{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T12:40:31Z","timestamp":1756384831891,"version":"3.41.0"},"publisher-location":"New York, New York, USA","reference-count":34,"publisher":"ACM Press","license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1145\/2663165.2663319","type":"proceedings-article","created":{"date-parts":[[2014,11,26]],"date-time":"2014-11-26T15:45:24Z","timestamp":1417016724000},"page":"253-264","source":"Crossref","is-referenced-by-count":10,"title":["Stage-aware anomaly detection through tracking log points"],"prefix":"10.1145","author":[{"given":"Saeed","family":"Ghanbari","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali B.","family":"Hashemi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristiana","family":"Amza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","reference":[{"key":"key-10.1145\/2663165.2663319-1","unstructured":"Apache Log4j. http:\/\/logging.apache.org\/log4j."},{"key":"key-10.1145\/2663165.2663319-2","unstructured":"Splunk. http:\/\/www.splunk.com\/."},{"key":"key-10.1145\/2663165.2663319-3","unstructured":"Systemtap. http:\/\/sourceware.org\/systemtap\/."},{"key":"key-10.1145\/2663165.2663319-4","unstructured":"The R Project for Statistical Computing. http:\/\/r-project.org\/."},{"key":"key-10.1145\/2663165.2663319-5","unstructured":"Thread local storage. http:\/\/wikipedia.org\/wiki\/thread-local_storage."},{"key":"key-10.1145\/2663165.2663319-6","unstructured":"A. Agarwal, M. Slee, and M. Kwiatkowski. Thrift: Scalable cross-language services implementation. Technical report, Facebook, 2007."},{"key":"key-10.1145\/2663165.2663319-7","unstructured":"P. Barham, A. Donnelly, R. Isaacs, and R. Mortier. Using Magpie for Request Extraction and Workload Modelling. InOSDI, 2004."},{"key":"key-10.1145\/2663165.2663319-8","doi-asserted-by":"crossref","unstructured":"D. Borthakur, J. Gray, J. Sarma, K. Muthukkaruppan, N. Spiegelberg, H. Kuang, K. Ranganathan, D. Molkov, A. Menon, S. Rash, et al. Apache hadoop goes realtime at facebook. InSIGMOD, 2011.","DOI":"10.1145\/1989323.1989438"},{"key":"key-10.1145\/2663165.2663319-9","unstructured":"F. Chang, J. Dean, S. Ghemawat, W. C. Hsieh, D. A. Wallach, M. Burrows, T. Chandra, A. Fikes, and R. E. Gruber. Bigtable: A distributed storage system for structured data.ACM Trans. Comput. Syst., 26(2):4:1--4:26, 2008."},{"key":"key-10.1145\/2663165.2663319-10","unstructured":"M. Y. Chen, A. Accardi, E. Kiciman, D. A. Patterson, A. Fox, and E. A. Brewer. Path-based failure and evolution management. InNSDI, pages 309--322, 2004."},{"key":"key-10.1145\/2663165.2663319-11","doi-asserted-by":"crossref","unstructured":"B. F. Cooper, A. Silberstein, E. Tam, R. Ramakrishnan, and R. Sears. Benchmarking cloud serving systems with YCSB. InSoCC, 2010.","DOI":"10.1145\/1807128.1807152"},{"key":"key-10.1145\/2663165.2663319-12","doi-asserted-by":"crossref","unstructured":"G. DeCandia, D. Hastorun, M. Jampani, G. Kakulapati, A. Lakshman, A. Pilchin, S. Sivasubramanian, P. Vosshall, and W. Vogels. Dynamo: Amazon's highly available key-value store. InSOSP, 2007.","DOI":"10.1145\/1294261.1294281"},{"key":"key-10.1145\/2663165.2663319-13","doi-asserted-by":"crossref","unstructured":"C. Ding and K. Kennedy. Improving cache performance of dynamic applications with computation computation and data layout transformations. InPLDI99, 1999.","DOI":"10.1145\/301618.301670"},{"key":"key-10.1145\/2663165.2663319-14","unstructured":"R. Fonseca, G. Porter, R. H. Katz, S. Shenker, and I. Stoica. X-trace: A pervasive network tracing framework. InNSDI, 2007."},{"key":"key-10.1145\/2663165.2663319-15","doi-asserted-by":"crossref","unstructured":"Q. Fu, J. Lou, Y. Wang, and J. Li. Execution anomaly detection in distributed systems through unstructured log analysis. InICDM, pages 149--158, 2009.","DOI":"10.1109\/ICDM.2009.60"},{"key":"key-10.1145\/2663165.2663319-16","unstructured":"P. Hunt, M. Konar, F. P. Junqueira, and B. Reed. Zookeeper: wait-free coordination for internet-scale systems. InUSENIX annual technical conference, 2010."},{"key":"key-10.1145\/2663165.2663319-17","unstructured":"J. Kreps, N. Narkhede, and J. Rao. Kafka: A distributed messaging system for log processing. InNetDB, 2011."},{"key":"key-10.1145\/2663165.2663319-18","unstructured":"Y. Liang, Y. Zhang, A. Sivasubramaniam, R. Sahoo, J. Moreira, and M. Gupta. Filtering failure logs for a bluegene\/l prototype. InDSN, pages 476--485, 2005."},{"key":"key-10.1145\/2663165.2663319-19","unstructured":"S. Ma and J. L. Hellerstein. Mining partially periodic event patterns with unknown periods. InICDE, 2001."