"print"},{"value":"9783030884949","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-88494-9_16","type":"book-chapter","created":{"date-parts":[[2021,10,5]],"date-time":"2021-10-05T17:23:18Z","timestamp":1633454598000},"page":"277-287","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["A Theoretical Framework for Understanding the Relationship Between Log Parsing and Anomaly Detection"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0840-6449","authenticated-orcid":false,"given":"Donghwan","family":"Shin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3935-2148","authenticated-orcid":false,"given":"Zanis Ali","family":"Khan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4854-685X","authenticated-orcid":false,"given":"Domenico","family":"Bianculli","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1393-1010","authenticated-orcid":false,"given":"Lionel","family":"Briand","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,10,6]]},"reference":[{"key":"16_CR1","unstructured":"Mohri, M., Rostamizadeh, A., Talwalkar, A.: Foundations of Machine Learning. The MIT Press (2012), https:\/\/dl.acm.org\/doi\/book\/10.5555\/3360093"},{"issue":"1","key":"16_CR2","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1016\/S0012-365X(99)00108-9","volume":"205","author":"M Aigner","year":"1999","unstructured":"Aigner, M.: A characterization of the bell numbers. Discret. Math. 205(1), 207\u2013210 (1999). https:\/\/doi.org\/10.1016\/S0012-365X(99)00108-9","journal-title":"Discret. Math."},{"key":"16_CR3","doi-asserted-by":"publisher","unstructured":"Chandola, V., Banerjee, A., Kumar, V.: Anomaly detection: a survey. ACM Comput. Surv. 41(3), 1-58 (2009). https:\/\/doi.org\/10.1145\/1541880.1541882","DOI":"10.1145\/1541880.1541882"},{"key":"16_CR4","doi-asserted-by":"publisher","unstructured":"Dai, H., Li, H., Chen, C.S., Shang, W., Chen, T.: Logram: efficient log parsing using n-gram dictionaries. IEEE Trans. Softw. Eng. 1 (2020). https:\/\/doi.org\/10.1109\/TSE.2020.3007554","DOI":"10.1109\/TSE.2020.3007554"},{"key":"16_CR5","doi-asserted-by":"crossref","unstructured":"Du, M., Li, F.: Spell: streaming parsing of system event logs. In: 2016 IEEE 16th International Conference on Data Mining (ICDM), pp. 859\u2013864. IEEE, Barcelona, Spain (2016)","DOI":"10.1109\/ICDM.2016.0103"},{"key":"16_CR6","doi-asserted-by":"publisher","unstructured":"El-Masri, D., Petrillo, F., Gu\u00e9h\u00e9neuc, Y.G., Hamou-Lhadj, A., Bouziane, A.: A systematic literature review on automated log abstraction techniques. Inf. Softw. Technol. 122, 106276 (2020). https:\/\/doi.org\/10.1016\/j.infsof.2020.106276","DOI":"10.1016\/j.infsof.2020.106276"},{"key":"16_CR7","doi-asserted-by":"crossref","unstructured":"Hamooni, H., Debnath, B., Xu, J., Zhang, H., Jiang, G., Mueen, A.: Logmine: fast pattern recognition for log analytics. In: Proceedings of the 25th ACM International on Conference on Information and Knowledge Management, pp. 1573\u20131582. Association for Computing Machinery, Indianapolis, IN, USA (2016)","DOI":"10.1145\/2983323.2983358"},{"key":"16_CR8","doi-asserted-by":"crossref","unstructured":"He, P., Zhu, J., Zheng, Z., Lyu, M.R.: Drain: an online log parsing approach with fixed depth tree. In: 2017 IEEE International Conference on Web Services (ICWS), pp. 33\u201340. IEEE, Honolulu, HI, USA (2017)","DOI":"10.1109\/ICWS.2017.13"},{"key":"16_CR9","unstructured":"He, S., He, P., Chen, Z., Yang, T., Su, Y., Lyu, M.R.: A survey on automated log analysis for reliability engineering. CoRR abs\/2009.07237 (2020). https:\/\/arxiv.org\/abs\/2009.07237"},{"key":"16_CR10","unstructured":"He, S., Zhu, J., He, P., Lyu, M.R.: Loghub: a large collection of system log datasets towards automated log analytics (2020)"},{"key":"16_CR11","doi-asserted-by":"crossref","unstructured":"Jiang, Z.M., Hassan, A.E., Flora, P., Hamann, G.: Abstracting execution logs to execution events for enterprise applications. In: 2008 The Eighth International Conference on Quality Software, pp. 181\u2013186. IEEE, Oxford, UK (2008)","DOI":"10.1109\/QSIC.2008.50"},{"key":"16_CR12","doi-asserted-by":"publisher","unstructured":"Liu, Z., Xia, X., Lo, D., Xing, Z., Hassan, A.E., Li, S.: Which variables should i log? IEEE Trans. Softw. Eng. 47(9), 2012\u20132031 (2019). https:\/\/doi.org\/10.1109\/TSE.2019.2941943","DOI":"10.1109\/TSE.2019.2941943"},{"key":"16_CR13","unstructured":"Luke, S.: Essentials of Metaheuristics. Lulu, second edn. (2013), available for free at http:\/\/cs.gmu.edu\/~sean\/book\/metaheuristics\/"},{"key":"16_CR14","doi-asserted-by":"crossref","unstructured":"Makanju, A.A., Zincir-Heywood, A.N., Milios, E.E.: Clustering event logs using iterative partitioning. In: Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 1255\u20131264. Association for Computing Machinery, New York, NY, USA (2009)","DOI":"10.1145\/1557019.1557154"},{"key":"16_CR15","doi-asserted-by":"crossref","unstructured":"Messaoudi, S., Panichella, A., Bianculli, D., Briand, L., Sasnauskas, R.: A search-based approach for accurate identification of log message formats. In: 2018 IEEE\/ACM 26th International Conference on Program Comprehension (ICPC), pp. 167\u201316710. ACM, Association for Computing Machinery, Gothenburg, Sweden (2018)","DOI":"10.1145\/3196321.3196340"},{"key":"16_CR16","doi-asserted-by":"crossref","unstructured":"Mizutani, M.: Incremental mining of system log format. In: 2013 IEEE International Conference on Services Computing, pp. 595\u2013602. IEEE, Santa Clara, CA, USA (2013)","DOI":"10.1109\/SCC.2013.73"},{"key":"16_CR17","doi-asserted-by":"crossref","unstructured":"Nagappan, M., Vouk, M.A.: Abstracting log lines to log event types for mining software system logs. In: 2010 7th IEEE Working Conference on Mining Software Repositories (MSR 2010), pp. 114\u2013117. IEEE, IEEE, Cape Town, South Africa (2010)","DOI":"10.1109\/MSR.2010.5463281"},{"key":"16_CR18","unstructured":"Shima, K.: Length matters: clustering system log messages using length of words (2016)"},{"key":"16_CR19","doi-asserted-by":"crossref","unstructured":"Tang, L., Li, T., Perng, C.S.: Logsig: Generating system events from raw textual logs. In: Proceedings of the 20th ACM International Conference on Information and Knowledge Management, pp. 785\u2013794. ACM, New York, NY, USA (2011)","DOI":"10.1145\/2063576.2063690"},{"key":"16_CR20","doi-asserted-by":"publisher","unstructured":"Vaarandi, R., Pihelgas, M.: Logcluster - a data clustering and pattern mining algorithm for event logs. In: 2015 11th International Conference on Network and Service Management (CNSM), pp. 1\u20137. IEEE, Barcelona, Spain (2015). https:\/\/doi.org\/10.1109\/CNSM.2015.7367331","DOI":"10.1109\/CNSM.2015.7367331"},{"key":"16_CR21","unstructured":"Vaarandi, R.: A data clustering algorithm for mining patterns from event logs. In: Proceedings of the 3rd IEEE Workshop on IP Operations & Management (IPOM 2003)(IEEE Cat. No. 03EX764), pp. 119\u2013126. IEEE, Kansas City, MO, USA (2003)"},{"key":"16_CR22","unstructured":"Yuan, D., Park, S., Huang, P., Liu, Y., Lee, M.M., Tang, X., Zhou, Y., Savage, S.: Be conservative: enhancing failure diagnosis with proactive logging. In: 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12), pp. 293\u2013306. USENIX Association, Hollywood, CA (October 2012). https:\/\/www.usenix.org\/conference\/osdi12\/technical-sessions\/presentation\/yuan"},{"key":"16_CR23","doi-asserted-by":"publisher","unstructured":"Yuan, D., Zheng, J., Park, S., Zhou, Y., Savage, S.: Improving software diagnosability via log enhancement. ACM Trans. Comput. Syst. 30(1), 1-28 (2012). https:\/\/doi.org\/10.1145\/2110356.2110360","DOI":"10.1145\/2110356.2110360"},{"key":"16_CR24","doi-asserted-by":"publisher","unstructured":"Zhao, X., Rodrigues, K., Luo, Y., Stumm, M., Yuan, D., Zhou, Y.: Log20: fully automated optimal placement of log printing statements under specified overhead threshold. In: Proceedings of the 26th Symposium on Operating Systems Principles, pp. 565\u2013581. SOSP 2017, Association for Computing Machinery, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3132747.3132778","DOI":"10.1145\/3132747.3132778"},{"key":"16_CR25","doi-asserted-by":"crossref","unstructured":"Zhu, J., He, S., Liu, J., He, P., Xie, Q., Zheng, Z., Lyu, M.R.: Tools and benchmarks for automated log parsing. In: 2019 IEEE\/ACM 41st International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP), pp. 121\u2013130. IEEE, Madrid, Spain (2019)","DOI":"10.1109\/ICSE-SEIP.2019.00021"}],"container-title":["Lecture Notes in Computer Science","Runtime Verification"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-88494-9_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,5]],"date-time":"2021-10-05T18:12:09Z","timestamp":1633457529000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-88494-9_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030884932","9783030884949"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-88494-9_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"6 October 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"RV","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Runtime Verification","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 October 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 October 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"rv2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/uva-mcps-lab.github.io\/RV21\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"40","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"11","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"28% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}