},{"key":"key-10.1145\/2663165.2663319-20","doi-asserted-by":"crossref","unstructured":"A. Makanju, A. Zincir-Heywood, and E. Milios. Clustering event logs using iterative partitioning. InKDD, 2009.","DOI":"10.1145\/1557019.1557154"},{"key":"key-10.1145\/2663165.2663319-21","unstructured":"K. Nagaraj, C. Killian, and J. Neville. Structured comparative analysis of systems logs to diagnose performance problems. InNSDI, pages 26--26, 2012."},{"key":"key-10.1145\/2663165.2663319-22","doi-asserted-by":"crossref","unstructured":"A. Oliner and J. Stearley. What supercomputers say: A study of five system logs. InDSN, pages 575--584, 2007.","DOI":"10.1109\/DSN.2007.103"},{"key":"key-10.1145\/2663165.2663319-23","doi-asserted-by":"crossref","unstructured":"P. O'Neil, E. Cheng, D. Gawlick, and E. O'Neil. The log-structured merge-tree (lsm-tree).Acta Informatica, 33(4):351--385, 1996.","DOI":"10.1007\/s002360050048"},{"key":"key-10.1145\/2663165.2663319-24","unstructured":"P. Reynolds, C. E. Killian, J. L. Wiener, J. C. Mogul, M. A. Shah, and A. Vahdat. Pip: Detecting the unexpected in distributed systems. InNSDI, 2006."},{"key":"key-10.1145\/2663165.2663319-25","doi-asserted-by":"crossref","unstructured":"R. Sambasivan, A. Zheng, M. De Rosa, E. Krevat, S. Whitman, M. Stroucken, W. Wang, L. Xu, and G. Ganger. Diagnosing performance changes by comparing request flows. InNSDI, 2011.","DOI":"10.21236\/ADA528600"},{"key":"key-10.1145\/2663165.2663319-26","unstructured":"B. H. Sigelman, L. A. Barroso, M. Burrows, P. Stephenson, M. Plakal, D. Beaver, S. Jaspan, and C. Shanbhag. Dapper, a large-scale distributed systems tracing infrastructure. Technical report, Google, 2010."},{"key":"key-10.1145\/2663165.2663319-27","doi-asserted-by":"crossref","unstructured":"J. Stearley. Towards informatic analysis of syslogs. InCluster Computing, pages 309--318, 2004.","DOI":"10.1109\/CLUSTR.2004.1392628"},{"key":"key-10.1145\/2663165.2663319-28","doi-asserted-by":"crossref","unstructured":"I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A scalable peer-to-peer lookup service for internet applications. InSIGCOMM '01, pages 149--160, 2001.","DOI":"10.1145\/964723.383071"},{"key":"key-10.1145\/2663165.2663319-29","doi-asserted-by":"crossref","unstructured":"J. Tan, S. Kavulya, R. Gandhi, and P. Narasimhan. Visual, log-based causal tracing for performance debugging of mapreduce systems. InICDCS, pages 795--806, 2010.","DOI":"10.1109\/ICDCS.2010.63"},{"key":"key-10.1145\/2663165.2663319-30","doi-asserted-by":"crossref","unstructured":"W. Xu, L. Huang, A. Fox, D. Patterson, and M. I. Jordan. Detecting large-scale system problems by mining console logs. InSOSP, pages 117--132, 2009.","DOI":"10.1145\/1629575.1629587"},{"key":"key-10.1145\/2663165.2663319-31","doi-asserted-by":"crossref","unstructured":"K. Yamanishi and Y. Maruyama. Dynamic syslog mining for network failure monitoring. InKDD, pages 499--508, 2005.","DOI":"10.1145\/1081870.1081927"},{"key":"key-10.1145\/2663165.2663319-32","doi-asserted-by":"crossref","unstructured":"D. Yuan, H. Mai, W. Xiong, L. Tan, Y. Zhou, and S. Pasupathy. Sherlog: error diagnosis by connecting clues from runtime logs. InASPLOS, pages 143--154, 2010.","DOI":"10.1145\/1735971.1736038"},{"key":"key-10.1145\/2663165.2663319-33","unstructured":"D. Yuan, S. Park, P. Huang, Y. Liu, M. M. Lee, Y. Zhou, and S. Savage. Be conservative: Enhancing failure diagnosis with proactive logging. InOSDI, 2012."},{"key":"key-10.1145\/2663165.2663319-34","doi-asserted-by":"crossref","unstructured":"D. Yuan, J. Zheng, S. Park, Y. Zhou, and S. Savage. Improving software diagnosability via log enhancement. InASPLOS, 2011.","DOI":"10.1145\/1950365.1950369"}],"event":{"number":"15","sponsor":["Raytheon BBN Technologies","IFIP","Conseil R\u00e9gional d'Aquitaine","USENIX","ACM, Association for Computing Machinery","LaBRI","HP","Bordeaux, City of Bordeaux","GDR ASR, GDR Architecture, Syst\u00e8mes et R\u00e9seaux"],"acronym":"Middleware '14","name":"the 15th International Middleware Conference","start":{"date-parts":[[2014,12,8]]},"location":"Bordeaux, France","end":{"date-parts":[[2014,12,12]]}},"container-title":["Proceedings of the 15th International Middleware Conference on - Middleware '14"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2663165.2663319","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/dl.acm.org\/ft_gateway.cfm?id=2663319&ftid=1515766&dwn=1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:13:46Z","timestamp":1750227226000},"score":1,"resource":{"primary":{"URL":"http:\/\/dl.acm.org\/citation.cfm?doid=2663165.2663319"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1145\/2663165.2663319","relation":{},"subject":[],"published":{"date-parts":[[2014]]}}}